@cortexkit/opencode-antigravity-auth 1.1.0 → 2.0.0

package/dist/src/rpc/protocol.d.ts

@@ -0,0 +1,22 @@
+export type CommandModalName = 'antigravity-quota' | 'antigravity-account' | 'antigravity-routing' | 'antigravity-killswitch' | 'antigravity-dump' | 'antigravity-logging';
+export interface OpenDialogPayload {
+    command: CommandModalName;
+    text: string;
+    knobs: Record<string, unknown>;
+}
+export interface RpcNotification {
+    id: number;
+    type: 'open-dialog';
+    payload: OpenDialogPayload;
+    sessionId?: string;
+}
+export interface ApplyRequest {
+    command: CommandModalName;
+    arguments: string;
+    sessionId?: string;
+}
+export interface ApplyResult {
+    text: string;
+    knobs: Record<string, unknown>;
+}
+//# sourceMappingURL=protocol.d.ts.map

package/dist/src/rpc/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../../src/rpc/protocol.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GACxB,mBAAmB,GACnB,qBAAqB,GACrB,qBAAqB,GACrB,wBAAwB,GACxB,kBAAkB,GAClB,qBAAqB,CAAA;AAEzB,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,gBAAgB,CAAA;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,aAAa,CAAA;IACnB,OAAO,EAAE,iBAAiB,CAAA;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,gBAAgB,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC/B"}

package/dist/src/rpc/protocol.js

@@ -0,0 +1 @@
+//# sourceMappingURL=protocol.js.map

package/dist/src/rpc/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../src/rpc/protocol.ts"],"names":[],"mappings":""}

package/dist/src/rpc/rpc-client.d.ts

@@ -0,0 +1,10 @@
+import type { ApplyRequest, ApplyResult, RpcNotification } from './protocol';
+export interface RpcRequestOptions {
+    timeoutMs?: number;
+}
+export interface RpcClient {
+    apply(request: ApplyRequest, options?: RpcRequestOptions): Promise<ApplyResult>;
+    pendingNotifications(lastReceivedId: number, sessionId?: string, options?: RpcRequestOptions): Promise<RpcNotification[]>;
+}
+export declare function createRpcClient(dir: string, expectedPid?: number): RpcClient;
+//# sourceMappingURL=rpc-client.d.ts.map

package/dist/src/rpc/rpc-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-client.d.ts","sourceRoot":"","sources":["../../../src/rpc/rpc-client.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAO5E,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,CACH,OAAO,EAAE,YAAY,EACrB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,WAAW,CAAC,CAAA;IACvB,oBAAoB,CAClB,cAAc,EAAE,MAAM,EACtB,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,eAAe,EAAE,CAAC,CAAA;CAC9B;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CA0B5E"}

package/dist/src/rpc/rpc-client.js

@@ -0,0 +1,58 @@
+// Subpath import (not the barrel): this module ships into the TUI's
+// compiled tree, which must not pull the credential-bearing barrel into
+// the host's render path.
+import { fetchWithActiveTimeout } from '@cortexkit/antigravity-auth-core/fetch-timeout';
+import { discoverPortFile } from './port-file';
+const DEFAULT_TIMEOUT_MS = 2_000;
+const APPLY_FALLBACK = { text: 'apply failed', knobs: {} };
+const PENDING_FALLBACK = [];
+export function createRpcClient(dir, expectedPid) {
+    return {
+        async apply(request, options) {
+            const result = await post(dir, expectedPid, '/rpc/apply', request, options);
+            return result ?? APPLY_FALLBACK;
+        },
+        async pendingNotifications(lastReceivedId, sessionId, options) {
+            const result = await post(dir, expectedPid, '/rpc/pending-notifications', {
+                lastReceivedId,
+                ...(sessionId === undefined ? {} : { sessionId }),
+            }, options);
+            return result?.messages ?? PENDING_FALLBACK;
+        },
+    };
+}
+async function post(dir, expectedPid, path, body, options) {
+    // Internal nullable — every RPC call site (apply, pending) must absorb a
+    // missing/unreachable server gracefully. The TUI render path never
+    // crashes because the server is dead; the user sees a fallback text and
+    // a fresh poll retries the next tick.
+    const entry = await discoverPortFileSafe(dir, expectedPid);
+    if (!entry)
+        return null;
+    const timeoutMs = options?.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    try {
+        const response = await fetchWithActiveTimeout(`http://127.0.0.1:${entry.port}${path}`, {
+            method: 'POST',
+            headers: {
+                authorization: `Bearer ${entry.token}`,
+                'content-type': 'application/json',
+            },
+            body: JSON.stringify(body),
+        }, { timeoutMs });
+        if (!response.ok)
+            return null;
+        return (await response.json());
+    }
+    catch {
+        return null;
+    }
+}
+async function discoverPortFileSafe(dir, expectedPid) {
+    try {
+        return await discoverPortFile(dir, expectedPid);
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=rpc-client.js.map

