@cortexkit/opencode-antigravity-auth 2.2.0 → 3.0.0

package/dist/types/src/plugin/shared/request-services.d.ts

@@ -0,0 +1,375 @@
+/**
+ * Shared Antigravity request engine: account selection, retries, endpoint
+ * and quota fallback, warmups and response handling for one plugin location.
+ *
+ * OpenCode 1's `createFetchInterceptor` and the GA location services both
+ * call `createRequestExecutor`, so there is exactly one retry loop. Every
+ * collaborator with state (accounts, credentials, session metadata, operator
+ * settings, wire state, debug log, dump switch, logger, health and token
+ * trackers) arrives through `RequestServicesDeps`; this module never reads a
+ * module-level OpenCode 1 binding or a host SDK client. Host-only effects
+ * (toasts, the sidebar routing file, clearing host-stored OAuth credentials)
+ * are optional or explicit callbacks the host binding supplies.
+ *
+ * The wire rules themselves (payload transformation, header and envelope
+ * order, SSE handling) stay in `../request`. The engine receives them as
+ * `RequestWire`, which `createRequestWire` binds to one location's signature
+ * cache, debug log and logger; the raw sender is called unchanged.
+ */
+import { type AgyTransportOptions, type AccountManager as CoreAccountManager, type Fingerprint, type HealthScoreTracker, type ManagedAccount, type OAuthAuthDetails, type ProjectContextResult, type QuotaGroup, type QuotaGroupSummary, type QuotaManager, type TokenBucketTracker } from '@cortexkit/antigravity-auth-core';
+import { type HeaderStyle } from '../../constants.js';
+import type { AntigravityConfig } from '../config/index.js';
+import type { LocationDebug } from '../debug.js';
+import { type GeminiDumpState } from '../gemini-dump.js';
+import type { Logger } from '../logger.js';
+import type { OperatorSettingsController } from '../operator-settings.js';
+import type { buildThinkingWarmupBody, getImageModelLocalTitle, getLastCacheStats, PrepareRequestOptions, prepareAntigravityRequest, transformAntigravityResponse } from '../request.js';
+import { type AgySessionRegistry, type OpenCodeSessionIdentity } from '../session-context.js';
+import { type CapturedLocalGrant } from './local-grant.js';
+/** Raw Antigravity sender: the core CLI transport or a test double. */
+export type RequestTransport = (url: string, init?: RequestInit, options?: AgyTransportOptions) => Promise<Response>;
+/**
+ * Standard fetch, used for `gemini-cli` header-style sends and their warmups;
+ * `antigravity` header-style sends use the raw HTTP/1.1 AGY sender instead.
+ */
+export type RequestFetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+/**
+ * The fields of a pool row the engine reads: selection, logging, killswitch
+ * and backoff metadata only. A row carries no credential. OpenCode 1's rows
+ * are core `ManagedAccount`s; a vault location supplies metadata-only rows.
+ */
+export interface RequestAccountRow {
+    readonly index: number;
+    readonly email?: string;
+    readonly fingerprint?: Fingerprint;
+    /** Reset to 0 by the engine after a successful send. */
+    consecutiveFailures?: number;
+    readonly rateLimitResetTimes: {
+        readonly claude?: number;
+        readonly gemini?: number;
+    };
+    readonly cachedQuota?: Partial<Record<QuotaGroup, QuotaGroupSummary>>;
+    readonly cachedQuotaUpdatedAt?: number;
+}
+type CoreArgs<K extends keyof CoreAccountManager> = CoreAccountManager[K] extends (...args: infer P) => unknown ? P : never;
+type CoreArgsAfterAccount<K extends keyof CoreAccountManager> = CoreArgs<K> extends [unknown, ...infer Rest] ? Rest : never;
+type CoreResult<K extends keyof CoreAccountManager> = CoreAccountManager[K] extends (...args: never[]) => infer R ? R : never;
+/**
+ * Selection, rate-limit, toast and usage bookkeeping over one location's
+ * rows. It has no credential operation. The arguments and results are the
+ * core `AccountManager`'s, with its row type replaced by `A`, so a core
+ * manager is a `RequestAccountPool<ManagedAccount>` as is.
+ *
+ * Account selection stays Antigravity's own policy. It is not delegated to
+ * the `@cortexkit/common-auth` `./routing` entry, whose published semantics
+ * differ in four ways that would change which account serves a request:
+ *
+ * 1. Cold start: `admit()` refuses an OAuth row with no quota reading, a
+ *    missing window or an unknown reset (`dist/routing/admission.d.ts`,
+ *    refusals `needs-first-reading`, `unknown-window`, `unknown-reset`).
