@cortexkit/opencode-anthropic-auth 1.22.0 → 2.0.0

package/src/tui/command-dialogs.tsx

@@ -1,10 +1,277 @@
 /** @jsxImportSource @opentui/solid */
-import type { PrimeAccountStatus } from '@cortexkit/anthropic-auth-core'
+
+import type {
+  CommandApplyRequest,
+  CommandApplyResult,
+  CommandDialogPayload,
+  CommandMenuModel,
+  KnobValue,
+  MenuAction,
+  MenuItem,
+  MenuSection,
+} from '@cortexkit/anthropic-auth-core'
+import {
+  custodyStatusLabel,
+  type PrimeAccountStatus,
+} from '@cortexkit/anthropic-auth-core'
 import type { TuiPluginApi } from '@opencode-ai/plugin/tui'
 import type { AccountDialogAccount } from '../rpc/protocol'
 import type { OpenDialogPayload } from '../rpc/protocol.js'
 import { formatPrimeCost, formatPrimeTime } from '../sidebar-state.js'
 
+/** Render menu sections, accounts and action inputs; send changes to the host instead of writing credentials here. */
+export function openNativeMenuDialog(
+  api: {
+    readonly ui: Pick<
+      TuiPluginApi['ui'],
+      'dialog' | 'DialogSelect' | 'DialogPrompt' | 'DialogConfirm' | 'toast'
+    >
+  },
+  payload: CommandDialogPayload,
+  apply: (request: CommandApplyRequest) => Promise<CommandApplyResult>,
+  isCurrentSession: () => boolean,
+): void {
+  let menu: CommandMenuModel = payload.menu
+  let inFlight = false
+  const DialogSelect = api.ui.DialogSelect<string>
+  const DialogPrompt = api.ui.DialogPrompt
+  const DialogConfirm = api.ui.DialogConfirm
+  const active = () => isCurrentSession() && !inFlight
+
+  const root = () => {
+    if (!active()) return
+    api.ui.dialog.setSize('xlarge')
+    api.ui.dialog.replace(() => (
+      <DialogSelect
+        title={menu.title}
+        options={[
+          ...menu.sections.map((section) => ({
+            title: section.title,
+            value: section.id,
+          })),
+          { title: 'Close', value: '__close' },
+        ]}
+        onSelect={(option) => {
+          if (!active()) return
+          const section = menu.sections.find(
+            (entry) => entry.id === option.value,
+          )
+          if (section) showSection(section)
+          else if (option.value === '__close') api.ui.dialog.clear()
+        }}
+      />
+    ))
+  }
+
+  const showSection = (section: MenuSection) => {
+    if (!active()) return
+    api.ui.dialog.replace(() => (
+      <box flexDirection='column' padding={1}>
+        <text>{section.lines.join('\n')}</text>
+        <DialogSelect
+          title={section.title}
+          options={[
+            ...section.items.map((item) => ({
+              title: item.label,
+              value: `item:${item.id}`,
+              description: item.detail,
+            })),
+            ...section.actions.map((action) => ({
+              title: action.label,
+              value: `action:${action.id}`,
+              description: action.description,
+            })),
+            { title: 'Back', value: '__back' },
+          ]}
+          onSelect={(option) => {
+            if (!active()) return
+            if (option.value === '__back') return root()
+            const action = section.actions.find(
+              (entry) => `action:${entry.id}` === option.value,
+            )
+            if (action) return collect(section, action)
+            const item = section.items.find(
+              (entry) => `item:${entry.id}` === option.value,
+            )
+            if (item) showItem(section, item)
+          }}
+        />
+      </box>
+    ))
+  }
+
+  const showItem = (section: MenuSection, item: MenuItem) => {
+    if (!active()) return
+    api.ui.dialog.replace(() => (
+      <box flexDirection='column' padding={1}>
+        <text>{item.detail ?? ''}</text>
+        <DialogSelect
+          title={item.label}
+          options={[
+            ...item.actions.map((action) => ({
+              title: action.label,
+              value: action.id,
+              description: action.description,
+            })),
+            { title: 'Back', value: '__back' },
+          ]}
+          onSelect={(option) => {
+            if (!active()) return
+            const action = item.actions.find(
+              (entry) => entry.id === option.value,
+            )
+            if (action) collect(section, action, item)
+            else if (option.value === '__back') showSection(section)
+          }}
+        />
+      </box>
+    ))
+  }
+
+  const collect = (
+    section: MenuSection,
+    action: MenuAction,
+    item?: MenuItem,
+  ) => {
+    const values: Record<string, KnobValue> = {}
+    const back = () => {
+      for (const key of Object.keys(values)) delete values[key]