package/dist/src/rpc/rpc-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-client.js","sourceRoot":"","sources":["../../../src/rpc/rpc-client.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,wEAAwE;AACxE,0BAA0B;AAC1B,OAAO,EAAE,sBAAsB,EAAE,MAAM,gDAAgD,CAAA;AAEvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAG9C,MAAM,kBAAkB,GAAG,KAAK,CAAA;AAEhC,MAAM,cAAc,GAAgB,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;AACvE,MAAM,gBAAgB,GAAsB,EAAE,CAAA;AAkB9C,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,WAAoB;IAC/D,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO;YAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,GAAG,EACH,WAAW,EACX,YAAY,EACZ,OAAO,EACP,OAAO,CACR,CAAA;YACD,OAAO,MAAM,IAAI,cAAc,CAAA;QACjC,CAAC;QACD,KAAK,CAAC,oBAAoB,CAAC,cAAc,EAAE,SAAS,EAAE,OAAO;YAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,GAAG,EACH,WAAW,EACX,4BAA4B,EAC5B;gBACE,cAAc;gBACd,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;aAClD,EACD,OAAO,CACR,CAAA;YACD,OAAO,MAAM,EAAE,QAAQ,IAAI,gBAAgB,CAAA;QAC7C,CAAC;KACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,IAAI,CACjB,GAAW,EACX,WAA+B,EAC/B,IAAY,EACZ,IAAa,EACb,OAAsC;IAEtC,yEAAyE;IACzE,mEAAmE;IACnE,wEAAwE;IACxE,sCAAsC;IACtC,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;IAC1D,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IAEvB,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,kBAAkB,CAAA;IAC1D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAC3C,oBAAoB,KAAK,CAAC,IAAI,GAAG,IAAI,EAAE,EACvC;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,EAAE;gBACtC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,EACD,EAAE,SAAS,EAAE,CACd,CAAA;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAA;QAC7B,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,GAAW,EACX,WAA+B;IAE/B,IAAI,CAAC;QACH,OAAO,MAAM,gBAAgB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}

package/dist/src/rpc/rpc-dir.d.ts

@@ -0,0 +1,4 @@
+import { tmpdir } from 'node:os';
+export declare function getRpcDir(projectDirectory: string): string;
+export { tmpdir };
+//# sourceMappingURL=rpc-dir.d.ts.map

package/dist/src/rpc/rpc-dir.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-dir.d.ts","sourceRoot":"","sources":["../../../src/rpc/rpc-dir.ts"],"names":[],"mappings":"AACA,OAAO,EAAW,MAAM,EAAE,MAAM,SAAS,CAAA;AAMzC,wBAAgB,SAAS,CAAC,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAc1D;AAED,OAAO,EAAE,MAAM,EAAE,CAAA"}

package/dist/src/rpc/rpc-dir.js

@@ -0,0 +1,19 @@
+import { createHash } from 'node:crypto';
+import { homedir, tmpdir } from 'node:os';
+import { isAbsolute, join, resolve } from 'node:path';
+const RPC_DIR_ENV = 'ANTIGRAVITY_AUTH_RPC_DIR';
+// Both processes must resolve the SAME dir from the SAME project directory.
+export function getRpcDir(projectDirectory) {
+    const override = process.env[RPC_DIR_ENV]?.trim();
+    if (override) {
+        return isAbsolute(override) ? override : resolve(projectDirectory, override);
+    }
+    const projectHash = createHash('sha256')
+        .update(resolve(projectDirectory))
+        .digest('hex')
+        .slice(0, 16);
+    const stateHome = process.env.XDG_STATE_HOME ?? join(homedir(), '.local', 'state');
+    return join(stateHome, 'cortexkit', 'antigravity-auth', 'rpc', projectHash);
+}
+export { tmpdir };
+//# sourceMappingURL=rpc-dir.js.map

package/dist/src/rpc/rpc-dir.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-dir.js","sourceRoot":"","sources":["../../../src/rpc/rpc-dir.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAErD,MAAM,WAAW,GAAG,0BAA0B,CAAA;AAE9C,4EAA4E;AAC5E,MAAM,UAAU,SAAS,CAAC,gBAAwB;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAA;IACjD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;IAC9E,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC;SACrC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;SACjC,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACf,MAAM,SAAS,GACb,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;IAElE,OAAO,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,kBAAkB,EAAE,KAAK,EAAE,WAAW,CAAC,CAAA;AAC7E,CAAC;AAED,OAAO,EAAE,MAAM,EAAE,CAAA"}

