@cortexkit/opencode-antigravity-auth 1.1.0 → 2.0.0

package/dist/src/plugin/command-data.js

@@ -0,0 +1,325 @@
+/**
+ * Privacy-safe data service for the data-first slash-command dialogs.
+ *
+ * `/antigravity-quota` (this task) and the future `/antigravity-account`
+ * dialogs (Tasks 10-11) read from a single shared service so they
+ * never touch raw account storage, never see the email PII field, and
+ * never run quota network I/O during the dialog's open path — the
+ * Refresh action is the only path that performs a live fetch.
+ *
+ * Why this is a separate module:
+ *
+ * - `commands.ts` owns the slash-command orchestration; mixing the row
+ *   projection + quota refresh logic in there would balloon the surface
+ *   for what is fundamentally a small read/refresh service.
+ * - The row type (`CommandAccountRow`) is the projection that crosses
+ *   the PII firewall into the dialog payload. Defining it here (next
+ *   to the code that constructs it) keeps the firewall reviewable.
+ * - Tests can pin the read-vs-refresh boundary, the email redaction, and
+ *   the refresh-token-keyed persistence in one file rather than chasing
+ *   them across the dispatcher + RPC + apply layers.
+ *
+ * Cache-only opening contract (Task 9 operator requirement):
+ *
+ *   `listAccounts()` is a pure read of the live AccountManager view
+ *   the auth-loader materialized at session start. It performs
+ *   ZERO quota manager calls — opening the dialog must be instant even
+ *   when the network is unreachable, and quota refresh must remain an
+ *   explicit user-driven action so the cached percentages never quietly
+ *   rewrite themselves behind the user's back.
+ *
+ * Refresh-token-keyed persistence (Task 9 plan trap):
+ *
+ *   `refreshQuota()` runs the shared quota manager across every enabled
+ *   account and folds the results back into the live AccountManager +
+ *   storage. Concurrent OAuth can renumber the flat `accounts[]` array
+ *   between read and write, so we re-read under the lock and key the
+ *   update by `refreshToken` (the canonical identity) rather than the
+ *   array index. This way a successful OAuth add that lands between
+ *   the read and the write cannot cause the refresh to overwrite the
+ *   wrong account.
+ */
+import { buildSidebarMachineStateFromAccounts, setSidebarMachineState, } from '../sidebar-state';
+/**
+ * Quota display label for each supported quota group. Kept here so the
+ * dialog and the quota manager agree on the same vocabulary.
+ */
+const QUOTA_GROUP_LABELS = {
+    claude: 'Claude',
+    'gemini-pro': 'Gemini Pro',
+    'gemini-flash': 'Gemini Flash',
+    'gpt-oss': 'GPT-OSS',
+};
+const SUPPORTED_QUOTA_KEYS = [
+    'claude',
+    'gemini-pro',
+    'gemini-flash',
+    'gpt-oss',
+];
+function toCommandAccountRow(entry) {
+    const cached = entry.cachedQuota;
+    const quota = [];
+    for (const key of SUPPORTED_QUOTA_KEYS) {
+        const cachedEntry = cached?.[key];
+        if (!cachedEntry)
+            continue;
+        const fraction = cachedEntry.remainingFraction;
+        const remainingPercent = typeof fraction === 'number' && Number.isFinite(fraction)
+            ? Math.round(fraction * 100)
+            : null;
+        let resetAt;
+        if (typeof cachedEntry.resetTime === 'string' &&
+            cachedEntry.resetTime.length > 0) {
+            const parsed = Date.parse(cachedEntry.resetTime);
+            if (Number.isFinite(parsed))
+                resetAt = parsed;
+        }
+        quota.push({
+            key,
+            label: QUOTA_GROUP_LABELS[key],
+            remainingPercent,
+            resetAt,
+        });
+    }
+    const label = `Account ${entry.index + 1}`;
+    return {
+        id: `acct-${entry.index}`,
+        index: entry.index,
+        label,
+        enabled: entry.enabled,
+        current: entry.active,
+        quota,
+    };
+}
+/**
+ * Build the data service.
+ *
+ * The factory form (instead of a module-level singleton) keeps the
+ * service unit-testable: each test constructs its own dependencies
+ * (storage stub, quota manager stub, fixed clock) without touching
+ * the production quota path.