+      if (item) showItem(section, item)
+      else showSection(section)
+    }
+    const submit = async () => {
+      if (!active()) return
+      inFlight = true
+      try {
+        const result = await apply({
+          command: menu.command,
+          sectionId: section.id,
+          actionId: action.id,
+          ...(item ? { itemId: item.id } : {}),
+          values: { ...values },
+          ...(action.confirm ? { confirmed: true } : {}),
+        })
+        if (!isCurrentSession()) return
+        menu = result.menu
+        api.ui.toast({ message: result.text })
+      } catch {
+        if (isCurrentSession())
+          api.ui.toast({ message: 'Menu apply unavailable; outcome unknown.' })
+      } finally {
+        for (const key of Object.keys(values)) delete values[key]
+        inFlight = false
+        if (isCurrentSession()) {
+          const refreshed = menu.sections.find(
+            (entry) => entry.id === section.id,
+          )
+          if (refreshed) showSection(refreshed)
+          else root()
+        }
+      }
+    }
+    const next = (index: number) => {
+      if (!active()) return
+      const knob = action.knobs[index]
+      if (!knob) {
+        if (!action.confirm) return void submit()
+        api.ui.dialog.replace(() => (
+          <DialogConfirm
+            title={action.label}
+            message={action.confirm?.message ?? ''}
+            onConfirm={() => void submit()}
+            onCancel={back}
+          />
+        ))
+        return
+      }
+      if (knob.kind === 'choice' || knob.kind === 'toggle') {
+        const choices =
+          knob.kind === 'choice'
+            ? knob.choices
+            : [
+                { value: 'on', label: 'On' },
+                { value: 'off', label: 'Off' },
+              ]
+        api.ui.dialog.replace(() => (
+          <DialogSelect
+            title={knob.label}
+            options={[
+              ...choices.map((choice) => ({
+                title: choice.label,
+                value: choice.value,
+              })),
+              { title: 'Cancel', value: '__cancel' },
+            ]}
+            onSelect={(option) => {
+              if (!active()) return
+              if (option.value === '__cancel') return back()
+              values[knob.id] =
+                knob.kind === 'toggle' ? option.value === 'on' : option.value
+              next(index + 1)
+            }}
+          />
+        ))
+        return
+      }
+      // DialogPrompt has no masking capability in the host API. Never seed a
+      // protected input or claim it is hidden; warn before collecting it.
+      api.ui.dialog.replace(() => (
+        <DialogPrompt
+          title={knob.label}
+          description={() => (
+            <text>
+              {knob.kind === 'text' && knob.masked
+                ? 'This host prompt displays input. Avoid screen sharing; the value is not echoed in menu results.'
+                : knob.required
+                  ? 'Required input'
+                  : 'Optional; leave empty for the default'}
+            </text>
+          )}
+          value={
+            knob.kind === 'text' && knob.masked
+              ? ''
+              : knob.value === undefined
+                ? ''
+                : String(knob.value)
+          }
+          placeholder={
+            knob.kind === 'text'
+              ? knob.placeholder
+              : `${knob.min ?? ''}-${knob.max ?? ''}`
+          }
+          onCancel={back}
+          onConfirm={(typed) => {
+            if (!active()) return
+            const text = typed.trim()
+            if (!text && knob.required) {
+              api.ui.toast({ message: `${knob.label} is required.` })
+              return
+            }
+            const value =
+              text === '' ? null : knob.kind === 'number' ? Number(text) : text
+            if (
+              knob.kind === 'number' &&
+              typeof value === 'number' &&
+              (!Number.isFinite(value) ||
+                (knob.min !== undefined && value < knob.min) ||
+                (knob.max !== undefined && value > knob.max))
+            ) {
+              api.ui.toast({
+                message: `${knob.label} needs a number in range.`,
+              })
+              return
+            }
+            values[knob.id] = value
+            next(index + 1)
+          }}
+        />
+      ))
+    }
+    next(0)
+  }
+  root()
+}
+
 type ApplyFn = (
   command: OpenDialogPayload['command'],
   args: string,
@@ -16,6 +283,27 @@ type KillswitchDialogConfig = {
   accounts?: Record<string, Record<string, number>>
 }
 