package/dist/src/rpc/rpc-server.d.ts

@@ -0,0 +1,13 @@
+import type { ApplyRequest, ApplyResult, RpcNotification } from './protocol';
+export interface StartRpcServerOptions {
+    dir: string;
+    apply(request: ApplyRequest): Promise<ApplyResult> | ApplyResult;
+    drain(lastReceivedId: number, sessionId?: string): Promise<RpcNotification[]> | RpcNotification[];
+}
+export interface RpcServerHandle {
+    port: number;
+    token: string;
+    stop(): Promise<void>;
+}
+export declare function startRpcServer(options: StartRpcServerOptions): Promise<RpcServerHandle>;
+//# sourceMappingURL=rpc-server.d.ts.map

package/dist/src/rpc/rpc-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-server.d.ts","sourceRoot":"","sources":["../../../src/rpc/rpc-server.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EAEX,eAAe,EAChB,MAAM,YAAY,CAAA;AAmBnB,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,WAAW,CAAA;IAChE,KAAK,CACH,cAAc,EAAE,MAAM,EACtB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,EAAE,CAAC,GAAG,eAAe,EAAE,CAAA;CAClD;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AAWD,wBAAsB,cAAc,CAClC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC,CAoE1B"}

package/dist/src/rpc/rpc-server.js

@@ -0,0 +1,231 @@
+import { randomBytes, timingSafeEqual } from 'node:crypto';
+import { unlink } from 'node:fs/promises';
+import { createServer, } from 'node:http';
+import { join } from 'node:path';
+import { writePortFile } from './port-file';
+const LOOPBACK_HOST = '127.0.0.1';
+const REQUEST_TIMEOUT_MS = 2_000;
+const APPLY_TIMEOUT_MS = 120_000;
+const MAX_BODY_BYTES = 1024 * 1024;
+const APPLY_PATH = '/rpc/apply';
+const NOTIFICATIONS_PATH = '/rpc/pending-notifications';
+const HEALTH_PATH = '/health';
+const COMMANDS = new Set([
+    'antigravity-quota',
+    'antigravity-account',
+    'antigravity-routing',
+    'antigravity-killswitch',
+    'antigravity-dump',
+    'antigravity-logging',
+]);
+class HttpError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+    }
+}
+export async function startRpcServer(options) {
+    const token = randomBytes(32).toString('hex');
+    const server = createServer((request, response) => {
+        void handleRequest(request, response, token, options).catch((error) => {
+            if (response.headersSent || response.writableEnded)
+                return;
+            if (error instanceof HttpError) {
+                sendJson(response, error.status, { error: error.message });
+                return;
+            }
+            sendJson(response, 500, { error: 'Internal RPC error' });
+        });
+    });
+    server.headersTimeout = REQUEST_TIMEOUT_MS;
+    server.requestTimeout = REQUEST_TIMEOUT_MS;
+    await new Promise((resolve, reject) => {
+        const onError = (error) => {
+            server.off('listening', onListening);
+            reject(error);
+        };
+        const onListening = () => {
+            server.off('error', onError);
+            resolve();
+        };
+        server.once('error', onError);
+        server.once('listening', onListening);
+        server.listen(0, LOOPBACK_HOST);
+    });
+    // unref so the open TCP listener does not keep the host process alive
+    // once the rest of the event loop has nothing else to do.
+    server.unref();
+    const address = server.address();
+    if (!address) {
+        await closeServer(server);
+        throw new Error('RPC server started without a TCP address');
+    }
+    try {
+        await writePortFile(options.dir, {
+            pid: process.pid,
+            port: address.port,
+            token,
+        });
+    }
+    catch (error) {
+        await closeServer(server);
+        throw error;
+    }
+    let stopping = null;
+    return {
+        port: address.port,
+        token,
+        stop() {
+            if (!stopping) {
+                stopping = (async () => {
+                    await closeServer(server);
+                    try {
+                        await unlink(join(options.dir, `port-${process.pid}.json`));
+                    }
+                    catch (error) {
+                        if (!isNodeError(error, 'ENOENT'))
+                            throw error;
+                    }
+                })();
+            }
+            return stopping;
+        },
+    };
+}
+async function handleRequest(request, response, token, options) {
+    const path = request.url
+        ? new URL(request.url, 'http://localhost').pathname
+        : '';
+    if (request.method === 'GET' && path === HEALTH_PATH) {
+        sendJson(response, 200, { ok: true });
+        return;
+    }
+    if (request.method !== 'POST' ||
