@cortexkit/opencode-anthropic-auth 1.22.0 → 1.23.0

package/dist/local-login.d.ts

@@ -0,0 +1,64 @@
+import { type CustodyHandleAccount, type CustodyHandleManifestRemovalResult } from '@cortexkit/anthropic-auth-core';
+export type CompletedLocalLogin = {
+    accountId: string;
+    credentialId: string;
+    authFingerprint: string;
+    completedAt: number;
+};
+export type CustodyDivergence = {
+    minimumRecordVersion: number;
+    observedAt: number;
+};
+export type CustodyDivergenceState = {
+    claustrumDivergence?: Record<string, CustodyDivergence>;
+};
+export declare function lastVaultServedRecordVersion(input: {
+    accountId: string;
+    servedVersion?: number;
+    cacheVersion?: number;
+    warn?: (accountId: string) => void;
+}): number;
+export declare function custodyDivergenceMarker(lastVaultServedRecordVersion: number, observedAt: number): CustodyDivergence;
+export declare function custodyPreflightDivergenceCheck(binding: {
+    credentialId: string;
+    recordVersion: number;
+}, state: CustodyDivergenceState): {
+    ok: true;
+} | {
+    ok: false;
+    message: 'missing fresh vault import';
+};
+export declare class CustodyLoginObservationUnavailableError extends Error {
+    readonly code = "custody_login_observation_unavailable";
+    constructor();
+}
+export declare function assertLocalLoginObservationAvailable(env: Record<string, string | undefined>): void;
+export type ObservedLocalAuth = {
+    type: string;
+    access?: string;
+    refresh?: string;
+};
+export declare function localAuthFingerprint(access: string, refresh: string): string;
+export type AcknowledgeLocalOAuthLoginOptions = {
+    manifestPath: string;
+    entry: CustodyHandleAccount;
+    remove?: (input: {
+        path: string;
+        entry: CustodyHandleAccount;
+    }) => Promise<CustodyHandleManifestRemovalResult>;
+    beforeRemove?: () => Promise<void>;
+    divergence?: {
+        statePath: string;
+        lastVaultServedRecordVersion: number;
+    };
+};
+export type AcknowledgeLocalOAuthLoginFromStorageOptions = {
+    accountStoragePath: string;
+    manifestPath: string;
+    remove?: AcknowledgeLocalOAuthLoginOptions['remove'];
+    divergence?: AcknowledgeLocalOAuthLoginOptions['divergence'];
+};
+export type AcknowledgeLocalOAuthLoginResult = 'cleared' | 'not-cleared' | 'refused' | 'refused-transient';
+export declare function acknowledgeLocalOAuthLogin(completion: CompletedLocalLogin | undefined, observedAuth: ObservedLocalAuth | undefined, options: AcknowledgeLocalOAuthLoginOptions): Promise<AcknowledgeLocalOAuthLoginResult>;
+export declare function persistCustodyDivergenceState(statePath: string, credentialId: string, lastVaultServedRecordVersion: number, observedAt: number): Promise<void>;
+export declare function acknowledgeLocalOAuthLoginFromStorage(completion: CompletedLocalLogin | undefined, options: AcknowledgeLocalOAuthLoginFromStorageOptions): Promise<AcknowledgeLocalOAuthLoginResult>;

package/dist/{logger-jrkranbz.js → logger-kk9vyem9.js}

@@ -1 +1 @@
-import{ad as a,bd as b,cd as c,dd as d,ed as e,fd as f,gd as g,hd as h,id as i,jd as j,kd as k,ld as l,md as m}from"./index-8aga2zwv.js";import"./index-cgez4m0h.js";export{d as shouldEmit,b as setLogLevel,m as relayLog,h as redactPayload,a as parseLogLevel,k as logger,l as log,g as isSecretKey,c as getLogLevel,e as getLogFilePath,i as formatLogLine,j as __setLogTestSink,f as SECRET_KEY_EXACT};
+import{ah as a,bh as b,ch as c,dh as d,eh as e,fh as f,gh as g,hh as h,ih as i,jh as j,kh as k,lh as l,mh as m}from"./index-a5d6v3ba.js";import"./index-n96q8pks.js";export{d as shouldEmit,b as setLogLevel,m as relayLog,h as redactPayload,a as parseLogLevel,k as logger,l as log,g as isSecretKey,c as getLogLevel,e as getLogFilePath,i as formatLogLine,j as __setLogTestSink,f as SECRET_KEY_EXACT};

package/dist/prime-manager-registry.d.ts

@@ -3,5 +3,9 @@ type PrimeManagerAdoption = {
     slot: string;
     rebind: (manager: PrimeManager) => void;
 };
-export declare function adoptPrimeManager(storagePath: string, create: () => PrimeManager, adoption: PrimeManagerAdoption): PrimeManager;
+export interface AdoptedPrimeManager {
+    manager: PrimeManager;
+    release: () => void;
+}
+export declare function adoptPrimeManager(storagePath: string, create: () => PrimeManager, adoption: PrimeManagerAdoption): AdoptedPrimeManager;
 export {};

package/dist/rpc/notifications.d.ts

@@ -1,5 +1,5 @@
 import type { OpenDialogPayload, RpcNotification } from './protocol';
-export declare function pushNotification(payload: OpenDialogPayload, sessionId?: string): void;
-export declare function drainNotifications(lastReceivedId?: number, sessionId?: string): RpcNotification[];
-export declare function isTuiConnected(sessionId?: string): boolean;
+export declare function pushNotification(payload: OpenDialogPayload, sessionId: string): void;
+export declare function drainNotifications(lastReceivedId: number, sessionId: string): RpcNotification[];
+export declare function isTuiConnected(sessionId: string): boolean;
 export declare function resetNotificationsForTest(): void;

package/dist/rpc/port-file.js

@@ -1 +1 @@
-import{nd as a,od as b}from"../index-926t2bzc.js";import"../index-cgez4m0h.js";export{a as writePortFile,b as discoverPortFile};
+import{oh as a,ph as b}from"../index-0jfsxyn9.js";import"../index-n96q8pks.js";export{a as writePortFile,b as discoverPortFile};