+ */
+export function createCommandDataService(options) {
+    const { accountManagerView, quotaManager, sidebarStateFile, storage, now = () => Date.now(), } = options;
+    const projectRows = () => accountManagerView.getAccounts().map(toCommandAccountRow);
+    const writeSidebar = (rows) => {
+        const accounts = rows.map((row) => {
+            const claude = row.quota.find((q) => q.key === 'claude');
+            const geminiPro = row.quota.find((q) => q.key === 'gemini-pro');
+            const geminiFlash = row.quota.find((q) => q.key === 'gemini-flash');
+            const gptOss = row.quota.find((q) => q.key === 'gpt-oss');
+            const toFraction = (q) => {
+                if (!q || q.remainingPercent == null)
+                    return undefined;
+                return { remainingFraction: q.remainingPercent / 100 };
+            };
+            return {
+                index: row.index,
+                label: row.label,
+                enabled: row.enabled,
+                current: row.current,
+                cachedQuota: {
+                    claude: toFraction(claude),
+                    'gemini-pro': toFraction(geminiPro),
+                    'gemini-flash': toFraction(geminiFlash),
+                    'gpt-oss': toFraction(gptOss),
+                },
+            };
+        });
+        // Fire-and-forget — the sidebar writer is fenced by its own queue,
+        // so a transient lock contention cannot block the dialog response.
+        void setSidebarMachineState(buildSidebarMachineStateFromAccounts(accounts, { checkedAt: now() }), { stateFile: sidebarStateFile }).catch(() => {
+            // Lock contention is the only realistic failure mode; the next
+            // periodic writer will catch up.
+        });
+    };
+    return {
+        async listAccounts() {
+            return projectRows();
+        },
+        async refreshQuota() {
+            const accountsForQuota = accountManagerView.getAccountsForQuotaCheck();
+            if (accountsForQuota.length === 0) {
+                // Empty pool: still push a clean sidebar so the TUI drops any
+                // stale snapshot left over from a previous session.
+                writeSidebar([]);
+                return [];
+            }
+            const results = await quotaManager.refreshAccounts(accountsForQuota, {
+                indexFor: (account) => accountsForQuota.indexOf(account),
+                force: true,
+            });
+            const refreshedAt = now();
+            const updates = [];
+            for (const result of results) {
+                const refreshToken = result.updatedAccount?.refreshToken ??
+                    accountsForQuota[result.index]?.refreshToken;
+                if (!refreshToken)
+                    continue;
+                const groups = result.status === 'ok' && result.quota?.groups
+                    ? result.quota.groups
+                    : undefined;
+                updates.push({ refreshToken, groups });
+            }
+            // Resolve live indexes only after the network request. Numeric indexes
+            // from the quota result refer to the original input array and may now
+            // identify a different account after a concurrent add/remove.
+            const liveIndexByRefreshToken = new Map();
+            for (const entry of accountManagerView.getAccounts()) {
+                liveIndexByRefreshToken.set(entry.refreshToken, entry.index);
+            }
+            let liveQuotaChanged = false;
+            for (const update of updates) {
+                const liveIndex = liveIndexByRefreshToken.get(update.refreshToken);
+                if (liveIndex === undefined || !update.groups)
+                    continue;
+                accountManagerView.updateQuotaCache(liveIndex, update.groups);
+                liveQuotaChanged = true;
+            }
+            if (liveQuotaChanged)
+                accountManagerView.requestSaveToDisk();
+            // Persist by canonical refresh token against the latest locked snapshot.
+            // A removed account is skipped rather than falling back to its old index.
+            if (storage) {
+                const updateByRefreshToken = new Map(updates.map((update) => [update.refreshToken, update]));
+                const writeResult = storage.mutate((current) => ({
+                    ...current,
+                    accounts: current.accounts.map((entry) => {
+                        const update = updateByRefreshToken.get(entry.refreshToken);
+                        if (!update)
+                            return entry;
+                        if (update.groups) {
+                            return {
+                                ...entry,
+                                cachedQuota: update.groups,
+                                cachedQuotaUpdatedAt: refreshedAt,
+                            };
+                        }
+                        // Error result keeps the previous cached percentage and only
+                        // records that a refresh was attempted.