+        (path !== APPLY_PATH && path !== NOTIFICATIONS_PATH)) {
+        sendJson(response, 404, { error: 'Not found' });
+        return;
+    }
+    if (!isAuthorized(request.headers.authorization, token)) {
+        sendJson(response, 401, { error: 'Unauthorized' });
+        return;
+    }
+    const body = await readJsonBody(request);
+    if (path === APPLY_PATH) {
+        const applyRequest = parseApplyRequest(body);
+        const result = await withTimeout(Promise.resolve(options.apply(applyRequest)), APPLY_TIMEOUT_MS);
+        sendJson(response, 200, result);
+        return;
+    }
+    const pendingRequest = parsePendingRequest(body);
+    const notifications = await options.drain(pendingRequest.lastReceivedId, pendingRequest.sessionId);
+    sendJson(response, 200, { messages: notifications });
+}
+function isAuthorized(header, token) {
+    const prefix = 'Bearer ';
+    const provided = header?.startsWith(prefix) ? header.slice(prefix.length) : '';
+    const expectedBytes = Buffer.from(token);
+    const providedBytes = Buffer.from(provided);
+    const padded = Buffer.alloc(expectedBytes.length);
+    providedBytes.copy(padded, 0, 0, expectedBytes.length);
+    const sameLength = providedBytes.length === expectedBytes.length;
+    return timingSafeEqual(padded, expectedBytes) && sameLength;
+}
+async function readJsonBody(request) {
+    const declaredLength = Number(request.headers['content-length'] ?? 0);
+    if (Number.isFinite(declaredLength) && declaredLength > MAX_BODY_BYTES) {
+        request.resume();
+        throw new HttpError(413, 'Request body too large');
+    }
+    const chunks = [];
+    let bytes = 0;
+    await new Promise((resolve, reject) => {
+        request.on('data', (chunk) => {
+            const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+            bytes += buffer.length;
+            if (bytes > MAX_BODY_BYTES) {
+                request.removeAllListeners('data');
+                request.on('data', () => { });
+                request.resume();
+                reject(new HttpError(413, 'Request body too large'));
+                return;
+            }
+            chunks.push(buffer);
+        });
+        request.once('end', resolve);
+        request.once('error', reject);
+        request.once('aborted', () => reject(new HttpError(400, 'Request aborted')));
+    });
+    try {
+        return JSON.parse(Buffer.concat(chunks).toString('utf8'));
+    }
+    catch {
+        throw new HttpError(400, 'Invalid JSON');
+    }
+}
+function parseApplyRequest(value) {
+    if (!isRecord(value) ||
+        typeof value.command !== 'string' ||
+        !COMMANDS.has(value.command) ||
+        typeof value.arguments !== 'string' ||
+        (value.sessionId !== undefined && typeof value.sessionId !== 'string')) {
+        throw new HttpError(400, 'Invalid apply request');
+    }
+    return value;
+}
+function parsePendingRequest(value) {
+    if (!isRecord(value) ||
+        !Number.isSafeInteger(value.lastReceivedId) ||
+        value.lastReceivedId < 0 ||
+        (value.sessionId !== undefined && typeof value.sessionId !== 'string')) {
+        throw new HttpError(400, 'Invalid pending-notifications request');
+    }
+    return {
+        lastReceivedId: value.lastReceivedId,
+        ...(value.sessionId === undefined
+            ? {}
+            : { sessionId: value.sessionId }),
+    };
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function sendJson(response, status, value) {
+    response.writeHead(status, {
+        'content-type': 'application/json; charset=utf-8',
+        'x-content-type-options': 'nosniff',
+    });
+    response.end(JSON.stringify(value));
+}
+async function withTimeout(promise, timeoutMs) {
+    let timeout;
+    const deadline = new Promise((_, reject) => {
+        timeout = setTimeout(() => reject(new HttpError(504, 'RPC handler timed out')), timeoutMs);
+        timeout.unref?.();
+    });
+    try {
+        return await Promise.race([promise, deadline]);
+    }
+    finally {
+        if (timeout)
+            clearTimeout(timeout);
+    }
+}
+function closeServer(server) {
+    return new Promise((resolve, reject) => {
+        server.close((error) => {
+            if (error && !isNodeError(error, 'ERR_SERVER_NOT_RUNNING')) {
+                reject(error);
+                return;
+            }
+            resolve();
+        });
+        server.closeAllConnections?.();
+    });
+}
+function isNodeError(error, code) {
+    return (error instanceof Error &&
+        'code' in error &&
+        error.code === code);
+}
+//# sourceMappingURL=rpc-server.js.map