+ *    Antigravity selection and its killswitch pass such a row.
+ * 2. Rate limits: admission keeps one mark per row (`rateLimitMarks` in
+ *    `ExclusionInputs`, same file). Antigravity keeps marks per quota key
+ *    (family, model and header style) and switches between the two Gemini
+ *    quota pools.
+ * 3. Strategies: the library routes only `ordered` or `sticky-balanced`
+ *    (`RoutingMode`, `dist/routing/ordered.d.ts`), and both routes run
+ *    admission (`OrderedRouteInput` and `StickyRouteInput` extend
+ *    `AdmissionInput`). Antigravity uses sticky, round-robin and hybrid
+ *    (health and token-bucket) selection with PID offset and per-session and
+ *    parent-session pinning.
+ * 4. Soft quota: Antigravity excludes accounts over
+ *    `soft_quota_threshold_percent`, never the only usable account, and
+ *    waits for the soonest reset. The library has no admission equivalent;
+ *    `reservePercent` only weights sticky selection
+ *    (`dist/routing/sticky.d.ts`).
+ *
+ * The killswitch verdict is a per-row boolean on both sides, but every
+ * library route that accepts it also runs the admission gates above.
+ */
+export interface RequestAccountPool<A extends RequestAccountRow> {
+    areAllAccountsOverSoftQuota(...args: CoreArgs<'areAllAccountsOverSoftQuota'>): boolean;
+    getAccountCount(): number;
+    getAccounts(): A[];
+    getAccountsSnapshot(): A[];
+    getEnabledAccounts(): A[];
+    getAvailableHeaderStyle(account: A, ...rest: CoreArgsAfterAccount<'getAvailableHeaderStyle'>): CoreResult<'getAvailableHeaderStyle'>;
+    getCurrentOrNextForFamily(...args: CoreArgs<'getCurrentOrNextForFamily'>): A | null;
+    getDailyRequestCounts(...args: CoreArgs<'getDailyRequestCounts'>): CoreResult<'getDailyRequestCounts'>;
+    getMinWaitTimeForFamily(...args: CoreArgs<'getMinWaitTimeForFamily'>): number;
+    getMinWaitTimeForSoftQuota(...args: CoreArgs<'getMinWaitTimeForSoftQuota'>): number | null;
+    getSessionSummary(): CoreResult<'getSessionSummary'>;
+    getTotalDailyRequests(...args: CoreArgs<'getTotalDailyRequests'>): number;
+    hasOtherAccountWithAntigravityAvailable(...args: CoreArgs<'hasOtherAccountWithAntigravityAvailable'>): boolean;
+    isRateLimitedForHeaderStyle(account: A, ...rest: CoreArgsAfterAccount<'isRateLimitedForHeaderStyle'>): boolean;
+    markAccountCoolingDown(account: A, ...rest: CoreArgsAfterAccount<'markAccountCoolingDown'>): void;
+    markAccountIneligible(...args: CoreArgs<'markAccountIneligible'>): boolean;
+    markAccountUsed(...args: CoreArgs<'markAccountUsed'>): void;
+    markAccountVerificationRequired(...args: CoreArgs<'markAccountVerificationRequired'>): boolean;
+    markRateLimited(account: A, ...rest: CoreArgsAfterAccount<'markRateLimited'>): void;
+    markRateLimitedWithReason(account: A, ...rest: CoreArgsAfterAccount<'markRateLimitedWithReason'>): number;
+    markToastShown(...args: CoreArgs<'markToastShown'>): void;
+    proactivelyRotateForFamily(...args: CoreArgs<'proactivelyRotateForFamily'>): A | null;
+    recordRequest(...args: CoreArgs<'recordRequest'>): void;
+    recordSessionUsage(...args: CoreArgs<'recordSessionUsage'>): void;
+    regenerateAccountFingerprint(...args: CoreArgs<'regenerateAccountFingerprint'>): CoreResult<'regenerateAccountFingerprint'>;
+    requestSaveToDisk(): void;
+    shouldProactivelyRotate(...args: CoreArgs<'shouldProactivelyRotate'>): boolean;
+    shouldShowAccountToast(...args: CoreArgs<'shouldShowAccountToast'>): boolean;
+    wasUsedInSession(...args: CoreArgs<'wasUsedInSession'>): boolean;
+}
+/**
+ * Credentials kept on the location's own pool rows (OpenCode 1, or a GA
+ * location on its local account repository): the selected row's stored
+ * token is refreshed when expired, its project is resolved, and the result
+ * is written back to the pool. One token and project serve every send of
+ * that selection.
