@cortexkit/opencode-antigravity-auth 2.2.0 → 3.0.0

package/dist/types/src/plugin/ga-location-services.d.ts

@@ -0,0 +1,389 @@
+/**
+ * The OpenCode 2 (GA host) location services: account state for the
+ * `antigravity-auth` RPC `state` method, the shared `/antigravity` menu
+ * behind `apply`, and `createGaLocationServicesFactory`, which builds a
+ * location's services from the bound account repository and the shared
+ * request pipeline.
+ *
+ * Accounts come from the location's account repository, read once per
+ * `state` call. Each account in a state answer carries an opaque selector: a
+ * random string issued for one exact credential (row id, credential epoch
+ * and recorded identity), kept across reads and reorders and retired when
+ * that credential is replaced, re-identified or removed. Account actions run
+ * through the shared menu, whose own opaque item ids are bound the same way;
+ * an account position is never accepted as a target.
+ *
+ * Everything a location needs (repository, settings controller, dump switch,
+ * logger) arrives explicitly; nothing here reads a process-global binding.
+ * The GA server module is imported for types only, so it can import this
+ * module's factory without a cycle.
+ */
+import { type AccountManager, type AccountRepository, type AccountRow, type AccountStoreModules, type AntigravityMenuAccounts, type AntigravityQuotaCheckReport, type AntigravityRepositoryMenuOptions, type AntigravityVaultAccountSource, type CommonAuthCommandsModule, type FetchAccountQuota, type ManagedAccount, type OAuthAuthDetails, type RowRef, type VaultRouteRef } from '@cortexkit/antigravity-auth-core';
+import type { AntigravityRpcScope, AntigravitySettingsDto, AntigravityStatusDto } from '../ga/rpc/protocol.js';
+import type { GaCommandService, GaJobExecutor, GaLocationServices, GaLocationServicesFactory, GaPluginOverrides, GaRpcActivation, GaRuntimeCollaborators, GaStateSource, HarnessAccessBlock, ObserveAccountSnapshot } from '../ga/server/index.js';
+import type { SidebarRoutingEntry } from '../sidebar-state.js';
+import type { GeminiDumpState } from './gemini-dump.js';
+import type { Logger } from './logger.js';
+import type { OperatorSettings } from './operator-settings.js';
+import { type AntigravityRequestExecutor, type LocalRequestCredentials, type RequestRoutingEntry } from './shared/request-services.js';
+import { type LocationRuntime } from './shared/runtime.js';
+import { type VaultAccountPool, type VaultAccountRow, type VaultQuotaAnswer, type VaultRequestSource, type VaultStateSource } from './shared/vault-request-credentials.js';
+import { type OpenCodeVaultCustody } from './vault-custody.js';
+/** What a selector names, as the registry resolves it. */
+export type GaSelectorResolution = {
+    readonly kind: 'live';
+    readonly ref: RowRef;
+} | {
+    readonly kind: 'retired';
+    readonly ref: RowRef;
+} | {
+    readonly kind: 'unknown';
+};
+/**
+ * Selectors issued for one activation. A selector is bound to one exact
+ * `RowRef` for life: the same credential keeps its selector across reads,
+ * and a credential that changes gets a new one while the old one retires.
+ */
+export interface GaSelectorRegistry {
+    /**
+     * The selectors one read would show, without changing the registry.
+     * `commit` makes them current; an aborted read simply drops the plan.
+     */
+    plan(refs: readonly RowRef[]): GaSelectorPlan;
+    resolve(selector: string): GaSelectorResolution;
+}
+export interface GaSelectorPlan {
+    /** One selector per input ref, in input order. */
+    readonly selectors: readonly string[];
+    /** Makes this plan current; returns the selectors it retired. */
+    commit(): readonly string[];
+}
+export declare function createGaSelectorRegistry(createSelector?: () => string): GaSelectorRegistry;
+/**
+ * The access block the row's metadata records. Absent or dropped metadata
+ * cannot rule a block out, so it is `unknown`, never `none`.
+ */
+export declare function accessBlockOf(row: AccountRow): HarnessAccessBlock;
+/**
+ * The settings DTO from the location's live controller and dump switch. It
+ * only reads; per-account killswitch overrides stay out because their keys
+ * derive from refresh tokens.
+ */
+export declare function gaSettingsOf(settings: OperatorSettings, dump: Pick<GeminiDumpState, 'isEnabled'>): AntigravitySettingsDto;
+export interface GaAccountStateOptions {
+    readonly repository: Pick<AccountRepository, 'read'>;
+    readonly registry: GaSelectorRegistry;
+    readonly nextReadSeq?: () => number;
+    readonly generation: string;
+    /** Read fresh for every answer, after the repository read. */
+    readonly settings: () => AntigravitySettingsDto;
+    readonly status: () => AntigravityStatusDto;
+    /** The requesting session's route; `null` when there is none. */
+    readonly route: (scope: AntigravityRpcScope) => SidebarRoutingEntry | null;
+    /** Health score for a row, when the location tracks one. */
+    readonly health?: (row: AccountRow) => number | undefined;
+    readonly observe?: ObserveAccountSnapshot;
+}
+/**
+ * Builds the `state` source. Reads run one at a time, so `readSeq` follows
+ * the order answers are built in; an aborted read leaves the selector
+ * registry unchanged. The diagnostic observer, when present, is called
+ * synchronously with a view of the same read.
+ */
+export declare function createGaAccountStateSource(options: GaAccountStateOptions): GaStateSource;
+type GaMenuOptions = Parameters<CommonAuthCommandsModule['createCommandMenu']>[0];
+type GaMenuExtraSection = NonNullable<GaMenuOptions['extras']>[number];
+/** The shared `/antigravity` menu, as the core factory builds it. */
+export type GaCommandMenu = ReturnType<CommonAuthCommandsModule['createCommandMenu']>;
+/**
+ * The location's `/antigravity` menu: the shared core menu in repository
+ * mode over this activation's repository and runtime. Accounts are acted on
+ * by the menu's own opaque item ids, each bound to one exact credential;
+ * Routing, Limits and Diagnostics read and write this location's settings
+ * controller and dump switch. `commands` must be the module whose
+ * `parseApplyRequest` the RPC activation uses.
+ */
+export declare function createGaLocationMenu(input: {
+    readonly commands: CommonAuthCommandsModule;
+    readonly repository: AntigravityMenuAccounts & Pick<AccountRepository, 'updateMetadata'>;
+    readonly runtime: Pick<LocationRuntime, 'operatorSettings' | 'dump' | 'applyOperatorSettings'>;
+    readonly refreshQuota?: AntigravityRepositoryMenuOptions['refreshQuota'];
+    readonly reauthorize?: AntigravityRepositoryMenuOptions['reauthorize'];
+    /** The Vault section, when the location has vault custody available. */
+    readonly vault?: GaMenuExtraSection;
+}): GaCommandMenu;
+/**
+ * The location's menu service: `apply` for the RPC `apply` method, and