package/dist/rpc/protocol.d.ts

@@ -1,18 +1,25 @@
+import type { ClaustrumEnrollmentStatus } from '@cortexkit/anthropic-auth-core';
 export declare const COMMAND_MODAL_NAMES: readonly ['claude-account', 'claude-cache', 'claude-cachekeep', 'claude-prime', 'claude-start', 'claude-quota', 'claude-dump', 'claude-fast', 'claude-routing', 'claude-killswitch', 'claude-logging'];
 export type CommandModalName = (typeof COMMAND_MODAL_NAMES)[number];
 export interface AccountDialogAccount {
     id: string;
     label: string;
-    role: string;
+    role: 'main' | 'fallback';
     enabled: boolean;
     quotaPercent: number | null;
     tierLabel?: string;
     claustrumGate: 'on' | 'off' | 'na';
     vaultServed: boolean;
+    vaultReauth: boolean;
+    custodyState: 'na' | 'off' | 'on-vault-served' | 'on-vault-reauth' | 'on-cold' | 'unknown-identity' | 'on-identity-mismatch' | 'on-corrupt-binding';
 }
 export interface AccountDialogKnobs {
     accounts: AccountDialogAccount[];
     claustrumDetection: string;
+    custodyMode?: 'local' | 'claustrum';
+    custodyModeKnown?: boolean;
+    enrollmentStatus?: string;
+    claustrumEnrollment?: ClaustrumEnrollmentStatus;
     [key: string]: unknown;
 }
 export interface OpenDialogPayload {
@@ -24,7 +31,7 @@ export interface RpcNotification {
     id: number;
     type: 'open-dialog';
     payload: OpenDialogPayload;
-    sessionId?: string;
+    sessionId: string;
 }
 export interface ApplyRequest {
     command: CommandModalName;

package/dist/rpc/protocol.js

@@ -1 +1 @@
-import{pd as a}from"../index-bx5hsgf8.js";import"../index-cgez4m0h.js";export{a as COMMAND_MODAL_NAMES};
+import{qh as a}from"../index-8y2t4mwz.js";import"../index-n96q8pks.js";export{a as COMMAND_MODAL_NAMES};

package/dist/rpc/rpc-client.d.ts

@@ -1,6 +1,6 @@
 import type { ApplyRequest, ApplyResult, RpcNotification } from './protocol';
 export interface RpcClient {
-    pending: (lastReceivedId: number, sessionId?: string) => Promise<RpcNotification[]>;
+    pending: (lastReceivedId: number, sessionId: string) => Promise<RpcNotification[]>;
     apply: (request: ApplyRequest) => Promise<ApplyResult>;
 }
 export declare function createRpcClient(dir: string, expectedPid?: number): RpcClient;

package/dist/rpc/rpc-client.js

@@ -1 +1 @@
-import{od as l}from"../index-926t2bzc.js";import"../index-cgez4m0h.js";async function a(n,e,t,o){let r=await l(n,o);if(!r)return null;let i=new AbortController,p=setTimeout(()=>i.abort(),2000);try{let s=await fetch(`http://127.0.0.1:${r.port}/rpc/${e}`,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${r.token}`},body:JSON.stringify(t),signal:i.signal});if(!s.ok)return null;return await s.json()}catch{return null}finally{clearTimeout(p)}}function u(n,e){return{async pending(t,o){return(await a(n,"pending-notifications",{lastReceivedId:t,sessionId:o},e))?.messages??[]},async apply(t){return await a(n,"apply",{...t},e)??{text:"apply failed",knobs:{}}}}}export{u as createRpcClient};
+import{ph as l}from"../index-0jfsxyn9.js";import"../index-n96q8pks.js";async function a(n,e,t,o){let r=await l(n,o);if(!r)return null;let i=new AbortController,p=setTimeout(()=>i.abort(),2000);try{let s=await fetch(`http://127.0.0.1:${r.port}/rpc/${e}`,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${r.token}`},body:JSON.stringify(t),signal:i.signal});if(!s.ok)return null;return await s.json()}catch{return null}finally{clearTimeout(p)}}function u(n,e){return{async pending(t,o){return(await a(n,"pending-notifications",{lastReceivedId:t,sessionId:o},e))?.messages??[]},async apply(t){return await a(n,"apply",{...t},e)??{text:"apply failed",knobs:{}}}}}export{u as createRpcClient};

package/dist/rpc/rpc-dir.js

@@ -1 +1 @@
-import{qd as a,rd as b}from"../index-7f57ewkp.js";import"../index-cgez4m0h.js";export{a as tmpdir,b as getRpcDir};
+import{rh as a,sh as b}from"../index-1gr8v4fn.js";import"../index-n96q8pks.js";export{a as tmpdir,b as getRpcDir};

package/dist/rpc/server-registry.d.ts

@@ -0,0 +1,10 @@
+import type { RpcServerHandle } from './rpc-server';
+export interface RpcServerAdoption {
+    server: RpcServerHandle;
+    release: () => Promise<void>;
+}
+/**
+ * Serializes same-directory replacement and returns an identity-fenced lease.
+ * Distinct project directories remain independent.
+ */
+export declare function adoptRpcServer(rpcDir: string, create: () => Promise<RpcServerHandle>): Promise<RpcServerAdoption>;

package/dist/setup/activation.d.ts

@@ -0,0 +1,7 @@
+import type { ProcessFence } from './types.ts';
+export interface WriteOpenCodeTombstoneOptions {
+    authPath: string;
+    fence?: ProcessFence;
+    beforeRename?: () => Promise<void>;
+}
+export declare function writeOpenCodeTombstoneAuth(options: WriteOpenCodeTombstoneOptions): Promise<void>;