+                        return {
+                            ...entry,
+                            cachedQuotaUpdatedAt: refreshedAt,
+                        };
+                    }),
+                }));
+                await Promise.resolve(writeResult).catch(() => {
+                    // The live AccountManager already carries successful refreshes; its
+                    // next save can reconcile a transient storage-lock failure.
+                });
+            }
+            // Re-read the live view post-mutate so the rows reflect the
+            // freshly persisted percentages.
+            const rows = projectRows();
+            writeSidebar(rows);
+            return rows;
+        },
+        async setCurrentAccount(index) {
+            return mutateLiveAndStorage({ action: 'setCurrent', index });
+        },
+        async toggleAccountEnabled(index) {
+            return mutateLiveAndStorage({ action: 'toggleEnabled', index });
+        },
+        async removeAccount(index) {
+            return mutateLiveAndStorage({ action: 'remove', index });
+        },
+    };
+    async function mutateLiveAndStorage(args) {
+        const { index, action } = args;
+        const target = accountManagerView.getAccounts()[index];
+        if (!target)
+            return null;
+        const refreshToken = accountManagerView.getRefreshTokenAt(index) ?? target.refreshToken;
+        if (!refreshToken)
+            return null;
+        if (action === 'toggleEnabled' &&
+            target.enabled === false &&
+            target.accountIneligible === true) {
+            throw new Error('This account is ineligible and cannot be enabled until eligibility is rechecked.');
+        }
+        if (!storage) {
+            throw new Error('CommandDataService is missing a locked-storage adapter; account mutations are disabled.');
+        }
+        let foundInStorage = false;
+        let desiredEnabled;
+        let previousEnabled;
+        await storage.mutate((current) => {
+            const tokenIdx = current.accounts.findIndex((entry) => entry.refreshToken === refreshToken);
+            if (tokenIdx === -1)
+                return current;
+            foundInStorage = true;
+            if (action === 'setCurrent') {
+                return {
+                    ...current,
+                    activeIndex: tokenIdx,
+                    activeIndexByFamily: { claude: tokenIdx, gemini: tokenIdx },
+                };
+            }
+            if (action === 'toggleEnabled') {
+                const entry = current.accounts[tokenIdx];
+                if (!entry)
+                    return current;
+                previousEnabled = entry.enabled !== false;
+                desiredEnabled = entry.enabled === false;
+                if (desiredEnabled && entry.accountIneligible === true) {
+                    throw new Error('This account is ineligible and cannot be enabled until eligibility is rechecked.');
+                }
+                return {
+                    ...current,
+                    accounts: current.accounts.map((account) => account.refreshToken === refreshToken
+                        ? { ...account, enabled: desiredEnabled }
+                        : account),
+                };
+            }
+            return {
+                ...current,
+                accounts: current.accounts.filter((account) => account.refreshToken !== refreshToken),
+                activeIndex: 0,
+                activeIndexByFamily: { claude: 0, gemini: 0 },
+            };
+        });
+        if (!foundInStorage)
+            return null;
+        // Re-resolve the live index by canonical identity after the awaited disk
+        // transaction. A concurrent OAuth add/remove may have shifted every index.
+        const liveIndex = accountManagerView
+            .getAccounts()
+            .findIndex((account) => account.refreshToken === refreshToken);
+        let applied = action === 'remove' && liveIndex === -1;
+        if (liveIndex !== -1) {
+            if (action === 'setCurrent') {
+                applied = accountManagerView.setAccountCurrent(liveIndex);
+            }
+            else if (action === 'toggleEnabled') {
+                applied = accountManagerView.setAccountEnabled(liveIndex, desiredEnabled === true);
+                if (!applied) {
+                    applied =
+                        accountManagerView.getAccounts()[liveIndex]?.enabled ===
+                            desiredEnabled;
+                }
+            }
+            else {
+                applied = accountManagerView.removeAccountByIndex(liveIndex);
+            }
+        }
+        if (!applied && action !== 'remove') {
+            if (action === 'toggleEnabled' && previousEnabled !== undefined) {
+                await storage.mutate((current) => ({
+                    ...current,
+                    accounts: current.accounts.map((account) => account.refreshToken === refreshToken
+                        ? { ...account, enabled: previousEnabled }
+                        : account),
+                }));
+            }
+            throw new Error('The account changed while the operation was being applied; reopen the dialog and try again.');
+        }
+        await accountManagerView.flushSaveToDisk().catch(() => {
+            // The locked storage mutation already committed; a later periodic flush
+            // can reconcile transient AccountManager lock contention.