package/dist/src/rpc/rpc-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-server.js","sourceRoot":"","sources":["../../../src/rpc/rpc-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EACL,YAAY,GAGb,MAAM,WAAW,CAAA;AAElB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAQ3C,MAAM,aAAa,GAAG,WAAW,CAAA;AACjC,MAAM,kBAAkB,GAAG,KAAK,CAAA;AAChC,MAAM,gBAAgB,GAAG,OAAO,CAAA;AAChC,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,CAAA;AAClC,MAAM,UAAU,GAAG,YAAY,CAAA;AAC/B,MAAM,kBAAkB,GAAG,4BAA4B,CAAA;AACvD,MAAM,WAAW,GAAG,SAAS,CAAA;AAE7B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAmB;IACzC,mBAAmB;IACnB,qBAAqB;IACrB,qBAAqB;IACrB,wBAAwB;IACxB,kBAAkB;IAClB,qBAAqB;CACtB,CAAC,CAAA;AAiBF,MAAM,SAAU,SAAQ,KAAK;IAEhB;IADX,YACW,MAAc,EACvB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;QAHL,WAAM,GAAN,MAAM,CAAQ;IAIzB,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAA8B;IAE9B,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC7C,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAChD,KAAK,aAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACpE,IAAI,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,aAAa;gBAAE,OAAM;YAC1D,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;gBAC/B,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;gBAC1D,OAAM;YACR,CAAC;YACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAA;QAC1D,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,MAAM,CAAC,cAAc,GAAG,kBAAkB,CAAA;IAC1C,MAAM,CAAC,cAAc,GAAG,kBAAkB,CAAA;IAE1C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;YAC/B,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;YACpC,MAAM,CAAC,KAAK,CAAC,CAAA;QACf,CAAC,CAAA;QACD,MAAM,WAAW,GAAG,GAAG,EAAE;YACvB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC5B,OAAO,EAAE,CAAA;QACX,CAAC,CAAA;QACD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC7B,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;QACrC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,sEAAsE;IACtE,0DAA0D;IAC1D,MAAM,CAAC,KAAK,EAAE,CAAA;IAEd,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAwB,CAAA;IACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,WAAW,CAAC,MAAM,CAAC,CAAA;QACzB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC7D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE;YAC/B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK;SACN,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,MAAM,CAAC,CAAA;QACzB,MAAM,KAAK,CAAA;IACb,CAAC;IAED,IAAI,QAAQ,GAAyB,IAAI,CAAA;IACzC,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK;QACL,IAAI;YACF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;oBACrB,MAAM,WAAW,CAAC,MAAM,CAAC,CAAA;oBACzB,IAAI,CAAC;wBACH,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAA;oBAC7D,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;4BAAE,MAAM,KAAK,CAAA;oBAChD,CAAC;gBACH,CAAC,CAAC,EAAE,CAAA;YACN,CAAC;YACD,OAAO,QAAQ,CAAA;QACjB,CAAC;KACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,OAAwB,EACxB,QAAwB,EACxB,KAAa,EACb,OAA8B;IAE9B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG;QACtB,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,QAAQ;QACnD,CAAC,CAAC,EAAE,CAAA;IACN,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACrD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;QACrC,OAAM;IACR,CAAC;IACD,IACE,OAAO,CAAC,MAAM,KAAK,MAAM;QACzB,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,kBAAkB,CAAC,EACpD,CAAC;QACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;QAC/C,OAAM;IACR,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC;QACxD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QAClD,OAAM;IACR,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAA;IACxC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;QAC5C,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAC5C,gBAAgB,CACjB,CAAA;QACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;QAC/B,OAAM;IACR,CAAC;IAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;IAChD,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,KAAK,CACvC,cAAc,CAAC,cAAc,EAC7B,cAAc,CAAC,SAAS,CACzB,CAAA;IACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAA;AACtD,CAAC;AAED,SAAS,YAAY,CAAC,MAA0B,EAAE,KAAa;IAC7D,MAAM,MAAM,GAAG,SAAS,CAAA;IACxB,MAAM,QAAQ,GAAG,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9E,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACxC,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;IACjD,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IACtD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM,CAAA;IAChE,OAAO,eAAe,CAAC,MAAM,EAAE,aAAa,CAAC,IAAI,UAAU,CAAA;AAC7D,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAwB;IAClD,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAA;IACrE,IAAI,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,cAAc,EAAE,CAAC;QACvE,OAAO,CAAC,MAAM,EAAE,CAAA;QAChB,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAA;IACpD,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAClE,KAAK,IAAI,MAAM,CAAC,MAAM,CAAA;YACtB,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;gBAC3B,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;gBAClC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;gBAC5B,OAAO,CAAC,MAAM,EAAE,CAAA;gBAChB,MAAM,CAAC,IAAI,SAAS,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC,CAAA;gBACpD,OAAM;YACR,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACrB,CAAC,CAAC,CAAA;QACF,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAC5B,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC7B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAA;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;IAC1C,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QACjC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAA2B,CAAC;QAChD,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,EACtE,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAA;IACnD,CAAC;IACD,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IAIzC,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC;QAC1C,KAAK,CAAC,cAAyB,GAAG,CAAC;QACpC,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,EACtE,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,uCAAuC,CAAC,CAAA;IACnE,CAAC;IACD,OAAO;QACL,cAAc,EAAE,KAAK,CAAC,cAAwB;QAC9C,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;YAC/B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAmB,EAAE,CAAC;KAC9C,CAAA;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,SAAS,QAAQ,CACf,QAAwB,EACxB,MAAc,EACd,KAAc;IAEd,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;QACzB,cAAc,EAAE,iCAAiC;QACjD,wBAAwB,EAAE,SAAS;KACpC,CAAC,CAAA;IACF,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;AACrC,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,OAAmB,EACnB,SAAiB;IAEjB,IAAI,OAAmC,CAAA;IACvC,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAChD,OAAO,GAAG,UAAU,CAClB,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC,EACzD,SAAS,CACV,CAAA;QACD,OAAO,CAAC,KAAK,EAAE,EAAE,CAAA;IACnB,CAAC,CAAC,CAAA;IACF,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;IAChD,CAAC;YAAS,CAAC;QACT,IAAI,OAAO;YAAE,YAAY,CAAC,OAAO,CAAC,CAAA;IACpC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAAuC;IAC1D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACrB,IAAI,KAAK,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,wBAAwB,CAAC,EAAE,CAAC;gBAC3D,MAAM,CAAC,KAAK,CAAC,CAAA;gBACb,OAAM;YACR,CAAC;YACD,OAAO,EAAE,CAAA;QACX,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,mBAAmB,EAAE,EAAE,CAAA;IAChC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,OAAO,CACL,KAAK,YAAY,KAAK;QACtB,MAAM,IAAI,KAAK;QACd,KAA+B,CAAC,IAAI,KAAK,IAAI,CAC/C,CAAA;AACH,CAAC"}