+type TuiAccountDialogAccount = Omit<
+  AccountDialogAccount,
+  'vaultReauth' | 'custodyState'
+> &
+  Partial<Pick<AccountDialogAccount, 'vaultReauth' | 'custodyState'>>
+
+type TuiAccountDialogPayload = {
+  accounts: TuiAccountDialogAccount[]
+  claustrumDetection: string
+  custodyMode?: TuiCustodyMode
+  enrollmentStatus?: string
+}
+
+type TuiCustodyMode = 'local' | 'claustrum' | `mismatch: ${string}`
+
+type AccountDialogOption = {
+  title: string
+  value: string
+  description?: string
+}
+
 export const PRIME_DIALOG_OPTIONS = [
   { title: 'Enable', value: 'on' },
   { title: 'Disable', value: 'off' },
@@ -49,24 +337,189 @@ export function buildKillswitchThresholdSeed(
   return seedParts.join(' ')
 }
 
-export function buildAccountDialogOption(account: AccountDialogAccount) {
+function normalizeTuiCustodyMode(value: string): TuiCustodyMode {
+  return value === 'local' || value === 'claustrum'
+    ? value
+    : `mismatch: ${value}`
+}
+
+export function normalizeAccountDialogPayload(
+  value: unknown,
+): TuiAccountDialogPayload {
+  const payload =
+    value && typeof value === 'object' ? (value as Record<string, unknown>) : {}
+  const rawAccounts = Array.isArray(payload.accounts) ? payload.accounts : []
+  const accounts = rawAccounts.flatMap((value) => {
+    if (!value || typeof value !== 'object') return []
+    const account = value as Record<string, unknown>
+    const quotaPercent = account.quotaPercent
+    if (
+      typeof account.id !== 'string' ||
+      typeof account.label !== 'string' ||
+      (account.role !== 'main' && account.role !== 'fallback') ||
+      typeof account.enabled !== 'boolean' ||
+      (quotaPercent !== null &&
+        (typeof quotaPercent !== 'number' || !Number.isFinite(quotaPercent))) ||
+      (account.claustrumGate !== 'on' &&
+        account.claustrumGate !== 'off' &&
+        account.claustrumGate !== 'na') ||
+      typeof account.vaultServed !== 'boolean'
+    ) {
+      return []
+    }
+    const normalized = {
+      id: account.id,
+      label: account.label,
+      role: account.role,
+      enabled: account.enabled,
+      quotaPercent,
+      ...(typeof account.tierLabel === 'string' && {
+        tierLabel: account.tierLabel,
+      }),
+      claustrumGate: account.claustrumGate,
+      vaultServed: account.vaultServed,
+    } satisfies TuiAccountDialogAccount
+    const custodyState = account.custodyState
+    if (
+      (custodyState === 'na' ||
+        custodyState === 'off' ||
+        custodyState === 'on-vault-served' ||
+        custodyState === 'on-vault-reauth' ||
+        custodyState === 'on-cold') &&
+      typeof account.vaultReauth === 'boolean'
+    ) {
+      return [
+        {
+          ...normalized,
+          custodyState,
+          vaultReauth: account.vaultReauth,
+        },
+      ]
+    }
+    return [normalized]
+  })
+  const custodyMode: TuiCustodyMode | undefined =
+    payload.custodyModeKnown === true && typeof payload.custodyMode === 'string'
+      ? normalizeTuiCustodyMode(payload.custodyMode)
+      : undefined
+  return {
+    accounts,
+    claustrumDetection:
+      typeof payload.claustrumDetection === 'string'
+        ? payload.claustrumDetection
+        : 'unknown',
+    ...(custodyMode && { custodyMode }),
+    ...(typeof payload.enrollmentStatus === 'string' &&
+      payload.enrollmentStatus.length <= 2_000 && {
+        enrollmentStatus: payload.enrollmentStatus,
+      }),
+  }
+}
+
+export function buildAccountDialogOption(account: TuiAccountDialogAccount) {
   const pct =
     account.quotaPercent != null
       ? ` ${Math.round(account.quotaPercent)}%`
       : ' \u2013%'
   const status = !account.enabled ? ' (disabled)' : ''
-  const gate = ` · gate ${account.claustrumGate === 'na' ? 'n/a' : account.claustrumGate}`
-  const vault =
-    account.role === 'main'
-      ? ' · vault n/a'
-      : ` · vault ${account.vaultServed ? 'served' : 'cold'}`
+  const custody = account.custodyState
+    ? account.custodyState === 'na'
+      ? undefined
+      : custodyStatusLabel(account.custodyState).replace(
+          ' (OpenCode managed)',
+          '',
+        )
+    : undefined
   return {
-    title: `${account.label} [${account.role}]${status}${pct}${gate}${vault}`,
+    title: `${account.label} [${account.role}]${status}${pct}${custody ? ` · custody ${custody}` : ''}`,
     value: account.id,
     ...(account.tierLabel && { description: account.tierLabel }),
   }
 }
 