+        });
+        const rows = projectRows();
+        writeSidebar(rows);
+        return rows;
+    }
+}
+//# sourceMappingURL=command-data.js.map

package/dist/src/plugin/command-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-data.js","sourceRoot":"","sources":["../../../src/plugin/command-data.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,EACL,oCAAoC,EAEpC,sBAAsB,GACvB,MAAM,kBAAkB,CAAA;AAiGzB;;;GAGG;AACH,MAAM,kBAAkB,GAGpB;IACF,MAAM,EAAE,QAAQ;IAChB,YAAY,EAAE,YAAY;IAC1B,cAAc,EAAE,cAAc;IAC9B,SAAS,EAAE,SAAS;CACrB,CAAA;AAED,MAAM,oBAAoB,GAAG;IAC3B,QAAQ;IACR,YAAY;IACZ,cAAc;IACd,SAAS;CAC8D,CAAA;AAezE,SAAS,mBAAmB,CAAC,KAA0B;IACrD,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAA;IAChC,MAAM,KAAK,GAA+B,EAAE,CAAA;IAC5C,KAAK,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,CAAA;QACjC,IAAI,CAAC,WAAW;YAAE,SAAQ;QAC1B,MAAM,QAAQ,GAAG,WAAW,CAAC,iBAAiB,CAAA;QAC9C,MAAM,gBAAgB,GACpB,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACvD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC;YAC5B,CAAC,CAAC,IAAI,CAAA;QACV,IAAI,OAA2B,CAAA;QAC/B,IACE,OAAO,WAAW,CAAC,SAAS,KAAK,QAAQ;YACzC,WAAW,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAChC,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;YAChD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO,GAAG,MAAM,CAAA;QAC/C,CAAC;QACD,KAAK,CAAC,IAAI,CAAC;YACT,GAAG;YACH,KAAK,EAAE,kBAAkB,CAAC,GAAG,CAAC;YAC9B,gBAAgB;YAChB,OAAO;SACR,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,CAAA;IAC1C,OAAO;QACL,EAAE,EAAE,QAAQ,KAAK,CAAC,KAAK,EAAE;QACzB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,MAAM;QACrB,KAAK;KACN,CAAA;AACH,CAAC;AAqJD;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAkC;IAElC,MAAM,EACJ,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,OAAO,EACP,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GACvB,GAAG,OAAO,CAAA;IAEX,MAAM,WAAW,GAAG,GAAwB,EAAE,CAC5C,kBAAkB,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;IAE3D,MAAM,YAAY,GAAG,CAAC,IAAyB,EAAQ,EAAE;QACvD,MAAM,QAAQ,GAAmC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAChE,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAA;YACxD,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,YAAY,CAAC,CAAA;YAC/D,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,cAAc,CAAC,CAAA;YACnE,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAA;YACzD,MAAM,UAAU,GAAG,CACjB,CAAkD,EACc,EAAE;gBAClE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,gBAAgB,IAAI,IAAI;oBAAE,OAAO,SAAS,CAAA;gBACtD,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,gBAAgB,GAAG,GAAG,EAAE,CAAA;YACxD,CAAC,CAAA;YACD,OAAO;gBACL,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,WAAW,EAAE;oBACX,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC;oBAC1B,YAAY,EAAE,UAAU,CAAC,SAAS,CAAC;oBACnC,cAAc,EAAE,UAAU,CAAC,WAAW,CAAC;oBACvC,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC;iBAC9B;aACF,CAAA;QACH,CAAC,CAAC,CAAA;QACF,mEAAmE;QACnE,mEAAmE;QACnE,KAAK,sBAAsB,CACzB,oCAAoC,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,EACpE,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAChC,CAAC,KAAK,CAAC,GAAG,EAAE;YACX,+DAA+D;YAC/D,iCAAiC;QACnC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,OAAO;QACL,KAAK,CAAC,YAAY;YAChB,OAAO,WAAW,EAAE,CAAA;QACtB,CAAC;QAED,KAAK,CAAC,YAAY;YAChB,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,wBAAwB,EAAE,CAAA;YACtE,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClC,8DAA8D;gBAC9D,oDAAoD;gBACpD,YAAY,CAAC,EAAE,CAAC,CAAA;gBAChB,OAAO,EAAE,CAAA;YACX,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,gBAAgB,EAAE;gBACnE,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC;gBACxD,KAAK,EAAE,IAAI;aACZ,CAAC,CAAA;YAEF,MAAM,WAAW,GAAG,GAAG,EAAE,CAAA;YACzB,MAAM,OAAO,GAKR,EAAE,CAAA;YACP,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,YAAY,GAChB,MAAM,CAAC,cAAc,EAAE,YAAY;oBACnC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,CAAA;gBAC9C,IAAI,CAAC,YAAY;oBAAE,SAAQ;gBAC3B,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,MAAM;oBAC5C,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM;oBACrB,CAAC,CAAC,SAAS,CAAA;gBACf,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAA;YACxC,CAAC;YAED,uEAAuE;YACvE,sEAAsE;YACtE,8DAA8D;YAC9D,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAkB,CAAA;YACzD,KAAK,MAAM,KAAK,IAAI,kBAAkB,CAAC,WAAW,EAAE,EAAE,CAAC;gBACrD,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;YAC9D,CAAC;YACD,IAAI,gBAAgB,GAAG,KAAK,CAAA;YAC5B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;gBAClE,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM;oBAAE,SAAQ;gBACvD,kBAAkB,CAAC,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;gBAC7D,gBAAgB,GAAG,IAAI,CAAA;YACzB,CAAC;YACD,IAAI,gBAAgB;gBAAE,kBAAkB,CAAC,iBAAiB,EAAE,CAAA;YAE5D,yEAAyE;YACzE,0EAA0E;YAC1E,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAClC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CACvD,CAAA;gBACD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBAC/C,GAAG,OAAO;oBACV,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;wBACvC,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;wBAC3D,IAAI,CAAC,MAAM;4BAAE,OAAO,KAAK,CAAA;wBACzB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;4BAClB,OAAO;gCACL,GAAG,KAAK;gCACR,WAAW,EAAE,MAAM,CAAC,MAAM;gCAC1B,oBAAoB,EAAE,WAAW;6BAClC,CAAA;wBACH,CAAC;wBACD,6DAA6D;wBAC7D,wCAAwC;wBACxC,OAAO;4BACL,GAAG,KAAK;4BACR,oBAAoB,EAAE,WAAW;yBAClC,CAAA;oBACH,CAAC,CAAC;iBACH,CAAC,CAAC,CAAA;gBACH,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;oBAC5C,oEAAoE;oBACpE,4DAA4D;gBAC9D,CAAC,CAAC,CAAA;YACJ,CAAC;YAED,4DAA4D;YAC5D,iCAAiC;YACjC,MAAM,IAAI,GAAG,WAAW,EAAE,CAAA;YAC1B,YAAY,CAAC,IAAI,CAAC,CAAA;YAClB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,KAAK;YAC3B,OAAO,oBAAoB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAA;QAC9D,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,KAAK;YAC9B,OAAO,oBAAoB,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAA;QACjE,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,KAAK;YACvB,OAAO,oBAAoB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;QAC1D,CAAC;KACF,CAAA;IAED,KAAK,UAAU,oBAAoB,CAAC,IAGnC;QACC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;QAC9B,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAA;QACtD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,YAAY,GAChB,kBAAkB,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,YAAY,CAAA;QACpE,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAA;QAC9B,IACE,MAAM,KAAK,eAAe;YAC1B,MAAM,CAAC,OAAO,KAAK,KAAK;YACxB,MAAM,CAAC,iBAAiB,KAAK,IAAI,EACjC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAA;QACH,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAA;QACH,CAAC;QAED,IAAI,cAAc,GAAG,KAAK,CAAA;QAC1B,IAAI,cAAmC,CAAA;QACvC,IAAI,eAAoC,CAAA;QACxC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;YAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CACzC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,YAAY,CAC/C,CAAA;YACD,IAAI,QAAQ,KAAK,CAAC,CAAC;gBAAE,OAAO,OAAO,CAAA;YACnC,cAAc,GAAG,IAAI,CAAA;YAErB,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;gBAC5B,OAAO;oBACL,GAAG,OAAO;oBACV,WAAW,EAAE,QAAQ;oBACrB,mBAAmB,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;iBAC5D,CAAA;YACH,CAAC;YAED,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;gBAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;gBACxC,IAAI,CAAC,KAAK;oBAAE,OAAO,OAAO,CAAA;gBAC1B,eAAe,GAAG,KAAK,CAAC,OAAO,KAAK,KAAK,CAAA;gBACzC,cAAc,GAAG,KAAK,CAAC,OAAO,KAAK,KAAK,CAAA;gBACxC,IAAI,cAAc,IAAI,KAAK,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;oBACvD,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAA;gBACH,CAAC;gBACD,OAAO;oBACL,GAAG,OAAO;oBACV,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACzC,OAAO,CAAC,YAAY,KAAK,YAAY;wBACnC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE;wBACzC,CAAC,CAAC,OAAO,CACZ;iBACF,CAAA;YACH,CAAC;YAED,OAAO;gBACL,GAAG,OAAO;gBACV,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAC/B,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,KAAK,YAAY,CACnD;gBACD,WAAW,EAAE,CAAC;gBACd,mBAAmB,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;aAC9C,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,IAAI,CAAC,cAAc;YAAE,OAAO,IAAI,CAAA;QAEhC,yEAAyE;QACzE,2EAA2E;QAC3E,MAAM,SAAS,GAAG,kBAAkB;aACjC,WAAW,EAAE;aACb,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,KAAK,YAAY,CAAC,CAAA;QAChE,IAAI,OAAO,GAAG,MAAM,KAAK,QAAQ,IAAI,SAAS,KAAK,CAAC,CAAC,CAAA;QACrD,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;YACrB,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;gBAC5B,OAAO,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAA;YAC3D,CAAC;iBAAM,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;gBACtC,OAAO,GAAG,kBAAkB,CAAC,iBAAiB,CAC5C,SAAS,EACT,cAAc,KAAK,IAAI,CACxB,CAAA;gBACD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO;wBACL,kBAAkB,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO;4BACpD,cAAc,CAAA;gBAClB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,kBAAkB,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAA;YAC9D,CAAC;QACH,CAAC;QAED,IAAI,CAAC,OAAO,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpC,IAAI,MAAM,KAAK,eAAe,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;gBAChE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBACjC,GAAG,OAAO;oBACV,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACzC,OAAO,CAAC,YAAY,KAAK,YAAY;wBACnC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE;wBAC1C,CAAC,CAAC,OAAO,CACZ;iBACF,CAAC,CAAC,CAAA;YACL,CAAC;YACD,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAA;QACH,CAAC;QAED,MAAM,kBAAkB,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YACpD,wEAAwE;YACxE,0DAA0D;QAC5D,CAAC,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,WAAW,EAAE,CAAA;QAC1B,YAAY,CAAC,IAAI,CAAC,CAAA;QAClB,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/src/plugin/commands.d.ts

@@ -0,0 +1,151 @@
+/**
+ * Slash-command wiring for the antigravity plugin.
+ *
+ * Three places must agree on the set of modal commands — keeping
+ * them in lockstep is a hard invariant:
+ *
+ *   1. `MODAL_COMMANDS` — the canonical list of `CommandModalName`s.
+ *   2. `registerAntigravityCommands` (in `./catalog.ts`) — what we
+ *      register in the host `config.command.*` map so OpenCode
+ *      recognises them.
+ *   3. `buildDialogPayload` (here) — the per-command dialog payload
+ *      builder the TUI renders when a notification arrives.
+ *
+ * If any one drifts, a future slash command will be discoverable in
+ * the host palette but invisible to the dialog flow (or vice versa).
+ * The bidirectional three-wiring test pins this invariant.
+ *
+ * `/gemini-dump` remains a backward-compatibility alias: the host
+ * already registers the command under that name in `OpenCode` and
+ * long-running sessions may still call it. The modal name
+ * `antigravity-dump` is the canonical name; both stay registered.