package/dist/setup/claustrum.d.ts

@@ -0,0 +1,26 @@
+import { type ClaustrumEnrollmentClient, type ClaustrumScopedClient } from '@cortexkit/anthropic-auth-core';
+import type { CommandRunner, HarnessKind } from './types.ts';
+export interface SetupClaustrumOptions {
+    paths?: {
+        tokenPath: string;
+        statePath: string;
+    };
+    ckBinary?: string;
+    runner?: CommandRunner;
+    enrollmentClient?: ClaustrumEnrollmentClient & {
+        close?: () => void;
+    };
+    scopedClient?: ClaustrumScopedClient & {
+        close?: () => void;
+    };
+    env?: NodeJS.ProcessEnv;
+}
+export interface SetupClaustrumResult {
+    ok: boolean;
+    message: string;
+    discoveredAccounts: Array<{
+        credentialId: string;
+        accountId: string;
+    }>;
+}
+export declare function setupClaustrumForHost(host: HarnessKind, options?: SetupClaustrumOptions): Promise<SetupClaustrumResult>;

package/dist/setup/command-runner.d.ts

@@ -0,0 +1,2 @@
+import type { CommandRunner } from './types.ts';
+export declare const defaultCommandRunner: CommandRunner;

package/dist/setup/command.d.ts

@@ -0,0 +1,8 @@
+import type { CommandRunner, ProcessFence } from './types.ts';
+export interface SetupCommandOptions {
+    runner?: CommandRunner;
+    fence?: ProcessFence;
+    env?: NodeJS.ProcessEnv;
+    isInteractive?: boolean;
+}
+export declare function runSetupCommand(argv?: string[], options?: SetupCommandOptions): Promise<number>;

package/dist/setup/detect.d.ts

@@ -0,0 +1,5 @@
+import type { ClaustrumDetection, CommandRunner, HostDetection, SetupDetection } from './types.ts';
+export declare function detectOpenCode(env?: NodeJS.ProcessEnv, runner?: CommandRunner): Promise<HostDetection>;
+export declare function detectPi(env?: NodeJS.ProcessEnv, runner?: CommandRunner): Promise<HostDetection>;
+export declare function detectClaustrum(env?: NodeJS.ProcessEnv, runner?: CommandRunner): Promise<ClaustrumDetection>;
+export declare function detectAll(env?: NodeJS.ProcessEnv, runner?: CommandRunner): Promise<SetupDetection>;

package/dist/setup/jsonc.d.ts

@@ -0,0 +1,9 @@
+export declare function readJsonc<T = unknown>(path: string): {
+    value: T | null;
+    text: string;
+    exists: boolean;
+};
+export declare function updateJsoncArray(originalText: string, arrayPath: (string | number)[], entryToInsertOrUpdate: string, matcher: (existing: string) => boolean): {
+    text: string;
+    changed: boolean;
+};

package/dist/setup/opencode-config.d.ts

@@ -0,0 +1,18 @@
+export declare function detectOpenCodeConfigFile(configDir: string): {
+    path: string;
+    exists: boolean;
+};
+export declare function detectOpenCodeTuiConfigFile(configDir: string): {
+    path: string;
+    exists: boolean;
+};
+export declare function ensureOpenCodePluginConfig(version: string, env?: NodeJS.ProcessEnv): Promise<{
+    configPath: string;
+    changed: boolean;
+    created: boolean;
+}>;
+export declare function ensureOpenCodeTuiConfig(version: string, env?: NodeJS.ProcessEnv): Promise<{
+    configPath: string;
+    changed: boolean;
+    created: boolean;
+}>;

package/dist/setup/paths.d.ts

@@ -0,0 +1,15 @@
+export declare const OPENCODE_PACKAGE_NAME = "@cortexkit/opencode-anthropic-auth";
+export declare const PI_PACKAGE_NAME = "@cortexkit/pi-anthropic-auth";
+export declare function getOpenCodeConfigDir(env?: NodeJS.ProcessEnv): string;
+export declare function getOpenCodeDataDir(env?: NodeJS.ProcessEnv): string;
+export declare function getOpenCodeAuthPath(env?: NodeJS.ProcessEnv): string;
+export declare function getPiAgentDir(env?: NodeJS.ProcessEnv): string;
+export declare function getPiAuthPath(env?: NodeJS.ProcessEnv): string;
+export declare function opencodePluginEntry(version: string): string;
+export declare function opencodeTuiEntry(version: string): string;
+export declare function piPluginEntry(version: string): string;
+/**
+ * Robustly resolve the package version from both source (src/setup/paths.ts)
+ * and bundled layouts (dist/cli.js, dist/index.js, etc.).
+ */
+export declare function getSetupPackageVersion(): Promise<string>;

package/dist/setup/pi.d.ts

@@ -0,0 +1,8 @@
+import type { CommandRunner } from './types.ts';
+export declare function isPiPackageInstalled(env?: NodeJS.ProcessEnv): boolean;
+export declare function hasPiLocalAnthropicAuth(env?: NodeJS.ProcessEnv): Promise<boolean>;
+export declare function cleanPiLocalAnthropicAuth(env?: NodeJS.ProcessEnv): Promise<boolean>;
+export declare function installPiExtension(version: string, runner?: CommandRunner, env?: NodeJS.ProcessEnv): Promise<{
+    ok: boolean;
+    message: string;
+}>;

package/dist/setup/process-fence.d.ts

@@ -0,0 +1,14 @@
+import type { CommandRunner, ProcessFence } from './types.ts';
+export declare class ProcessFenceViolationError extends Error {
+    readonly activeHosts: Array<{
+        pid: number;
+        command: string;
+    }>;
+    constructor(activeHosts: Array<{
+        pid: number;
+        command: string;
+    }>);
+}
+export declare function createProcessFence(runner?: CommandRunner): ProcessFence;
+export declare const defaultProcessFence: ProcessFence;
+export declare function assertHostsStopped(fence?: ProcessFence): Promise<void>;