+ * `open` for the native `/antigravity` command, which queues the menu that
+ * opens the drawer in the invoking session's scope.
+ */
+export interface GaMenuCommandService extends GaCommandService {
+    open(input: {
+        readonly scope: AntigravityRpcScope;
+        readonly signal: AbortSignal;
+    }): Promise<void>;
+}
+/**
+ * The menu service over the location's menu. Each request (already accepted
+ * by the library's own parser) runs through the menu with an invocation for
+ * its scope, whose notices are queued for that scope; once the activation's
+ * signal aborts, no new action starts. After every apply, `afterApply`
+ * brings the routing state up to date with what the action wrote; its
+ * failure is reported to the scope but does not change the menu's answer.
+ */
+export declare function createGaMenuCommandService(input: {
+    readonly menu: GaCommandMenu;
+    readonly notify: GaRpcActivation['notify'];
+    readonly afterApply?: () => Promise<void>;
+}): GaMenuCommandService;
+/** The menu's reauthorize option, as the shared core menu takes it. */
+type GaReauthorize = NonNullable<AntigravityRepositoryMenuOptions['reauthorize']>;
+/**
+ * The account items' Reauthorize action for a GA location: a browser
+ * sign-in whose result replaces exactly the credential the item was opened
+ * for (through the account adapters' repository access service, which also
+ * refuses a sign-in to a different Google account and clears the row's
+ * access blocks). The action answers once the sign-in has started and the
+ * callback listener is waiting; the rest finishes in the background and is
+ * reported to the invoking session. `afterChange` brings routing up to date
+ * with the new credential.
+ *
+ * Without an override, the redirect is received by this package's own
+ * callback listener on the registered redirect address, which accepts only
+ * the state of the sign-in it was started for.
+ */
+export declare function createGaReauthorize(input: {
+    readonly assertAdmission?: () => Promise<void>;
+    readonly repository: AccountRepository;
+    readonly overrides: GaPluginOverrides;
+    readonly afterChange: () => Promise<void>;
+}): GaReauthorize & {
+    dispose(): Promise<void>;
+};
+/**
+ * The parts of the host's integration API (`context.integration.connection`
+ * in the OpenCode 2 plugin SDK) that read the active credential of one
+ * integration. Declared without the SDK so this module stays SDK-free.
+ */
+export interface GaIntegrationConnections<C> {
+    active(integrationID: string): Promise<C | undefined>;
+    resolve(connection: C): Promise<unknown>;
+}
+/**
+ * Reads the OpenCode 2 host's own sign-in for `integrationID` in the shape
+ * the vault library classifies: an OAuth credential as
+ * `{ type: 'oauth', refresh, access, expires }`, a key credential as
+ * `{ type: 'api', key }`, and no active connection as `undefined` (empty).
+ * An active connection whose credential cannot be resolved, or a credential
+ * of another shape, rejects: custody is then refused, never decided on a
+ * slot read as empty by mistake.
+ */
+export declare function createGaHostSlotReader<C>(connections: GaIntegrationConnections<C>, integrationID: string): () => Promise<unknown>;
+/** The legacy account file name inside a location directory. */
+export declare const GA_ACCOUNTS_FILE = "antigravity-accounts.json";
+/** What `start` hands the request pipeline binding. */
+export interface GaRequestPipelineInput {
+    readonly repository: AccountRepository;
+    readonly assertAdmission?: () => Promise<void>;
+    readonly runtime: GaStartInput['runtime'];
+    readonly send: GaStartInput['send'];
+    readonly generation: string;
+    readonly overrides: GaPluginOverrides;
+    /** Where the engine records each session's route for `state`. */
+    readonly routes: GaRouteBook;
+}
+/** The request pipeline for one activation, as the shared engine builds it. */
+export interface GaRequestPipeline {
+    readonly execute: GaJobExecutor;
+    /**
+     * The menu's manual quota check over this pipeline's accounts; absent
+     * when the pipeline's custody has no such check.
+     */
+    readonly refreshQuota?: (refs: readonly RowRef[]) => Promise<AntigravityQuotaCheckReport>;
+    /** Brings the routing accounts up to date with the account store. */
+    refreshAccounts(): Promise<void>;
+    dispose(): Promise<void>;
+}
+type GaStartInput = Parameters<GaLocationServices['start']>[0];
+export interface GaLocationServicesBindings {
+    /** The common-auth `./store` and `./fs` modules the repository is built on. */
+    readonly loadStoreModules: () => Promise<AccountStoreModules>;
+    /** Resolve the shared pool; a new workspace must not create a separate account store. */
+    readonly resolveAccountFile: (directory: string) => string;
+    readonly now: () => number;
+    readonly createSelector?: () => string;
+    /** The location runtime's collaborators (sidebar file, quota, refresh). */
+    readonly runtime: (input: {
+        readonly directory: string;
+        readonly getRepository: () => Promise<AccountRepository>;
+        readonly assertAdmission: () => Promise<void>;
+        readonly overrides: GaPluginOverrides;
+    }) => GaRuntimeCollaborators;
+    /** Builds the shared request engine over the location's repository. */
+    readonly createPipeline: (input: GaRequestPipelineInput) => Promise<GaRequestPipeline>;
+    /**
+     * The location's vault custody, for the account file the location
+     * resolves. Without it the location serves its local account store only.
+     */
+    readonly custody?: (input: {
+        readonly accountFile: string;
+        readonly overrides: GaPluginOverrides;
+    }) => GaLocationCustody;
+    /**
+     * One vault account's quota check through the vault (the shared vault
+     * quota helper). Without it a vault location offers no quota check.
+     */
+    readonly fetchVaultQuota?: (input: {
+        readonly source: Pick<AntigravityVaultAccountSource, 'send' | 'attribution'>;
+        readonly ref: VaultRouteRef;
+        readonly signal: AbortSignal;
+        readonly logger: Pick<Logger, 'debug'>;
+        readonly transport?: NonNullable<GaPluginOverrides['quotaFetch']>;
+    }) => Promise<VaultQuotaAnswer>;
+}
+/** The vault source operations a GA vault location uses. */
+export type GaVaultCustodySource = VaultRequestSource & VaultStateSource & Pick<AntigravityVaultAccountSource, 'send'>;
+/** The vault custody operations a GA location uses. */
+export interface GaLocationCustody extends Pick<OpenCodeVaultCustody, 'readMode' | 'menuSection' | 'dispose' | 'readState'> {
+    custodySource(): Promise<GaVaultCustodySource>;
+}
+/**
+ * Local credentials for a repository-backed GA location, in the shared
+ * engine's `local` domain. A refresh is of the selected account itself:
+ * `refreshAccount` uses the ref the account was loaded with, so the
+ * repository stores a successor token only for that exact credential and
+ * refuses one whose row has since changed. Rows are never found again by
+ * token.
+ */
+export declare function createGaLocalCredentials(manager: AccountManager, options: {
+    /** Supplies the manager's account rows and current credential checks. */
+    readonly repository: Pick<AccountRepository, 'read'>;
+    readonly overrides: GaPluginOverrides;
+    readonly refreshQuotaAfterSuccess?: LocalRequestCredentials<ManagedAccount>['refreshQuotaAfterSuccess'];
+}): LocalRequestCredentials<ManagedAccount>;
+/**
+ * A quota check's account, carrying the repository ref captured when the
+ * account list was taken. Without a ref the account cannot be attributed
+ * and is refused.
+ */
+export interface GaQuotaTarget {
+    /** Same field as the core manager's quota-check target. */
+    readonly rowRef?: RowRef;
+}
+/** The bearer a quota check may use, for exactly the captured credential. */
+export type GaQuotaAuthorization = {
+    readonly status: 'authorized';
+    readonly ref: RowRef;
+    readonly auth: OAuthAuthDetails;
+} | {
+    readonly status: 'refused';
+    readonly reason: 'unattributed' | 'stale' | 'not-ready' | 'refresh-refused';
+};
+/**
+ * Resolves the bearer for one quota check from the repository, by the
+ * target's captured ref only. A row that no longer holds that exact
+ * credential (replaced, re-identified or removed) is refused rather than
+ * checked on its successor. An expired token is refreshed through the
+ * repository's attributed refresh, never locally.
+ */
+export declare function authorizeGaQuotaCheck(repository: Pick<AccountRepository, 'read' | 'refresh'>, target: GaQuotaTarget, now: () => number): Promise<GaQuotaAuthorization>;
+/**
+ * The GA location's quota fetcher. Each check is attributed to the target's
+ * captured repository ref: the bearer comes from `authorizeGaQuotaCheck`
+ * (stored token, or the repository's attributed refresh), and a target
+ * without a ref, or whose credential has since changed, is answered with an
+ * error result instead of being checked on another credential.
+ */
+export declare function createGaFetchAccountQuota(options: {
+    readonly assertAdmission?: () => Promise<void>;
+    readonly repository: Pick<AccountRepository, 'read' | 'refresh'>;
+    readonly now: () => number;
+    readonly overrides: GaPluginOverrides;
+    readonly logger: Pick<Logger, 'debug'>;
+}): FetchAccountQuota;
+/** The route each session's last request was dispatched on, in memory. */
+export interface GaRouteBook {
+    record(sessionId: string, entry: RequestRoutingEntry): void;
+    route(scope: AntigravityRpcScope): SidebarRoutingEntry | null;
+}
+export declare function createGaRouteBook(limit?: number): GaRouteBook;
+/** Runs one bridged job through the shared request engine. */
+export declare function createGaJobExecutor(executor: Pick<AntigravityRequestExecutor, 'execute'>): GaJobExecutor;
+/**
+ * The shared request engine over a repository-backed account manager. The
+ * engine is the same one OpenCode 1 uses; only its collaborators are this
+ * location's.
+ */
+export declare function createGaLocalRequestPipeline(input: GaRequestPipelineInput & {
+    /** This activation's account slot, read by its runtime's token refresher. */
+    readonly accounts: GaAccountSlot;
+}): Promise<GaRequestPipeline>;
+/**
+ * The shared request engine for a location whose accounts are held by the
+ * vault. Selection runs on the shared `AccountSelector` over the vault's
+ * selectable routes (metadata rows, no credential); every physical send
+ * takes a fresh receipt for the selected route through
+ * `createVaultRequestCredentials`. Nothing is refreshed or cached locally.
+ * `refreshAccounts` re-reads the vault roster and keeps each route's
+ * selection state while its route, credential and asserted account stay
+ * the same. With `state`, a route's selection state is restored from and
+ * saved to the vault's provider-state file, attributed to the receipt that
+ * last served it.
+ */
+export declare function createGaVaultRequestPipeline(input: {
+    readonly assertAdmission?: () => Promise<void>;
+    readonly pool: VaultAccountPool;
+    readonly runtime: GaStartInput['runtime'];
+    readonly overrides: GaPluginOverrides;
+    readonly routes: GaRouteBook;
+}): Promise<GaRequestPipeline & {
+    rows(): readonly VaultAccountRow[];
+}>;
+export declare function createGaLocationServicesFactory(bindings: GaLocationServicesBindings): GaLocationServicesFactory;
+/**
+ * One activation's account manager, shared by its request pipeline and its
+ * runtime's proactive token refresher. Each activation has its own slot.
+ */
+export interface GaAccountSlot {
+    current: AccountManager | null;
+    /** The activation's quota logger, from its location runtime once built. */
+    quotaLogger: Pick<Logger, 'debug'> | null;
+}
+/**
+ * The runtime collaborators of a repository-backed GA location: quota
+ * snapshots kept in memory (a GA location writes no sidebar file), the
+ * ref-attributed quota fetcher, and a token refresher that refreshes the
+ * account it is handed through this activation's manager.
+ */
+export declare function createGaRuntimeCollaborators(input: {
+    readonly assertAdmission?: () => Promise<void>;
+    readonly getRepository: () => Promise<AccountRepository>;
+    readonly overrides: GaPluginOverrides;
+    readonly accounts: GaAccountSlot;
+    readonly now: () => number;
+}): GaRuntimeCollaborators;
+/** What the OpenCode 2 host supplies for vault custody of its locations. */
+export interface GaVaultHost {
+    /**
+     * The host's own Google sign-in, read through its public integration API
+     * (see `createGaHostSlotReader`); rejects when it cannot be read.
+     */
+    readonly readHostSlot: () => Promise<unknown>;
+    /**
+     * The vault's connection file; defaults to the vault client library's
+     * own resolution of it.
+     */
+    readonly connectionFile?: () => string | Promise<string>;
+}
+/**
+ * The production GA location services: the embedded common-auth store,
+ * the system clock, the repository-backed request pipeline and the
+ * collaborators above. Every activation gets its own repository, account
+ * slot and pipeline. With `vault`, a location can also serve the vault's
+ * accounts: its mode file decides, and the menu's Vault section switches.
+ */
+export declare function createGaLocationServicesForHost(vault?: GaVaultHost): GaLocationServicesFactory;
+/** The connection API belongs to this setup context, not a module-wide host. */
+export declare const createGaLocationServices: GaLocationServicesFactory;
+export {};
+//# sourceMappingURL=ga-location-services.d.ts.map