package/dist/src/sidebar-state.d.ts

@@ -0,0 +1,240 @@
+/**
+ * Sidebar state contract for the OpenTUI sidebar.
+ *
+ * This module is the read-only seam between the long-running plugin and the
+ * Solid/OpenTUI sidebar tree. It deliberately does NOT import account storage,
+ * the account manager, OAuth code, or any other privileged host-side module:
+ * the TUI is rendered inside the host's terminal and a single stray import
+ * could leak credentials or pull a heavy manager into the render path.
+ *
+ * The plugin writes a redacted snapshot to the file resolved by
+ * `getSidebarStateFile()` and the TUI polls it. The contract version is `1`:
+ * any future field that the TUI cannot understand must be ignored, and any
+ * broken/missing file must collapse to `DEFAULT_SIDEBAR_STATE`.
+ *
+ * ## Writer surface
+ *
+ * The plugin-side writers live here too so the read and write halves of the
+ * contract evolve together. They are imported by the plugin (auth-loader,
+ * quota, fetch-interceptor, event-handler, commands) but never invoked from
+ * the TUI's compiled tree — that tree only calls the readers, so the
+ * heavyweight core imports below never run inside the host's render path.
+ *
+ * Every disk mutation follows the same recipe:
+ *
+ *   1. Serialize through `sidebarWriteChain` so concurrent in-process calls
+ *      never interleave merges against the same file.
+ *   2. Acquire Task 7's `acquireFencedFileLock` with bounded retry+jitter
+ *      (≤2s). A live cross-process holder that does not release in time
+ *      surfaces as `SidebarStateLockContentionError`.
+ *   3. Re-read and normalize the on-disk state while holding the lock.
+ *   4. Merge the new machine or routing payload against the re-read state.
+ *   5. `assertOwned()` + `writeJsonAtomic` with mode 0o600, then release.
+ *
+ * The merge step is deterministic: machine fields adopt only when the new
+ * `checkedAt` is ≥ the on-disk one, `routingAuthoritative` is sticky-true,
+ * and `activeRouting` is merged independently and pruned to the freshest
+ * 100 entries within 24h.
+ */
+export declare const SIDEBAR_STATE_VERSION: 1;
+export type SidebarQuotaKey = 'claude' | 'gemini-pro' | 'gemini-flash' | 'gpt-oss';
+export interface SidebarQuotaEntry {
+    remainingPercent: number;
+    resetAt?: number;
+}
+export interface SidebarAccountState {
+    id: string;
+    label: string;
+    enabled: boolean;
+    health: number;
+    current: boolean;
+    cooldownUntil?: number;
+    quota: Partial<Record<SidebarQuotaKey, SidebarQuotaEntry>>;
+}
+export interface SidebarRoutingEntry {
+    accountId: string;
+    modelFamily: 'claude' | 'gemini';
+    headerStyle: 'antigravity' | 'gemini-cli';
+    strategy?: 'sticky' | 'round-robin' | 'hybrid';
+    updatedAt: number;
+}
+export interface SidebarStateV1 {
+    version: typeof SIDEBAR_STATE_VERSION;
+    checkedAt: number;
+    accounts: SidebarAccountState[];
+    activeRouting: Record<string, SidebarRoutingEntry>;
+    routingAuthoritative: boolean;
+    quotaBackoffUntil?: number;
+    lastError?: string;
+}
+/**
+ * The subset of `SidebarStateV1` that a non-routing writer may set. The
+ * fetch interceptor writes `activeRouting` directly via its own entry point
+ * because routing is session-scoped, not machine-scoped.
+ */
+export interface SidebarMachineState {
+    checkedAt: number;
+    accounts: SidebarAccountState[];
+    quotaBackoffUntil?: number;
+    lastError?: string;
+    /**
+     * Optional: opt in to mark the snapshot as authoritative. When `true`,
+     * the merge keeps the existing `routingAuthoritative: true` even if a
+     * later non-authoritative machine write lands. Sticky-true semantics.
+     */
+    routingAuthoritative?: boolean;
+}
+export declare const DEFAULT_SIDEBAR_STATE: SidebarStateV1;
+export declare const SIDEBAR_STATE_ENV = "ANTIGRAVITY_AUTH_SIDEBAR_STATE_FILE";
+/**
+ * Thrown by every writer when the cross-process lock cannot be acquired
+ * within `SIDEBAR_LOCK_TIMEOUT_MS`. The caller decides whether to surface
+ * a toast, drop the write, or retry the next tick.
+ */
+export declare class SidebarStateLockContentionError extends Error {
+    readonly details: {
+        stateFile: string;
+        timeoutMs: number;
+    };
+    constructor(stateFile: string, timeoutMs: number);
+}
+/**
+ * Steps exposed to the merge hooks. Race tests pause writers here; production
+ * callers leave the hooks unset (a no-op fast path).
+ *
+ * - `await-lock` — before invoking `acquireFencedFileLock`.
+ * - `acquired-lock` — after the lock is granted and before the read.
+ * - `read-state` — after the on-disk state is normalized.
+ * - `merged-state` — after the merge but before `writeJsonAtomic`.
+ * - `wrote-state` — after the rename but before `lock.release()`.
+ */
+export type SidebarMergeStep = 'await-lock' | 'acquired-lock' | 'read-state' | 'merged-state' | 'wrote-state';
+export interface SidebarMergeHooks {
+    onStep?: (step: SidebarMergeStep) => Promise<void> | void;
+}
+/**
+ * Install (or clear with `null`) the deterministic race hooks. Tests use
+ * these to inject interleavings; production callers leave them unset. The
+ * module-level state means a test must reset hooks in its own `afterEach`
+ * to avoid bleeding into the next test.
+ */
+export declare function setSidebarMergeHooks(hooks: SidebarMergeHooks | null): void;