package/dist/setup/types.d.ts

@@ -0,0 +1,37 @@
+export type HarnessKind = 'opencode' | 'pi';
+export interface HostDetection {
+    kind: HarnessKind;
+    installed: boolean;
+    version: string | null;
+    configPath: string;
+    pluginInstalled: boolean;
+    hasLocalAuth?: boolean;
+}
+export interface ClaustrumDetection {
+    ckInstalled: boolean;
+    ckVersion: string | null;
+    daemonRunning: boolean;
+    connectionPath: string | null;
+}
+export interface SetupDetection {
+    opencode: HostDetection;
+    pi: HostDetection;
+    claustrum: ClaustrumDetection;
+}
+export interface CommandRunnerResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+}
+export interface CommandRunner {
+    run(command: string, args: string[], options?: {
+        env?: Record<string, string | undefined>;
+        timeoutMs?: number;
+    }): Promise<CommandRunnerResult>;
+}
+export interface ProcessFence {
+    listRunningHosts(env?: Record<string, string | undefined>): Promise<Array<{
+        pid: number;
+        command: string;
+    }>>;
+}

package/dist/sidebar-state.d.ts

@@ -38,6 +38,8 @@ export interface SidebarAccountState {
     enabled: boolean;
     needsReauth: boolean;
     vaultReauth?: boolean;
+    vaultServed?: boolean;
+    custodyState?: 'off' | 'on-vault-served' | 'on-vault-reauth' | 'on-cold' | 'unknown-identity' | 'on-identity-mismatch' | 'on-corrupt-binding';
     tierLabel?: string;
 }
 export interface FableRecoverySidebarState {
@@ -59,7 +61,7 @@ export interface PrimeSidebarAccountState {
     label: string;
     nextDueAt?: number | null;
     lastPrimedAt?: number | null;
-    lastResult?: 'ok' | 'error';
+    lastResult?: 'ok' | 'error' | 'skipped';
     usage?: PrimeUsageCounters;
     estimatedCostUsd?: number;
 }

package/dist/sidebar-state.js

@@ -1 +1 @@
-import{a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u}from"./index-sh51yqxs.js";import"./index-d3f8g6ve.js";import"./index-8aga2zwv.js";import"./index-cgez4m0h.js";export{i as setSidebarState,k as resolveActiveAccount,c as normalizeSidebarState,a as getSidebarStateFile,h as getSidebarState,f as getInitialSidebarRoutingTestHooks,q as getFableRecoverySummary,r as getCollapsedQuotaSummary,l as formatScopedQuotaLabel,n as formatPrimeTime,o as formatPrimeCost,p as formatPrimeAccountValue,m as formatFallbackModelLabel,j as drainSidebarWrites,u as computeQuotaPacing,d as __setSidebarStateWriteTestHooks,e as __setInitialSidebarRoutingTestHooks,g as __acquireSidebarStateLockForTest,t as SEVEN_DAY_MS,s as FIVE_HOUR_MS,b as DEFAULT_SIDEBAR_STATE};
+import{A as t,B as u,h as a,i as b,j as c,k as d,l as e,m as f,n as g,o as h,p as i,q as j,r as k,s as l,t as m,u as n,v as o,w as p,x as q,y as r,z as s}from"./index-xzbhzz0a.js";import"./index-1fq7h6yd.js";import"./index-a5d6v3ba.js";import"./index-n96q8pks.js";export{i as setSidebarState,k as resolveActiveAccount,c as normalizeSidebarState,a as getSidebarStateFile,h as getSidebarState,f as getInitialSidebarRoutingTestHooks,q as getFableRecoverySummary,r as getCollapsedQuotaSummary,l as formatScopedQuotaLabel,n as formatPrimeTime,o as formatPrimeCost,p as formatPrimeAccountValue,m as formatFallbackModelLabel,j as drainSidebarWrites,u as computeQuotaPacing,d as __setSidebarStateWriteTestHooks,e as __setInitialSidebarRoutingTestHooks,g as __acquireSidebarStateLockForTest,t as SEVEN_DAY_MS,s as FIVE_HOUR_MS,b as DEFAULT_SIDEBAR_STATE};

package/dist/transform.d.ts

@@ -1,4 +1,5 @@
-import { type Cache1hMode, type ClaudeCodeIdentity, type ThinkingPrefixMismatchBehavior } from '@cortexkit/anthropic-auth-core';
+import { type BillingLineageFields, type Cache1hMode, type ClaudeCodeIdentity, type ThinkingPrefixMismatchBehavior } from '@cortexkit/anthropic-auth-core';
+import { type OpenCodeEffortMarkerPlan } from './effort-history';
 import { type ServerSideFallbackOutcome } from './server-fallback';
 export declare const NON_STREAMING_DIAGNOSTICS_MAX_BYTES: number;
 export type FetchInput = string | URL | Request;
@@ -91,10 +92,13 @@ export declare function rewriteRequestBody(body: string, options?: {
     thinkingPrefixMismatchBehavior?: ThinkingPrefixMismatchBehavior;
     midConversationEffortEnabled?: boolean;
     midConversationEffortPlan?: string;
+    midConversationEffortResolvedPlan?: OpenCodeEffortMarkerPlan;
     perf?: RewritePerfCallback;
     hybridStandbyAnchor?: HybridMessageCacheAnchor;
     serverSideFallbackEnabled?: boolean;
+    modelRemapEnabled?: boolean;
     laneStart?: boolean;
+    billingLineage?: BillingLineageFields;
     cacheDiagnosticsPreviousMessageId?: string | null;
 }): Promise<string>;
 type RelayUpstreamStatus = {