package/dist/types/src/plugin/ga-location-services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ga-location-services.d.ts","sourceRoot":"","sources":["../../../../src/plugin/ga-location-services.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EACL,KAAK,cAAc,EAEnB,KAAK,iBAAiB,EAEtB,KAAK,UAAU,EAEf,KAAK,mBAAmB,EAGxB,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAGlC,KAAK,wBAAwB,EAK7B,KAAK,iBAAiB,EAKtB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EAErB,KAAK,MAAM,EAOX,KAAK,aAAa,EACnB,MAAM,kCAAkC,CAAA;AACzC,OAAO,KAAK,EACV,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACrB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,KAAK,EACV,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,yBAAyB,EACzB,iBAAiB,EACjB,eAAe,EACf,sBAAsB,EAEtB,aAAa,EACb,kBAAkB,EAGlB,sBAAsB,EACvB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,KAAK,EAEV,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAc5B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAc9D,OAAO,EACL,KAAK,0BAA0B,EAG/B,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EAEtB,MAAM,uCAAuC,CAAA;AAE9C,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,oBAAoB,CAAA;AAgB3B,0DAA0D;AAC1D,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,CAAA;AAEhC;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,IAAI,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,cAAc,CAAA;IAC7C,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB,CAAA;CAChD;AAED,MAAM,WAAW,cAAc;IAC7B,kDAAkD;IAClD,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC,iEAAiE;IACjE,MAAM,IAAI,SAAS,MAAM,EAAE,CAAA;CAC5B;AAUD,wBAAgB,wBAAwB,CACtC,cAAc,GAAE,MAAM,MAAwB,GAC7C,kBAAkB,CAiEpB;AA8BD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,UAAU,GAAG,kBAAkB,CAkCjE;AAwFD;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,GACvC,sBAAsB,CAaxB;AAMD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAA;IACpD,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAA;IACrC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,MAAM,CAAA;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,8DAA8D;IAC9D,QAAQ,CAAC,QAAQ,EAAE,MAAM,sBAAsB,CAAA;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,oBAAoB,CAAA;IAC3C,iEAAiE;IACjE,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,mBAAmB,GAAG,IAAI,CAAA;IAC1E,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,MAAM,GAAG,SAAS,CAAA;IACzD,QAAQ,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAA;CAC1C;AA6CD;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,qBAAqB,GAC7B,aAAa,CA4Ef;AAMD,KAAK,aAAa,GAAG,UAAU,CAC7B,wBAAwB,CAAC,mBAAmB,CAAC,CAC9C,CAAC,CAAC,CAAC,CAAA;AACJ,KAAK,kBAAkB,GAAG,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;AAEtE,qEAAqE;AACrE,MAAM,MAAM,aAAa,GAAG,UAAU,CACpC,wBAAwB,CAAC,mBAAmB,CAAC,CAC9C,CAAA;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAA;IAC3C,QAAQ,CAAC,UAAU,EAAE,uBAAuB,GAC1C,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAA;IAC3C,QAAQ,CAAC,OAAO,EAAE,IAAI,CACpB,eAAe,EACf,kBAAkB,GAAG,MAAM,GAAG,uBAAuB,CACtD,CAAA;IACD,QAAQ,CAAC,YAAY,CAAC,EAAE,gCAAgC,CAAC,cAAc,CAAC,CAAA;IACxE,QAAQ,CAAC,WAAW,CAAC,EAAE,gCAAgC,CAAC,aAAa,CAAC,CAAA;IACtE,wEAAwE;IACxE,QAAQ,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAA;CACpC,GAAG,aAAa,CAoBhB;AAkBD;;;;GAIG;AACH,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB;IAC5D,IAAI,CAAC,KAAK,EAAE;QACV,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;QACnC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;KAC7B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAClB;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAA;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC1C,GAAG,oBAAoB,CAiCvB;AAMD,uEAAuE;AACvE,KAAK,aAAa,GAAG,WAAW,CAC9B,gCAAgC,CAAC,aAAa,CAAC,CAChD,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAA;IACtC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAA;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC1C,GAAG,aAAa,GAAG;IAAE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CA6H/C;AAMD;;;;GAIG;AACH,MAAM,WAAW,wBAAwB,CAAC,CAAC;IACzC,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAA;IACrD,OAAO,CAAC,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACzC;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,WAAW,EAAE,wBAAwB,CAAC,CAAC,CAAC,EACxC,aAAa,EAAE,MAAM,GACpB,MAAM,OAAO,CAAC,OAAO,CAAC,CAgCxB;AAMD,gEAAgE;AAChE,eAAO,MAAM,gBAAgB,8BAA8B,CAAA;AAE3D,uDAAuD;AACvD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAA;IACtC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,SAAS,CAAC,CAAA;IACzC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,CAAA;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAA;IACrC,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAC7B;AAED,+EAA+E;AAC/E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