+/**
+ * Resolve the on-disk path the plugin writes to and the TUI reads from.
+ *
+ * - `ANTIGRAVITY_AUTH_SIDEBAR_STATE_FILE` wins when set (tests, packaged
+ *   installers, and any user override).
+ * - Otherwise fall back to the XDG state directory, mirroring the path
+ *   conventions used elsewhere in the project.
+ */
+export declare function getSidebarStateFile(): string;
+/**
+ * Read and normalize the sidebar state file. Returns the default state when
+ * the file is missing, unreadable, malformed, or schema-incompatible — the TUI
+ * must never throw out of `readSidebarState()`, the panel just shows
+ * "Awaiting Antigravity state" and the next poll retries.
+ *
+ * The read is sync on purpose: the TUI polls on a 2-second timer and the file
+ * is tiny (a handful of accounts); an async read here would just add race
+ * surface area against Solid's reactive render cycle.
+ */
+export declare function readSidebarState(path?: string): SidebarStateV1;
+/**
+ * Ensure the parent directory for the sidebar state file exists. Convenience
+ * helper used by writers (tests, plugins) — the TUI itself does not write.
+ */
+export declare function ensureSidebarStateDir(path?: string): void;
+/**
+ * Drop active-routing entries older than 24h and cap the map at the freshest
+ * 100. Pure helper exposed for unit testing; the writers call it on every
+ * merge so the on-disk map never grows without bound.
+ */
+export declare function pruneActiveRouting(map: Record<string, SidebarRoutingEntry>, now: number): Record<string, SidebarRoutingEntry>;
+/**
+ * Structural input for `redactAccountForSidebar`. Decoupled from the core
+ * `ManagedAccount` type so this module never forces a type-level import
+ * shape on callers (and so the TUI's compiled tree does not see the core
+ * ManagedAccount shape beyond what's actually used).
+ *
+ * Deliberately excludes `email`: the sidebar/redaction boundary is a PII
+ * firewall. Adding `email` here would re-introduce the leak this boundary
+ * exists to prevent. Legacy profile labels are accepted but never serialized.
+ */
+export interface SidebarAccountRedactionInput {
+    /** Position in the harness-visible account array. */
+    index: number;
+    /** Legacy profile label; deliberately ignored by the redactor. */
+    label?: string;
+    enabled?: boolean;
+    current?: boolean;
+    coolingDownUntil?: number;
+    /** Health score in `[0, 100]`. Defaults to 100 when missing. */
+    healthScore?: number;
+    cachedQuota?: {
+        claude?: {
+            remainingFraction?: number;
+            resetTime?: string;
+        };
+        'gemini-pro'?: {
+            remainingFraction?: number;
+            resetTime?: string;
+        };
+        'gemini-flash'?: {
+            remainingFraction?: number;
+            resetTime?: string;
+        };
+        'gpt-oss'?: {
+            remainingFraction?: number;
+            resetTime?: string;
+        };
+    };
+}
+/**
+ * Convert a live account snapshot into the redacted shape the TUI renders.
+ * The redacted `SidebarAccountState` carries no email, refresh token, access
+ * token, project ID, fingerprint, OAuth profile name, or other personal or
+ * credential-shaped fields. Display labels are generated ordinal account names.
+ */
+export declare function redactAccountForSidebar(source: SidebarAccountRedactionInput): SidebarAccountState;
+/**
+ * Build a `SidebarMachineState` from a list of live account snapshots.
+ * Convenience for the auth-loader / quota writer call sites that already
+ * hold an array of accounts and want to push a single snapshot.
+ */
+export declare function buildSidebarMachineStateFromAccounts(accounts: SidebarAccountRedactionInput[], options?: {
+    checkedAt?: number;
+    quotaBackoffUntil?: number;
+    lastError?: string;
+    routingAuthoritative?: boolean;
+}): SidebarMachineState;
+interface SidebarStateWriteOptions {
+    stateFile?: string;
+}
+/**
+ * Wait for any in-flight sidebar state write to drain. The plugin lifecycle
+ * calls this during `dispose()` so the file logger and RPC server are torn
+ * down only after every queued write has either landed or thrown.
+ */
+export declare function drainSidebarWrites(): Promise<void>;
+/**
+ * Upsert a single session's active routing entry. The fetch interceptor calls
+ * this with `authoritative: true` after every final route selection; the
+ * `accountId`/`modelFamily`/`headerStyle` fields are already redacted by the
+ * caller (the writer never sees token or project fields).
+ */
+export declare function upsertSidebarActiveRouting(sessionId: string, entry: SidebarRoutingEntry, options?: SidebarStateWriteOptions & {
+    authoritative?: boolean;
+}): Promise<void>;
+/**
+ * Remove one session's active routing entry. The event handler calls this
+ * when a session is deleted so the sidebar does not retain dead routes.
+ */
+export declare function removeSidebarActiveRouting(sessionId: string, options?: SidebarStateWriteOptions): Promise<void>;
+/**
+ * Write a new machine-state snapshot. The fetch interceptor and quota
+ * manager call this after each refresh; auth-loader calls it after the
+ * account pool is materialized.
+ */
+export declare function setSidebarMachineState(next: SidebarMachineState, options?: SidebarStateWriteOptions): Promise<void>;
+export {};
+//# sourceMappingURL=sidebar-state.d.ts.map