+export function buildManageAccountOptions(account: TuiAccountDialogAccount) {
+  const options: AccountDialogOption[] = []
+  const toggleLabel = account.enabled ? 'Disable' : 'Enable'
+  options.push({
+    title: toggleLabel,
+    value: account.enabled ? 'disable' : 'enable',
+    description: account.enabled
+      ? 'Stop using this fallback account'
+      : 'Allow this fallback account to be used',
+  })
+  options.push({
+    title: 'Move up',
+    value: 'move-up',
+    description: 'Higher priority in fallback order',
+  })
+  options.push({
+    title: 'Move down',
+    value: 'move-down',
+    description: 'Lower priority in fallback order',
+  })
+  options.push({
+    title: 'Remove\u2026',
+    value: 'remove',
+    description: 'Delete this account permanently',
+  })
+  options.push({ title: 'Back', value: 'back' })
+  return options
+}
+
+export function buildAccountDialogL1(value: unknown): {
+  header: string
+  options: AccountDialogOption[]
+  enrollmentStatus?: string
+  modeAction?: { command: 'claude-account'; arguments: 'local' | 'claustrum' }
+} {
+  const payload = normalizeAccountDialogPayload(value)
+  const modeAction =
+    payload.custodyMode === 'local' || payload.custodyMode === 'claustrum'
+      ? {
+          command: 'claude-account' as const,
+          arguments:
+            payload.custodyMode === 'local'
+              ? ('claustrum' as const)
+              : ('local' as const),
+        }
+      : undefined
+  return {
+    header: payload.custodyMode
+      ? `Custody mode: ${payload.custodyMode}`
+      : 'Custody mode: unavailable from older server',
+    options: [
+      ...(modeAction
+        ? [
+            {
+              title:
+                payload.custodyMode === 'local'
+                  ? 'Use Claustrum custody'
+                  : 'Use local custody',
+              value: '__custody-mode__',
+            },
+          ]
+        : []),
+      {
+        title: 'Add account…',
+        value: '__add__',
+        description: 'Add an API key or OAuth fallback account',
+      },
+      ...payload.accounts.map(buildAccountDialogOption),
+    ],
+    ...(payload.enrollmentStatus && {
+      enrollmentStatus: payload.enrollmentStatus,
+    }),
+    ...(modeAction && { modeAction }),
+  }
+}
+
+export function retainAccountDialogProjection(
+  current: Record<string, unknown>,
+  incoming: Record<string, unknown>,
+): Record<string, unknown> {
+  return Array.isArray(incoming.accounts) ? incoming : current
+}
+
 function showText(api: TuiPluginApi, text: string) {
   api.ui.dialog.setSize('xlarge')
   api.ui.dialog.replace(() => (
@@ -99,6 +552,8 @@ export function buildPrimeStatusRows(accounts: PrimeAccountStatus[]): string[] {
       const time = formatPrimeTime(account.lastPrimedAt)
       if (account.lastResult === 'error') {
         rows.push(`${account.label} \u00b7 primed ${time} err`)
+      } else if (account.lastResult === 'skipped') {
+        rows.push(`${account.label} \u00b7 primed ${time} skipped`)
       } else {
         rows.push(`${account.label} \u00b7 primed ${time} \u2713`)
       }
@@ -377,17 +832,17 @@ export function openCommandDialog(
   }
 