;IAC/B;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CACtB,IAAI,EAAE,SAAS,MAAM,EAAE,KACpB,OAAO,CAAC,2BAA2B,CAAC,CAAA;IACzC,qEAAqE;IACrE,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAChC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB;AAED,KAAK,YAAY,GAAG,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAE9D,MAAM,WAAW,0BAA0B;IACzC,+EAA+E;IAC/E,QAAQ,CAAC,gBAAgB,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAC7D,yFAAyF;IACzF,QAAQ,CAAC,kBAAkB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,CAAA;IAC1D,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAA;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,MAAM,CAAA;IACtC,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE;QACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAA;QACxD,QAAQ,CAAC,eAAe,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;QAC7C,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAA;KACtC,KAAK,sBAAsB,CAAA;IAC5B,uEAAuE;IACvE,QAAQ,CAAC,cAAc,EAAE,CACvB,KAAK,EAAE,sBAAsB,KAC1B,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAC/B;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;QAC5B,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAA;KACtC,KAAK,iBAAiB,CAAA;IACvB;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE;QACjC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,6BAA6B,EAAE,MAAM,GAAG,aAAa,CAAC,CAAA;QAC5E,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAA;QAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;QAC5B,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAA;KAClE,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAA;CAChC;AAED,4DAA4D;AAC5D,MAAM,MAAM,oBAAoB,GAAG,kBAAkB,GACnD,gBAAgB,GAChB,IAAI,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;AAE7C,uDAAuD;AACvD,MAAM,WAAW,iBACf,SAAQ,IAAI,CACV,oBAAoB,EACpB,UAAU,GAAG,aAAa,GAAG,SAAS,GAAG,WAAW,CACrD;IACD,aAAa,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAA;CAC/C;AAyGD;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE;IACP,yEAAyE;IACzE,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAA;IACpD,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAA;IACrC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,uBAAuB,CAAC,cAAc,CAAC,CAAC,0BAA0B,CAAC,CAAA;CACxG,GACA,uBAAuB,CAAC,cAAc,CAAC,CA2BzC;AAED;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,6EAA6E;AAC7E,MAAM,MAAM,oBAAoB,GAC5B;IACE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAChC,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;IAC1B,QAAQ,CAAC,MAAM,EACX,cAAc,GACd,OAAO,GACP,WAAW,GACX,iBAAiB,CAAA;CACtB,CAAA;AAKL;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC,EACvD,MAAM,EAAE,aAAa,EACrB,GAAG,EAAE,MAAM,MAAM,GAChB,OAAO,CAAC,oBAAoB,CAAC,CA2E/B;AAsBD;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE;IACjD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IAChE,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAA;IAC1B,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAA;IACrC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACvC,GAAG,iBAAiB,CAwDpB;AAED,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAAA;IAC3D,KAAK,CAAC,KAAK,EAAE,mBAAmB,GAAG,mBAAmB,GAAG,IAAI,CAAA;CAC9D;AAED,wBAAgB,iBAAiB,CAAC,KAAK,SAAM,GAAG,WAAW,CAwB1D;AAED,8DAA8D;AAC9D,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,IAAI,CAAC,0BAA0B,EAAE,SAAS,CAAC,GACpD,aAAa,CAiBf;AAwDD;;;;GAIG;AACH,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,sBAAsB,GAAG;IAC9B,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAA;CACjC,GACA,OAAO,CAAC,iBAAiB,CAAC,CAmE5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;IAC/B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,SAAS,CAAC,CAAA;IACzC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAA;IACrC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAC7B,GAAG,OAAO,CAAC,iBAAiB,GAAG;IAAE,IAAI,IAAI,SAAS,eAAe,EAAE,CAAA;CAAE,CAAC,CAsCtE;AAsQD,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,0BAA0B,GACnC,yBAAyB,CAsb3B;AAMD;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,cAAc,GAAG,IAAI,CAAA;IAC9B,2EAA2E;IAC3E,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CAC1C;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,QAAQ,CAAC,aAAa,EAAE,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACxD,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAA;IACrC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAA;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAA;CAC3B,GAAG,sBAAsB,CA2BzB;AAED,4EAA4E;AAC5E,MAAM,WAAW,WAAW;IAC1B;;;OAGG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7C;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACzD;AAED;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAC7C,KAAK,CAAC,EAAE,WAAW,GAClB,yBAAyB,CAiC3B;AAED,gFAAgF;AAChF,eAAO,MAAM,wBAAwB,EAAE,yBAOtC,CAAA"}