+ */
+import type { CommandModalName } from '../rpc/protocol';
+import type { CommandDataService } from './command-data';
+import { type OperatorSettingsController } from './operator-settings';
+import type { PluginClient, PluginResult } from './types';
+export declare const ANTIGRAVITY_QUOTA_COMMAND_NAME = "antigravity-quota";
+export declare const ANTIGRAVITY_ACCOUNT_COMMAND_NAME = "antigravity-account";
+export declare const ANTIGRAVITY_ROUTING_COMMAND_NAME = "antigravity-routing";
+export declare const ANTIGRAVITY_KILLSWITCH_COMMAND_NAME = "antigravity-killswitch";
+export declare const ANTIGRAVITY_DUMP_COMMAND_NAME = "antigravity-dump";
+export declare const ANTIGRAVITY_LOGGING_COMMAND_NAME = "antigravity-logging";
+export declare const MODAL_COMMANDS: readonly CommandModalName[];
+interface CommandContext {
+    sessionID: string;
+    client: PluginClient;
+    settings: OperatorSettingsController;
+    /**
+     * Optional callback invoked AFTER `applyCommand` mutates persistent
+     * state. The plugin entry injects a callback that pushes the current
+     * account pool into the sidebar so the TUI sees a fresh snapshot.
+     * Commands that need to chain side effects (e.g. account add which
+     * triggers an OAuth flow) hook their own refresh.
+     */
+    onApplied?: () => Promise<void> | void;
+    /**
+     * Privacy-safe data service that backs the data-first dialogs. The
+     * production wiring injects one that reads from the live AccountManager
+     * + storage and refreshes through the shared quota manager; tests
+     * (and any context that does not care about quota UI) leave this
+     * undefined and the dialog falls back to the legacy placeholder.
+     */
+    commandData?: CommandDataService;
+}
+/**
+ * Build the dialog payload the TUI renders for `command`.
+ *
+ * Each branch produces a self-contained payload the OpenTUI dialog tree
+ * can mount without further RPC chatter. The knobs object is the
+ * payload-specific metadata (current toggle state, available actions,
+ * default values) — knobs are intentionally stringly-typed to keep the
+ * dialog code free of per-command schema definitions.
+ */
+export declare function buildDialogPayload(command: CommandModalName, argumentsText: string, context: CommandContext): Promise<{
+    command: CommandModalName;
+    text: string;
+    knobs: Record<string, unknown>;
+}>;
+export interface ApplyRequest {
+    command: CommandModalName;
+    arguments: string;
+    sessionId?: string;
+}
+export interface ApplyResult {
+    text: string;
+    knobs: Record<string, unknown>;
+}
+/**
+ * Apply the result of a TUI dialog back to the plugin runtime.
+ *
+ * Most commands mutate persistent operator settings (routing toggles,
+ * killswitch thresholds, log level). Account add/refresh kicks off the
+ * OAuth flow which can take up to two minutes on a fresh login — that
+ * path opts into a 120s RPC timeout. Status / toggle paths keep the
+ * default 2s timeout.
+ *
+ * The TUI's imperative dispatcher (`tui/command-dialogs.openCommandDialog`)
+ * forwards the apply `options.timeoutMs` knob into the RPC apply call
+ * so a long-running path (account add / refresh) can opt in without the
+ * dialog layer having to special-case it.
+ */
+export declare function applyCommand(request: ApplyRequest, context: CommandContext): Promise<ApplyResult>;
+/**
+ * Build a sidebar refresher bound to the supplied account-snapshot provider.
+ * The plugin entry passes `lifecycle.getAccountManager()`'s snapshot getter so
+ * every `/antigravity-*` apply that mutates persistent state also bumps the
+ * sidebar's `checkedAt`. The refresher is best-effort: a lock-contention
+ * error or missing manager is swallowed by the caller.
+ */
+export declare function createSidebarRefresher(getAccounts: () => Array<{
+    index: number;
+    label?: string;
+    enabled?: boolean;
+    coolingDownUntil?: number;
+    cachedQuota?: {
+        claude?: {
+            remainingFraction?: number;
+            resetTime?: string;
+        };
+        'gemini-pro'?: {
+            remainingFraction?: number;
+            resetTime?: string;
+        };
+        'gemini-flash'?: {
+            remainingFraction?: number;
+            resetTime?: string;
+        };
+    };
+}> | null): () => Promise<void>;
+/**
+ * Optional handle for the host connection state. Tests inject a stub
+ * to force the connected/disconnected branch; production callers let
+ * the default fall through to the singleton `isTuiConnected` from
+ * `rpc/notifications`, which reports "disconnected" until a TUI drain
+ * has landed in the last `CONNECTION_TTL_MS` window.