   if (payload.command === 'claude-account') {
-    const accounts =
-      (payload.knobs.accounts as AccountDialogAccount[] | undefined) ?? []
-    const claustrumDetection =
-      (payload.knobs.claustrumDetection as string | undefined) ?? 'unknown'
+    let accountKnobs: Record<string, unknown> = payload.knobs
+    const accounts = normalizeAccountDialogPayload(accountKnobs).accounts
+    let statusMessage: { text: string; error?: boolean } | undefined
 
     const updateAccounts = (r: {
       text: string
       knobs: Record<string, unknown>
     }) => {
-      const updated = r.knobs.accounts as typeof accounts
-      if (updated && updated.length > 0) {
+      accountKnobs = retainAccountDialogProjection(accountKnobs, r.knobs)
+      const updated = normalizeAccountDialogPayload(accountKnobs).accounts
+      if (updated.length > 0) {
         accounts.length = 0
         accounts.push(...updated)
       }
@@ -395,31 +850,61 @@ export function openCommandDialog(
 
     const buildL1 = () => {
       const DialogSelect = api.ui.DialogSelect<string>
-      const l1Options: Array<{
-        title: string
-        value: string
-        description?: string
-      }> = [
-        {
-          title: 'Add account\u2026',
-          value: '__add__',
-          description: 'Add an API key or OAuth fallback account',
-        },
-        ...accounts.map(buildAccountDialogOption),
-      ]
+      const l1 = buildAccountDialogL1({ ...accountKnobs, accounts })
       api.ui.dialog.setSize('xlarge')
       api.ui.dialog.replace(() => (
         <box flexDirection='column' padding={1} width='100%'>
-          <text>{`Claustrum: ${claustrumDetection}`}</text>
+          <text>{`Claustrum: ${normalizeAccountDialogPayload(accountKnobs).claustrumDetection}`}</text>
+          <text>{l1.header}</text>
+          {l1.enrollmentStatus && (
+            <box marginTop={1}>
+              <text>{l1.enrollmentStatus}</text>
+            </box>
+          )}
+          {statusMessage && (
+            <box marginTop={1}>
+              <text fg={statusMessage.error ? '#ef4444' : '#22c55e'}>
+                {statusMessage.text}
+              </text>
+            </box>
+          )}
           <box marginTop={1}>
             <DialogSelect
               title='Claude accounts'
-              options={l1Options}
+              options={l1.options}
               onSelect={(option) => {
                 if (option.value === '__add__') {
+                  statusMessage = undefined
                   openAddType()
                   return
                 }
+                if (option.value === '__custody-mode__' && l1.modeAction) {
+                  void apply(l1.modeAction.command, l1.modeAction.arguments)
+                    .then((r) => {
+                      const isRefusalOrError =
+                        r.text.includes('refused') ||
+                        r.text.includes('unavailable') ||
+                        r.text.includes('failed') ||
+                        r.text.includes('Error') ||
+                        r.text.includes('error')
+                      if (isRefusalOrError) {
+                        statusMessage = { text: r.text, error: true }
+                      } else {
+                        statusMessage = { text: r.text, error: false }
+                        api.ui.toast({ message: r.text })
+                      }
+                      updateAccounts(r)
+                      buildL1()
+                    })
+                    .catch((err) => {
+                      const msg =
+                        err instanceof Error ? err.message : String(err)
+                      statusMessage = { text: `Error: ${msg}`, error: true }
+                      buildL1()
+                    })
+                  return
+                }
+                statusMessage = undefined
                 const account = accounts.find((a) => a.id === option.value)
                 if (!account) return
                 if (account.role === 'main') {
@@ -737,37 +1222,9 @@ export function openCommandDialog(
       const DialogConfirm = api.ui.DialogConfirm
       api.ui.dialog.setSize('xlarge')
 