package/dist/types/src/plugin/gemini-dump.d.ts

@@ -0,0 +1,72 @@
+export declare const GEMINI_DUMP_COMMAND_NAME = "gemini-dump";
+export type GeminiDumpCommandAction = {
+    type: 'status';
+} | {
+    type: 'enable';
+} | {
+    type: 'disable';
+} | {
+    type: 'usage';
+};
+export interface GeminiDumpContext {
+    id: string;
+    files: {
+        request: string;
+        response: string;
+        metadata: string;
+    };
+    metadata: Record<string, unknown>;
+}
+export interface GeminiDumpRequestInput {
+    originalUrl: string;
+    resolvedUrl: string;
+    method?: string;
+    headers?: HeadersInit | Headers;
+    body?: BodyInit | null;
+    streaming: boolean;
+    requestedModel?: string;
+    effectiveModel?: string;
+    sessionId?: string;
+    projectId?: string;
+}
+/**
+ * One location's dump switch. `/gemini-dump on` in one location never
+ * enables dumping for another, and each location's requests consult only
+ * their own switch.
+ */
+export interface GeminiDumpState {
+    isEnabled(): boolean;
+    setEnabled(enabled: boolean): void;
+    /** Dump a request when this location's switch is on; null otherwise. */
+    dumpRequest(input: GeminiDumpRequestInput): GeminiDumpContext | null;
+    /** Status text reflecting this location's switch unless `enabled` is given. */
+    buildStatusSummary(input?: {
+        enabled?: boolean;
+    }): string;
+    /** Command reply reflecting this location's switch unless `enabled` is given. */
+    executeCommand(input: {
+        argumentsText: string;
+        enabled?: boolean;
+    }): string;
+}
+/** Build one location's dump switch, defaulting to the environment flag. */
+export declare function createGeminiDumpState(options?: {
+    enabled?: boolean;
+}): GeminiDumpState;
+export declare function isGeminiDumpEnabled(): boolean;
+export declare function setGeminiDumpEnabled(enabled: boolean): void;
+export declare function resetGeminiDumpState(): void;
+export declare function getGeminiDumpDirectory(): string;
+export declare function parseGeminiDumpCommandAction(argumentsText: string): GeminiDumpCommandAction;
+export declare function buildGeminiDumpStatusSummary(input?: {
+    enabled?: boolean;
+}): string;
+export declare function executeGeminiDumpCommand(input: {
+    argumentsText: string;
+    enabled?: boolean;
+}): string;
+export declare function dumpGeminiRequest(input: GeminiDumpRequestInput): GeminiDumpContext | null;
+export declare function noteGeminiDumpResponse(context: GeminiDumpContext | null | undefined, response: Pick<Response, 'status' | 'statusText' | 'headers'>): void;
+export declare function appendGeminiDumpResponseText(context: GeminiDumpContext | null | undefined, text: string): void;
+export declare function createGeminiDumpResponseTransform(context: GeminiDumpContext | null | undefined): TransformStream<Uint8Array, Uint8Array> | null;
+//# sourceMappingURL=gemini-dump.d.ts.map

package/dist/types/src/plugin/gemini-dump.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-dump.d.ts","sourceRoot":"","sources":["../../../../src/plugin/gemini-dump.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,wBAAwB,gBAAgB,CAAA;AAqBrD,MAAM,MAAM,uBAAuB,GAC/B;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAA;AAErB,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE;QACL,OAAO,EAAE,MAAM,CAAA;QACf,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;KACjB,CAAA;IACD,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAA;IAC/B,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAA;IACtB,SAAS,EAAE,OAAO,CAAA;IAClB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,SAAS,IAAI,OAAO,CAAA;IACpB,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;IAClC,wEAAwE;IACxE,WAAW,CAAC,KAAK,EAAE,sBAAsB,GAAG,iBAAiB,GAAG,IAAI,CAAA;IACpE,+EAA+E;IAC/E,kBAAkB,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM,CAAA;IACzD,iFAAiF;IACjF,cAAc,CAAC,KAAK,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,MAAM,CAAA;CAC5E;AAOD,4EAA4E;AAC5E,wBAAgB,qBAAqB,CACnC,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAClC,eAAe,CAajB;AAOD,wBAAgB,mBAAmB,YAElC;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,QAEpD;AAED,wBAAgB,oBAAoB,SAGnC;AAED,wBAAgB,sBAAsB,WAErC;AAED,wBAAgB,4BAA4B,CAC1C,aAAa,EAAE,MAAM,GACpB,uBAAuB,CAQzB;AAED,wBAAgB,4BAA4B,CAAC,KAAK,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,UAEzE;AAaD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB,UAEA;AAgLD,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,sBAAsB,GAC5B,iBAAiB,GAAG,IAAI,CAE1B;AAuDD,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,iBAAiB,GAAG,IAAI,GAAG,SAAS,EAC7C,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,GAAG,YAAY,GAAG,SAAS,CAAC,QAQ9D;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,iBAAiB,GAAG,IAAI,GAAG,SAAS,EAC7C,IAAI,EAAE,MAAM,QAQb;AAED,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,iBAAiB,GAAG,IAAI,GAAG,SAAS,GAC5C,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,IAAI,CAQhD"}