package/dist/tui/command-dialogs.d.ts

@@ -1,5 +1,5 @@
 /** @jsxImportSource @opentui/solid */
-import type { PrimeAccountStatus } from '@cortexkit/anthropic-auth-core';
+import { type PrimeAccountStatus } from '@cortexkit/anthropic-auth-core';
 import type { TuiPluginApi } from '@opencode-ai/plugin/tui';
 import type { AccountDialogAccount } from '../rpc/protocol';
 import type { OpenDialogPayload } from '../rpc/protocol.js';
@@ -12,6 +12,19 @@ type KillswitchDialogConfig = {
     main?: Record<string, number>;
     accounts?: Record<string, Record<string, number>>;
 };
+type TuiAccountDialogAccount = Omit<AccountDialogAccount, 'vaultReauth' | 'custodyState'> & Partial<Pick<AccountDialogAccount, 'vaultReauth' | 'custodyState'>>;
+type TuiAccountDialogPayload = {
+    accounts: TuiAccountDialogAccount[];
+    claustrumDetection: string;
+    custodyMode?: TuiCustodyMode;
+    enrollmentStatus?: string;
+};
+type TuiCustodyMode = 'local' | 'claustrum' | `mismatch: ${string}`;
+type AccountDialogOption = {
+    title: string;
+    value: string;
+    description?: string;
+};
 export declare const PRIME_DIALOG_OPTIONS: {
     title: string;
     value: string;
@@ -20,11 +33,23 @@ export declare function handlePrimeStatusOption(option: {
     value: string;
 }, renderMain: () => void): void;
 export declare function buildKillswitchThresholdSeed(config: KillswitchDialogConfig, accountIds: string[]): string;
-export declare function buildAccountDialogOption(account: AccountDialogAccount): {
+export declare function normalizeAccountDialogPayload(value: unknown): TuiAccountDialogPayload;
+export declare function buildAccountDialogOption(account: TuiAccountDialogAccount): {
     title: string;
     value: string;
     description?: string | undefined;
 };
+export declare function buildManageAccountOptions(account: TuiAccountDialogAccount): AccountDialogOption[];
+export declare function buildAccountDialogL1(value: unknown): {
+    header: string;
+    options: AccountDialogOption[];
+    enrollmentStatus?: string;
+    modeAction?: {
+        command: 'claude-account';
+        arguments: 'local' | 'claustrum';
+    };
+};
+export declare function retainAccountDialogProjection(current: Record<string, unknown>, incoming: Record<string, unknown>): Record<string, unknown>;
 /**
  * Format the per-account status lines shown in the Claude prime Status
  * view. Pure: consumed by the dialog's Status pane; the sidebar uses a