-      const options: Array<{
-        title: string
-        value: string
-        description?: string
-      }> = []
-      if (!isMain) {
-        const toggleLabel = account.enabled ? 'Disable' : 'Enable'
-        options.push({
-          title: toggleLabel,
-          value: account.enabled ? 'disable' : 'enable',
-          description: account.enabled
-            ? 'Stop using this fallback account'
-            : 'Allow this fallback account to be used',
-        })
-        options.push({
-          title: 'Move up',
-          value: 'move-up',
-          description: 'Higher priority in fallback order',
-        })
-        options.push({
-          title: 'Move down',
-          value: 'move-down',
-          description: 'Lower priority in fallback order',
-        })
-        options.push({
-          title: 'Remove\u2026',
-          value: 'remove',
-          description: 'Delete this account permanently',
-        })
-      }
-      options.push({ title: 'Back', value: 'back' })
+      const options = isMain
+        ? [{ title: 'Back', value: 'back' }]
+        : buildManageAccountOptions(account)
 
       api.ui.dialog.replace(() => (
         <DialogSelect
@@ -785,13 +1242,18 @@ export function openCommandDialog(
                   title={`Remove ${account.label}?`}
                   message={`Are you sure you want to remove the fallback account "${account.label}"?`}
                   onConfirm={() => {
-                    void apply('claude-account', `remove ${account.id}`).then(
-                      (r) => {
+                    void apply('claude-account', `remove ${account.id}`)
+                      .then((r) => {
                         api.ui.toast({ message: r.text })
                         updateAccounts(r)
                         buildL1()
-                      },
-                    )
+                      })
+                      .catch((err) => {
+                        const msg =
+                          err instanceof Error ? err.message : String(err)
+                        statusMessage = { text: `Error: ${msg}`, error: true }
+                        buildL1()
+                      })
                   }}
                   onCancel={() => openManage(account, isMain)}
                 />
@@ -799,18 +1261,25 @@ export function openCommandDialog(
               return
             }
 
-            void apply('claude-account', `${option.value} ${account.id}`).then(
-              (r) => {
+            const args = `${option.value} ${account.id}`
+            void apply('claude-account', args)
+              .then((r) => {
                 api.ui.toast({ message: r.text })
                 updateAccounts(r)
-                const updatedList = r.knobs.accounts as typeof accounts
+                const updatedList = normalizeAccountDialogPayload(
+                  r.knobs,
+                ).accounts
                 const refreshed =
                   (updatedList && updatedList.length > 0
                     ? updatedList.find((a) => a.id === account.id)
                     : undefined) ?? account
                 openManage(refreshed, isMain)
-              },
-            )
+              })
+              .catch((err) => {
+                const msg = err instanceof Error ? err.message : String(err)
+                statusMessage = { text: `Error: ${msg}`, error: true }
+                buildL1()
+              })
           }}
         />
       ))