package/dist/types/src/plugin/google-search-tool.d.ts

@@ -0,0 +1,10 @@
+import type { GetAuth, PluginClient, PluginTool } from './types.js';
+type GoogleSearchAuthLoader = () => Promise<Awaited<ReturnType<GetAuth>> | null | undefined>;
+export declare function createGoogleSearchTool({ getAuth, client, providerId, mayStartLocalWork, }: {
+    mayStartLocalWork?: () => Promise<boolean>;
+    getAuth: GoogleSearchAuthLoader;
+    client: PluginClient;
+    providerId: string;
+}): PluginTool;
+export {};
+//# sourceMappingURL=google-search-tool.d.ts.map

package/dist/types/src/plugin/google-search-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-search-tool.d.ts","sourceRoot":"","sources":["../../../../src/plugin/google-search-tool.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAIhE,KAAK,sBAAsB,GAAG,MAAM,OAAO,CACzC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,CAChD,CAAA;AAED,wBAAgB,sBAAsB,CAAC,EACrC,OAAO,EACP,MAAM,EACN,UAAU,EACV,iBAAiB,GAClB,EAAE;IACD,iBAAiB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;IAC1C,OAAO,EAAE,sBAAsB,CAAA;IAC/B,MAAM,EAAE,YAAY,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;CACnB,GAAG,UAAU,CAiEb"}

package/dist/types/src/plugin/image-saver.d.ts

@@ -0,0 +1,6 @@
+export declare function saveImageToDisk(base64Data: string, mimeType: string, outputDir?: string): string;
+export declare function processImageData(inlineData: {
+    mimeType?: string;
+    data?: string;
+}, outputDir?: string): string | null;
+//# sourceMappingURL=image-saver.d.ts.map

package/dist/types/src/plugin/image-saver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-saver.d.ts","sourceRoot":"","sources":["../../../../src/plugin/image-saver.ts"],"names":[],"mappings":"AA8BA,wBAAgB,eAAe,CAC7B,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,MAAM,CAWR;AAED,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAChD,SAAS,CAAC,EAAE,MAAM,GACjB,MAAM,GAAG,IAAI,CAaf"}

package/dist/types/src/plugin/index.d.ts

@@ -0,0 +1,30 @@
+import { BackgroundQuotaRefresh } from './background-quota-refresh.js';
+import { type PluginDependencyOverrides } from './dependencies.js';
+import { type PluginLifecycle } from './lifecycle.js';
+import { type QuotaManager } from './quota.js';
+import type { PluginInput, PluginResult } from './types.js';
+export type { PluginResult } from './types.js';
+/**
+ * High-level options for the plugin factory. Production callers omit it
+ * entirely; the e2e workspace injects overrides so the same factory can
+ * build against a mock Antigravity server bound to 127.0.0.1.
+ */
+export interface CreateAntigravityPluginOptions {
+    /**
+     * Dependency overrides for the composition seam — fetch implementation,
+     * Antigravity transport, OAuth primitives, filesystem roots, clock, and
+     * randomness. Defaults to production implementations.
+     */
+    dependencies?: PluginDependencyOverrides;
+    /**
+     * Test-only seam: called synchronously after the background poller is
+     * constructed, before `start()`. Lets wiring tests capture the instance
+     * without reaching into lifecycle internals.
+     */
+    _onPollerCreated?: (poller: BackgroundQuotaRefresh) => void;
+}
+export declare function registerQuotaManagerProducer(lifecycle: PluginLifecycle, quotaManager: QuotaManager): void;
+export declare const createAntigravityPlugin: (providerId: string, options?: CreateAntigravityPluginOptions) => (input: PluginInput) => Promise<PluginResult>;
+export declare const AntigravityCLIOAuthPlugin: (input: PluginInput) => Promise<PluginResult>;
+export declare const GoogleOAuthPlugin: (input: PluginInput) => Promise<PluginResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/types/src/plugin/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/plugin/index.ts"],"names":[],"mappings":"AAoCA,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAA;AAmBnE,OAAO,EAEL,KAAK,yBAAyB,EAE/B,MAAM,gBAAgB,CAAA;AAQvB,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,aAAa,CAAA;AAYzE,OAAO,EAKL,KAAK,YAAY,EAElB,MAAM,SAAS,CAAA;AAuBhB,OAAO,KAAK,EAA0B,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAIhF,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAmB3C;;;;GAIG;AACH,MAAM,WAAW,8BAA8B;IAC7C;;;;OAIG;IACH,YAAY,CAAC,EAAE,yBAAyB,CAAA;IACxC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,sBAAsB,KAAK,IAAI,CAAA;CAC5D;AAED,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,eAAe,EAC1B,YAAY,EAAE,YAAY,GACzB,IAAI,CAEN;AAED,eAAO,MAAM,uBAAuB,GACjC,YAAY,MAAM,EAAE,UAAS,8BAAmC,MAC1D,OAAO,WAAW,KAAG,OAAO,CAAC,YAAY,CAwxB/C,CAAA;AAEH,eAAO,MAAM,yBAAyB,UA1xBtB,WAAW,KAAG,OAAO,CAAC,YAAY,CA4xBjD,CAAA;AACD,eAAO,MAAM,iBAAiB,UA7xBd,WAAW,KAAG,OAAO,CAAC,YAAY,CA6xBQ,CAAA"}