package/dist/tui-preferences.js

@@ -1,6 +1,6 @@
-import{sd as c,td as C,ud as v}from"./index-cgez4m0h.js";var m=C((h,k)=>{(function(Q){if(typeof k==="object"&&typeof k.exports==="object"){var J=Q(v,h);if(J!==void 0)k.exports=J}else if(typeof define==="function"&&define.amd)define(["require","exports","./impl/format","./impl/edit","./impl/scanner","./impl/parser"],Q)})(function(Q,J){Object.defineProperty(J,"__esModule",{value:!0}),J.applyEdits=J.modify=J.format=J.printParseErrorCode=J.ParseErrorCode=J.stripComments=J.visit=J.getNodeValue=J.getNodePath=J.findNodeAtOffset=J.findNodeAtLocation=J.parseTree=J.parse=J.getLocation=J.SyntaxKind=J.ScanError=J.createScanner=void 0;let X=Q("./impl/format"),G=Q("./impl/edit"),Z=Q("./impl/scanner"),$=Q("./impl/parser");J.createScanner=Z.createScanner;var V;(function(z){z[z.None=0]="None",z[z.UnexpectedEndOfComment=1]="UnexpectedEndOfComment",z[z.UnexpectedEndOfString=2]="UnexpectedEndOfString",z[z.UnexpectedEndOfNumber=3]="UnexpectedEndOfNumber",z[z.InvalidUnicode=4]="InvalidUnicode",z[z.InvalidEscapeCharacter=5]="InvalidEscapeCharacter",z[z.InvalidCharacter=6]="InvalidCharacter"})(V||(J.ScanError=V={}));var Y;(function(z){z[z.OpenBraceToken=1]="OpenBraceToken",z[z.CloseBraceToken=2]="CloseBraceToken",z[z.OpenBracketToken=3]="OpenBracketToken",z[z.CloseBracketToken=4]="CloseBracketToken",z[z.CommaToken=5]="CommaToken",z[z.ColonToken=6]="ColonToken",z[z.NullKeyword=7]="NullKeyword",z[z.TrueKeyword=8]="TrueKeyword",z[z.FalseKeyword=9]="FalseKeyword",z[z.StringLiteral=10]="StringLiteral",z[z.NumericLiteral=11]="NumericLiteral",z[z.LineCommentTrivia=12]="LineCommentTrivia",z[z.BlockCommentTrivia=13]="BlockCommentTrivia",z[z.LineBreakTrivia=14]="LineBreakTrivia",z[z.Trivia=15]="Trivia",z[z.Unknown=16]="Unknown",z[z.EOF=17]="EOF"})(Y||(J.SyntaxKind=Y={})),J.getLocation=$.getLocation,J.parse=$.parse,J.parseTree=$.parseTree,J.findNodeAtLocation=$.findNodeAtLocation,J.findNodeAtOffset=$.findNodeAtOffset,J.getNodePath=$.getNodePath,J.getNodeValue=$.getNodeValue,J.visit=$.visit,J.stripComments=$.stripComments;var A;(function(z){z[z.InvalidSymbol=1]="InvalidSymbol",z[z.InvalidNumberFormat=2]="InvalidNumberFormat",z[z.PropertyNameExpected=3]="PropertyNameExpected",z[z.ValueExpected=4]="ValueExpected",z[z.ColonExpected=5]="ColonExpected",z[z.CommaExpected=6]="CommaExpected",z[z.CloseBraceExpected=7]="CloseBraceExpected",z[z.CloseBracketExpected=8]="CloseBracketExpected",z[z.EndOfFileExpected=9]="EndOfFileExpected",z[z.InvalidCommentToken=10]="InvalidCommentToken",z[z.UnexpectedEndOfComment=11]="UnexpectedEndOfComment",z[z.UnexpectedEndOfString=12]="UnexpectedEndOfString",z[z.UnexpectedEndOfNumber=13]="UnexpectedEndOfNumber",z[z.InvalidUnicode=14]="InvalidUnicode",z[z.InvalidEscapeCharacter=15]="InvalidEscapeCharacter",z[z.InvalidCharacter=16]="InvalidCharacter"})(A||(J.ParseErrorCode=A={}));function L(z){switch(z){case 1:return"InvalidSymbol";case 2:return"InvalidNumberFormat";case 3:return"PropertyNameExpected";case 4:return"ValueExpected";case 5:return"ColonExpected";case 6:return"CommaExpected";case 7:return"CloseBraceExpected";case 8:return"CloseBracketExpected";case 9:return"EndOfFileExpected";case 10:return"InvalidCommentToken";case 11:return"UnexpectedEndOfComment";case 12:return"UnexpectedEndOfString";case 13:return"UnexpectedEndOfNumber";case 14:return"InvalidUnicode";case 15:return"InvalidEscapeCharacter";case 16:return"InvalidCharacter"}return"<unknown ParseErrorCode>"}J.printParseErrorCode=L;function W(z,B,j){return X.format(z,B,j)}J.format=W;function q(z,B,j,R){return G.setProperty(z,B,j,R)}J.modify=q;function O(z,B){let j=B.slice(0).sort((M,N)=>{let T=M.offset-N.offset;if(T===0)return M.length-N.length;return T}),R=z.length;for(let M=j.length-1;M>=0;M--){let N=j[M];if(N.offset+N.length<=R)z=G.applyEdit(z,N);else throw Error("Overlapping edit");R=N.offset}return z}J.applyEdits=O})});var I=c(m(),1);import{readFileSync as y,watch as S}from"node:fs";import{mkdir as E,readFile as g,rename as p,writeFile as l}from"node:fs/promises";import{homedir as x}from"node:os";import{basename as i,dirname as P,join as w}from"node:path";import{clearTimeout as _,setTimeout as f}from"node:timers";var s="OPENCODE_TUI_PREFERENCES_FILE",d="tui-preferences.jsonc";function b(){let Q=process.env[s];if(Q)return Q;let J=process.env.OPENCODE_CONFIG_DIR||w(process.env.XDG_CONFIG_HOME||w(x(),".config"),"opencode");return w(J,d)}function U(Q){return typeof Q==="object"&&Q!==null&&!Array.isArray(Q)}async function Yz(){try{let Q=await g(b(),"utf8"),J=[],X=I.parse(Q,J,{allowTrailingComma:!0});if(J.length>0)return{};return U(X)?X:{}}catch{return{}}}var n="anthropic-auth",t=160,u={forceToTop:!1,order:t,startCollapsed:!1,rememberCollapsed:!0,collapsed:null,pollMs:1500,refreshDebounceMs:200,header:{label:"CLAUDE",showVersion:!0},sections:{quota:!0,fallbackAccounts:!0,routing:!0,cache:!0,health:!0,pacing:!0},appearance:{barWidth:10,barFilledChar:"█",barEmptyChar:"░",warnThreshold:50,errorThreshold:80}};function H(Q,J){return typeof Q==="boolean"?Q:J}function D(Q,J,X,G){if(typeof Q!=="number"||!Number.isFinite(Q))return J;return Math.min(Math.max(Math.round(Q),X),G)}function a(Q,J,X){if(typeof Q!=="string"||Q.length===0)return J;return Q.slice(0,X)}function K(Q,J){if(typeof Q!=="string")return J;return[...Q][0]??J}function Bz(Q){let J=Q[n];if(!U(J))return structuredClone(u);let X=u,G=U(J.header)?J.header:{},Z=U(J.sections)?J.sections:{},$=U(J.appearance)?J.appearance:{},V=D($.warnThreshold,X.appearance.warnThreshold,0,99),Y=Math.max(D($.errorThreshold,X.appearance.errorThreshold,0,100),Math.min(V+1,100));return{forceToTop:H(J.forceToTop,X.forceToTop),order:D(J.order,X.order,-1e4,1e4),startCollapsed:H(J.startCollapsed,X.startCollapsed),rememberCollapsed:H(J.rememberCollapsed,X.rememberCollapsed),collapsed:typeof J.collapsed==="boolean"?J.collapsed:null,pollMs:D(J.pollMs,X.pollMs,500,30000),refreshDebounceMs:D(J.refreshDebounceMs,X.refreshDebounceMs,50,5000),header:{label:a(G.label,X.header.label,20),showVersion:H(G.showVersion,X.header.showVersion)},sections:{quota:H(Z.quota,X.sections.quota),fallbackAccounts:H(Z.fallbackAccounts,X.sections.fallbackAccounts),routing:H(Z.routing,X.sections.routing),cache:H(Z.cache,X.sections.cache),health:H(Z.health,X.sections.health),pacing:H(Z.pacing,X.sections.pacing)},appearance:{barWidth:D($.barWidth,X.appearance.barWidth,4,40),barFilledChar:K($.barFilledChar,X.appearance.barFilledChar),barEmptyChar:K($.barEmptyChar,X.appearance.barEmptyChar),warnThreshold:V,errorThreshold:Y}}}var o=-1e5;function Hz(Q,J,X){let G=Q[J];if(!U(G))return X;if(G.forceToTop===!0)return o+Object.keys(Q).indexOf(J);return D(G.order,X,-1e4,1e4)}var e=`// Shared preferences for opencode TUI plugins.