+ */
+export interface CommandConnectionState {
+    isTuiConnected(sessionId?: string): boolean;
+}
+/**
+ * Hook the host's `command.execute.before` to the modal commands.
+ *
+ * When a slash command is invoked, we push a notification onto the
+ * RPC queue and abort the normal prompt with the same handled
+ * sentinel the legacy `/gemini-dump` flow already uses.
+ *
+ * The `sendIgnoredMessage` fallback only fires when no TUI is
+ * listening — the only path that actually consumes the queued
+ * message. With a live TUI, push alone is enough; double-sending
+ * would otherwise render the command text as a visible chat message
+ * alongside the dialog the TUI renders.
+ */
+export declare function createCommandExecuteBefore(client: PluginClient, settings: OperatorSettingsController, pushNotification: (payload: Awaited<ReturnType<typeof buildDialogPayload>>, sessionId?: string) => void, commandData?: CommandDataService, connectionState?: CommandConnectionState): PluginResult['command.execute.before'];
+/**
+ * Backward-compat wrapper that constructs a no-settings `command.execute.before`
+ * for tests that don't care about the operator settings controller. Production
+ * code wires the real controller via `createAntigravityPlugin`.
+ */
+export declare function createCommandExecuteBeforeForClient(client: PluginClient, commandData?: CommandDataService): PluginResult['command.execute.before'];
+export {};
+//# sourceMappingURL=commands.d.ts.map

package/dist/src/plugin/commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../../src/plugin/commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAKvD,OAAO,KAAK,EAAqB,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAQ3E,OAAO,EAGL,KAAK,0BAA0B,EAChC,MAAM,qBAAqB,CAAA;AAG5B,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAIzD,eAAO,MAAM,8BAA8B,sBAAsB,CAAA;AACjE,eAAO,MAAM,gCAAgC,wBAAwB,CAAA;AACrE,eAAO,MAAM,gCAAgC,wBAAwB,CAAA;AACrE,eAAO,MAAM,mCAAmC,2BAA2B,CAAA;AAC3E,eAAO,MAAM,6BAA6B,qBAAqB,CAAA;AAC/D,eAAO,MAAM,gCAAgC,wBAAwB,CAAA;AAErE,eAAO,MAAM,cAAc,EAAE,SAAS,gBAAgB,EAOrD,CAAA;AA8CD,UAAU,cAAc;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,YAAY,CAAA;IACpB,QAAQ,EAAE,0BAA0B,CAAA;IACpC;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IACtC;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,kBAAkB,CAAA;CACjC;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,gBAAgB,EACzB,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC;IACT,OAAO,EAAE,gBAAgB,CAAA;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC/B,CAAC,CAuGD;AAkHD,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,gBAAgB,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC/B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,WAAW,CAAC,CAWtB;AAyRD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,KAAK,CAAC;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,WAAW,CAAC,EAAE;QACZ,MAAM,CAAC,EAAE;YAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;QAC3D,YAAY,CAAC,EAAE;YAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;QACjE,cAAc,CAAC,EAAE;YAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KACpE,CAAA;CACF,CAAC,GAAG,IAAI,GACR,MAAM,OAAO,CAAC,IAAI,CAAC,CAqBrB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAC5C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,0BAA0B,EACpC,gBAAgB,EAAE,CAChB,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC,EACvD,SAAS,CAAC,EAAE,MAAM,KACf,IAAI,EACT,WAAW,CAAC,EAAE,kBAAkB,EAChC,eAAe,GAAE,sBAEhB,GACA,YAAY,CAAC,wBAAwB,CAAC,CA2CxC;AAED;;;;GAIG;AACH,wBAAgB,mCAAmC,CACjD,MAAM,EAAE,YAAY,EACpB,WAAW,CAAC,EAAE,kBAAkB,GAC/B,YAAY,CAAC,wBAAwB,CAAC,CAUxC"}