package/dist/types/src/plugin/killswitch.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Live killswitch for the account pool.
+ *
+ * The operator-configured killswitch excludes candidates whose freshest
+ * cached quota remaining-percent is at or below a per-account
+ * threshold (or the global minimum_remaining_percent when no
+ * per-account override is set).
+ *
+ * Quota data is read live from `account.cachedQuota`, which is a
+ * `Partial<Record<QuotaGroup, QuotaGroupSummary>>` populated by the
+ * quota manager after every successful refresh. Stale or missing
+ * data is treated as fail-open: the candidate is allowed through so a
+ * cold start cannot deadlock the request pipeline on the operator's
+ * first dial.
+ */
+import type { AccountModelFamily as ModelFamily, QuotaGroup, QuotaGroupSummary } from '@cortexkit/antigravity-auth-core';
+import type { OperatorSettings } from './operator-settings.js';
+export interface KillswitchAccountSnapshot {
+    index: number;
+    refreshToken?: string;
+    email?: string;
+    cachedQuota?: Partial<Record<QuotaGroup, QuotaGroupSummary>>;
+    cachedQuotaUpdatedAt?: number;
+}
+export interface KillswitchDecision {
+    allowed: boolean;
+    reason: 'ok' | 'killswitch-disabled' | 'quota-missing-or-stale' | 'below-threshold';
+    thresholdPercent: number;
+    remainingPercent: number | null;
+}
+export interface KillswitchEvaluateOptions {
+    now?: number;
+    /** Cache TTL in milliseconds — cached quota older than this is fail-open. */
+    cacheTtlMs?: number;
+    /**
+     * Model identifier to scope the evaluation to. When set, the
+     * decision checks only the quota group that powers that model
+     * (e.g. a `gemini-pro` request checks ONLY `gemini-pro`,
+     * not the max of pro+flash). When omitted, the evaluation uses
+     * the family-max behavior.
+     */
+    model?: string | null;
+}
+export declare function accountKeyForRefreshToken(refreshToken: string): string;
+/**
+ * Determine whether `account` is allowed under the operator killswitch.
+ *
+ * The decision is fail-open when:
+ *   - killswitch is disabled
+ *   - cached quota is missing entirely
+ *   - cached quota is older than `cacheTtlMs`
+ *
+ * When `model` is provided, the evaluation is scoped to the single
+ * quota group that powers that model (e.g. a `gemini-pro` request
+ * checks ONLY `gemini-pro` — not the max of pro+flash). Without
+ * `model`, the evaluation falls back to the family-max behavior so
+ * existing callers that omit the model argument keep their previous
+ * semantics.
+ *
+ * Returns a structured decision so callers can emit diagnostics for
+ * each candidate without re-running the comparison.
+ */
+export declare function evaluateKillswitchForAccount(account: KillswitchAccountSnapshot, family: ModelFamily, settings: OperatorSettings, options?: KillswitchEvaluateOptions): KillswitchDecision;
+/**
+ * Build a redacted summary of every candidate's killswitch outcome.
+ *
+ * Used when the operator killswitch excludes the entire pool so the
+ * host error message can list the offending accounts without leaking
+ * identifiers or tokens.
+ */
+export declare function summarizeKillswitchOutcomes(accounts: readonly KillswitchAccountSnapshot[], family: ModelFamily, settings: OperatorSettings, options?: KillswitchEvaluateOptions): Array<{
+    accountKey: string;
+    remainingPercent: number | null;
+    thresholdPercent: number;
+}>;
+/**
+ * Throw `AntigravityKillswitchError` when every candidate is excluded.
+ *
+ * The interceptor calls this when its retry loop runs out of viable
+ * accounts so the host surfaces a single, structured error rather than
+ * a synthetic 200/401 body.
+ */
+export declare function throwIfAllKilled(input: {
+    family: ModelFamily;
+    model: string;
+    accounts: readonly KillswitchAccountSnapshot[];
+    settings: OperatorSettings;
+    now?: number;
+    cacheTtlMs?: number;
+    /** Optional model to scope per-account evaluation to a single quota group. */
+    quotaModel?: string | null;
+}): void;
+//# sourceMappingURL=killswitch.d.ts.map

package/dist/types/src/plugin/killswitch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"killswitch.d.ts","sourceRoot":"","sources":["../../../../src/plugin/killswitch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EACV,kBAAkB,IAAI,WAAW,EACjC,UAAU,EACV,iBAAiB,EAClB,MAAM,kCAAkC,CAAA;AAEzC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAE3D,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAA;IAC5D,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EACF,IAAI,GACJ,qBAAqB,GACrB,wBAAwB,GACxB,iBAAiB,CAAA;IACrB,gBAAgB,EAAE,MAAM,CAAA;IACxB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;CAChC;AAED,MAAM,WAAW,yBAAyB;IACxC,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACtB;AAoCD,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,yBAAyB,EAClC,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,GAAE,yBAA8B,GACtC,kBAAkB,CAmDpB;AAoCD;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,SAAS,yBAAyB,EAAE,EAC9C,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,GAAE,yBAA8B,GACtC,KAAK,CAAC;IACP,UAAU,EAAE,MAAM,CAAA;IAClB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,gBAAgB,EAAE,MAAM,CAAA;CACzB,CAAC,CAiBD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,MAAM,EAAE,WAAW,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,SAAS,yBAAyB,EAAE,CAAA;IAC9C,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B,GAAG,IAAI,CA+BP"}