+import{nh as _}from"./index-xxhyhp98.js";import{th as C}from"./index-n96q8pks.js";var W=C(_(),1);import{readFileSync as E,watch as b}from"node:fs";import{mkdir as g,readFile as A,rename as F,writeFile as T}from"node:fs/promises";import{homedir as y}from"node:os";import{basename as f,dirname as x,join as D}from"node:path";import{clearTimeout as U,setTimeout as R}from"node:timers";var v="OPENCODE_TUI_PREFERENCES_FILE",h="tui-preferences.jsonc";function K(){let J=process.env[v];if(J)return J;let z=process.env.OPENCODE_CONFIG_DIR||D(process.env.XDG_CONFIG_HOME||D(y(),".config"),"opencode");return D(z,h)}function H(J){return typeof J==="object"&&J!==null&&!Array.isArray(J)}async function e(){try{let J=await A(K(),"utf8"),z=[],q=W.parse(J,z,{allowTrailingComma:!0});if(z.length>0)return{};return H(q)?q:{}}catch{return{}}}var m="anthropic-auth",p=160,w={forceToTop:!1,order:p,startCollapsed:!1,rememberCollapsed:!0,collapsed:null,pollMs:1500,refreshDebounceMs:200,header:{label:"CLAUDE",showVersion:!0},sections:{quota:!0,fallbackAccounts:!0,routing:!0,cache:!0,health:!0,pacing:!0},appearance:{barWidth:10,barFilledChar:"█",barEmptyChar:"░",warnThreshold:50,errorThreshold:80}};function $(J,z){return typeof J==="boolean"?J:z}function Y(J,z,q,X){if(typeof J!=="number"||!Number.isFinite(J))return z;return Math.min(Math.max(Math.round(J),q),X)}function c(J,z,q){if(typeof J!=="string"||J.length===0)return z;return J.slice(0,q)}function P(J,z){if(typeof J!=="string")return z;return[...J][0]??z}function qq(J){let z=J[m];if(!H(z))return structuredClone(w);let q=w,X=H(z.header)?z.header:{},Q=H(z.sections)?z.sections:{},Z=H(z.appearance)?z.appearance:{},G=Y(Z.warnThreshold,q.appearance.warnThreshold,0,99),V=Math.max(Y(Z.errorThreshold,q.appearance.errorThreshold,0,100),Math.min(G+1,100));return{forceToTop:$(z.forceToTop,q.forceToTop),order:Y(z.order,q.order,-1e4,1e4),startCollapsed:$(z.startCollapsed,q.startCollapsed),rememberCollapsed:$(z.rememberCollapsed,q.rememberCollapsed),collapsed:typeof z.collapsed==="boolean"?z.collapsed:null,pollMs:Y(z.pollMs,q.pollMs,500,30000),refreshDebounceMs:Y(z.refreshDebounceMs,q.refreshDebounceMs,50,5000),header:{label:c(X.label,q.header.label,20),showVersion:$(X.showVersion,q.header.showVersion)},sections:{quota:$(Q.quota,q.sections.quota),fallbackAccounts:$(Q.fallbackAccounts,q.sections.fallbackAccounts),routing:$(Q.routing,q.sections.routing),cache:$(Q.cache,q.sections.cache),health:$(Q.health,q.sections.health),pacing:$(Q.pacing,q.sections.pacing)},appearance:{barWidth:Y(Z.barWidth,q.appearance.barWidth,4,40),barFilledChar:P(Z.barFilledChar,q.appearance.barFilledChar),barEmptyChar:P(Z.barEmptyChar,q.appearance.barEmptyChar),warnThreshold:G,errorThreshold:V}}}var u=-1e5;function zq(J,z,q){let X=J[z];if(!H(X))return q;if(X.forceToTop===!0)return u+Object.keys(J).indexOf(z);return Y(X.order,q,-1e4,1e4)}var s=`// Shared preferences for opencode TUI plugins.
 // One top-level key per plugin (short name). See each plugin's README for
 // its supported settings. This file is safe to hand-edit; plugins update
 // individual keys in place and preserve comments.
 {}
-`;async function r(Q,J,X){let G=b();await E(P(G),{recursive:!0});let Z;try{Z=await g(G,"utf8")}catch{Z=""}if(Z.trim()==="")Z=e;let $=I.modify(Z,[Q,...J],X,{formattingOptions:{insertSpaces:!0,tabSize:2}}),V=I.applyEdits(Z,$),Y=`${G}.${process.pid}.tmp`;await l(Y,V,"utf8"),await p(Y,G)}var F=Promise.resolve();function Wz(Q,J,X){return F=F.then(()=>r(Q,J,X)).catch(()=>{}),F}var zz=150,Jz=100;function jz(Q,J={}){let X=b(),G=i(X),Z=null,$=null;try{$=y(X,"utf8")}catch{}let V=!1,Y=async()=>{let z=await g(X,"utf8").catch(()=>null);if(V||z===null)return;if(z===$)return;$=z,Q()},A=()=>{if(Z)_(Z);Z=f(()=>{Z=null,Y()},zz)},L=null;try{L=(J.watchDirectory??S)(P(X),(z,B)=>{let j=B===G||B?.startsWith(`${G}.`)&&B.endsWith(".tmp");if(B!=null&&!j)return;A()})}catch{if($===null)return()=>{}}let W=null,q=!1,O=()=>{if(V||W)return;W=f(()=>{if(W=null,V||q)return;q=!0,Y().finally(()=>{q=!1,O()})},Jz),W.unref?.()};return O(),()=>{if(V=!0,Z)_(Z);if(W)_(W);L?.close()}}export{jz as watchTuiPreferences,Bz as resolveAnthropicAuthPrefs,Yz as readTuiPreferencesFile,Wz as queueTuiPreferenceUpdate,b as getTuiPreferencesFile,Hz as computeEffectiveOrder,s as TUI_PREFS_FILE_ENV,n as PLUGIN_KEY,t as DEFAULT_SLOT_ORDER,u as DEFAULT_PREFS};
+`;async function d(J,z,q){let X=K();await g(x(X),{recursive:!0});let Q;try{Q=await A(X,"utf8")}catch{Q=""}if(Q.trim()==="")Q=s;let Z=W.modify(Q,[J,...z],q,{formattingOptions:{insertSpaces:!0,tabSize:2}}),G=W.applyEdits(Q,Z),V=`${X}.${process.pid}.tmp`;await T(V,G,"utf8"),await F(V,X)}var I=Promise.resolve();function Jq(J,z,q){return I=I.then(()=>d(J,z,q)).catch(()=>{}),I}var o=150,n=100;function Qq(J,z={}){let q=K(),X=f(q),Q=null,Z=null;try{Z=E(q,"utf8")}catch{}let G=!1,V=async()=>{let j=await A(q,"utf8").catch(()=>null);if(G||j===null)return;if(j===Z)return;Z=j,J()},S=()=>{if(Q)U(Q);Q=R(()=>{Q=null,V()},o)},O=null;try{O=(z.watchDirectory??b)(x(q),(j,M)=>{let k=M===X||M?.startsWith(`${X}.`)&&M.endsWith(".tmp");if(M!=null&&!k)return;S()})}catch{if(Z===null)return()=>{}}let B=null,N=!1,L=()=>{if(G||B)return;B=R(()=>{if(B=null,G||N)return;N=!0,V().finally(()=>{N=!1,L()})},n),B.unref?.()};return L(),()=>{if(G=!0,Q)U(Q);if(B)U(B);O?.close()}}export{Qq as watchTuiPreferences,qq as resolveAnthropicAuthPrefs,e as readTuiPreferencesFile,Jq as queueTuiPreferenceUpdate,K as getTuiPreferencesFile,zq as computeEffectiveOrder,v as TUI_PREFS_FILE_ENV,m as PLUGIN_KEY,p as DEFAULT_SLOT_ORDER,w as DEFAULT_PREFS};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortexkit/opencode-anthropic-auth",
-  "version": "1.22.0",
+  "version": "1.23.0",
   "type": "module",
   "repository": {
     "type": "git",
@@ -45,9 +45,10 @@
     "LICENSE"
   ],
   "scripts": {
-    "build": "rm -rf dist && bun build src/index.ts src/cli.ts src/sidebar-state.ts src/tui-preferences.ts src/rpc/rpc-client.ts src/rpc/port-file.ts src/rpc/protocol.ts src/rpc/rpc-dir.ts --outdir dist --target node --format esm --splitting --external @opencode-ai/plugin --minify && tsc -p tsconfig.build.json --emitDeclarationOnly && bun run build:tui",
+    "build": "rm -rf dist && bun build src/index.ts src/cli.ts src/sidebar-state.ts src/tui-preferences.ts src/rpc/rpc-client.ts src/rpc/port-file.ts src/rpc/protocol.ts src/rpc/rpc-dir.ts --outdir dist --target node --format esm --splitting --external @opencode-ai/plugin --minify && tsc -p tsconfig.build.json --emitDeclarationOnly && bun run build:tui && bun run check:bundle",
     "build:tui": "bun scripts/build-tui.ts",
     "smoke:tui": "bun scripts/smoke-tui-pack-install.ts",
+    "check:bundle": "bun scripts/check-bundle-globals.ts",
     "build:dev": "rm -rf dist && tsc -p tsconfig.build.json",
     "dev": "bun ../../scripts/dev.ts",
     "dev:clean": "bun ../../scripts/dev-clean.ts",
@@ -61,10 +62,14 @@
     "@opencode-ai/plugin": "*"
   },
   "dependencies": {
-    "@cortexkit/anthropic-auth-core": "1.22.0",
-    "@opentui/core": "0.5.7",
-    "@opentui/solid": "0.5.7",
+    "@clack/prompts": "^1.6.0",
+    "@cortexkit/anthropic-auth-core": "1.23.0",
+    "@opentui/core": "0.5.11",
+    "@opentui/solid": "0.5.11",
     "jsonc-parser": "^3.3.1",
     "solid-js": "1.9.12"
+  },
+  "devDependencies": {
+    "@ai-sdk/anthropic": "3.0.111"
   }
 }

package/src/rpc/notifications.ts

@@ -3,52 +3,56 @@ import type { OpenDialogPayload, RpcNotification } from './protocol'
 const QUEUE_CAP = 100
 const TUI_CONNECTED_WINDOW_MS = 3_000
 
+// One queue serves every RPC server in the process, and a process can hold one
+// server per project directory. Session ids are globally unique, so both
+// producers and drains require one: an unscoped drain could otherwise expose
+// another project's pending command dialog.
 let queue: RpcNotification[] = []
 let nextId = 1
-let lastDrainAtAny = 0
 const lastDrainAtBySession = new Map<string, number>()
 
+function assertSessionId(sessionId: string): void {
+  if (typeof sessionId !== 'string' || sessionId.length === 0) {
+    throw new TypeError('sessionId is required')
+  }
+}
+
 export function pushNotification(
   payload: OpenDialogPayload,
-  sessionId?: string,
+  sessionId: string,
 ): void {
+  assertSessionId(sessionId)
   queue.push({ id: nextId++, type: 'open-dialog', payload, sessionId })
   if (queue.length > QUEUE_CAP) queue = queue.slice(queue.length - QUEUE_CAP)
 }
 
 export function drainNotifications(
-  lastReceivedId = 0,
-  sessionId?: string,
+  lastReceivedId: number,
+  sessionId: string,
 ): RpcNotification[] {
-  const now = Date.now()
-  lastDrainAtAny = now
-  if (sessionId !== undefined) lastDrainAtBySession.set(sessionId, now)
-  const matches = (n: RpcNotification) =>
-    sessionId === undefined ||
-    n.sessionId === undefined ||
-    n.sessionId === sessionId
+  assertSessionId(sessionId)
+  lastDrainAtBySession.set(sessionId, Date.now())
   if (lastReceivedId > 0) {
-    queue = queue.filter((n) => {
-      if (n.id > lastReceivedId) return true
-      if (sessionId === undefined) return false
-      return n.sessionId !== sessionId
-    })
+    queue = queue.filter(
+      (notification) =>
+        notification.id > lastReceivedId ||
+        notification.sessionId !== sessionId,
+    )
   }
-  return queue.filter((n) => n.id > lastReceivedId && matches(n))
+  return queue.filter(
+    (notification) =>
+      notification.id > lastReceivedId && notification.sessionId === sessionId,
+  )
 }
 
-export function isTuiConnected(sessionId?: string): boolean {
+export function isTuiConnected(sessionId: string): boolean {
   const now = Date.now()
-  if (sessionId !== undefined) {
-    const at = lastDrainAtBySession.get(sessionId) ?? 0
-    return at > 0 && now - at < TUI_CONNECTED_WINDOW_MS
-  }
-  return lastDrainAtAny > 0 && now - lastDrainAtAny < TUI_CONNECTED_WINDOW_MS
+  const at = lastDrainAtBySession.get(sessionId) ?? 0
+  return at > 0 && now - at < TUI_CONNECTED_WINDOW_MS
 }
 
 export function resetNotificationsForTest(): void {
   queue = []
   nextId = 1
-  lastDrainAtAny = 0
   lastDrainAtBySession.clear()
 }