+ */
+export interface LocalRequestCredentials<A extends RequestAccountRow> {
+    readonly domain: 'local';
+    /** The stored OAuth record of a row. */
+    toAuthDetails(account: A): OAuthAuthDetails;
+    /** Write a refreshed or project-resolved record back to its row. */
+    updateFromAuth(account: A, auth: OAuthAuthDetails): void;
+    /** Drop a row whose refresh token was revoked; true when it was removed. */
+    removeAccount(account: A): boolean;
+    saveToDisk(): Promise<void>;
+    saveToDiskReplace(): Promise<void>;
+    /**
+     * Refresh the selected row's expired access token. The row itself is
+     * passed; an implementation refreshes exactly that row (a repository
+     * adapter captures the row's ref before its first await) and never looks a
+     * row up by refresh token. It returns the refreshed record as stored for
+     * that row, so later grant checks see the successor credential; undefined
+     * means the refresh failed.
+     */
+    refresh(account: A): Promise<OAuthAuthDetails | undefined>;
+    /** Resolve the project the request is sent under. */
+    ensureProject(auth: OAuthAuthDetails): Promise<ProjectContextResult>;
+    /** True when a refresh error means the refresh token was revoked. */
+    isInvalidGrant(error: unknown): boolean;
+    /** Clear host-stored OAuth credentials once the last account is removed. */
+    clearStoredAuth(): Promise<void>;
+    /**
+     * Capture the bearer and original row reference before any save, project
+     * lookup or other await. For store accounts the ref includes row ID, the
+     * credential replacement epoch, and authenticated identity; a refresh does
+     * not advance that epoch. Later account changes cannot replace this ref.
+     *
+     * check() runs immediately before main sends, thinking warmups and cache
+     * probes. It rejects unavailable metadata or a removed, disabled, replaced
+     * or token-superseded credential. A store resolver can separately adopt the
+     * current token at the original ref. This request executor may then capture
+     * a new grant and rebuild once per request, without modifying the captured
+     * check or penalizing the account for an ordinary token change.
+     */
+    captureGrant(grant: {
+        readonly account: A;
+        readonly accessToken: string;
+    }): CapturedLocalGrant;
+    /**
+     * Started without awaiting after a successful send, with the selected row
+     * and `quota_refresh_interval_minutes`. `createLocalQuotaRefresh` builds
+     * it for a core account manager. Absent: no refresh from the request path.
+     */
+    refreshQuotaAfterSuccess?(account: A, intervalMinutes: number): Promise<void>;
+}
+/**
+ * Credentials held by a vault: the engine never sees a stored token. Every
+ * physical send (each endpoint attempt, retry and fallback) asks for a fresh
+ * admission and uses that admission's token and project for that one send
+ * only; nothing is refreshed, cached or written to a pool row.
+ */
+export interface VaultRequestCredentials<A extends RequestAccountRow> {
+    readonly domain: 'vault';
+    admit(request: {
+        /** The metadata row selected for this send. */
+        readonly account: A;
+        readonly signal: AbortSignal | undefined;
+    }): Promise<RequestSendAdmission>;
+}
+/** One vault admission, valid for exactly one physical send. */
+export interface RequestSendAdmission {
+    /** The vault credential this admission serves. */
+    readonly credentialId: string;
+    /** The account the vault asserted for this admission. */
+    readonly accountIdentity: string;
+    /** The record version served; a 401 is reported against it. */
+    readonly recordVersion: number;
+    readonly accessToken: string;
+    /** The Antigravity project served with this same admission. */
+    readonly projectId: string;
+    /**
+     * Reports a 401 served to this send against the exact record version
+     * this admission carried. Called without awaiting the result; a rejection
+     * is logged and ignored.
+     */
+    report401(status: number): Promise<unknown>;
+}
+/** Which store holds the selected row's credentials. */
+export type RequestCredentials<A extends RequestAccountRow> = LocalRequestCredentials<A> | VaultRequestCredentials<A>;
+/** Wire preparation and response handling, unchanged from `../request`. */
+export interface RequestWire {
+    prepare: typeof prepareAntigravityRequest;
+    transformResponse: typeof transformAntigravityResponse;
+    buildThinkingWarmupBody: typeof buildThinkingWarmupBody;
+    getImageModelLocalTitle: typeof getImageModelLocalTitle;
+    getLastCacheStats: typeof getLastCacheStats;
+}
+/** A prepared upstream request, as `RequestWire.prepare` returns it. */
+export type PreparedAgyRequest = ReturnType<RequestWire['prepare']>;
+/** What a Google 403 body says about the account that received it. */
+export interface AccountAccessErrorDetails {
+    validationRequired: boolean;
+    accountIneligible: boolean;
+    message?: string;
+    verifyUrl?: string;
+}
+/** The account and header style a session's request was finally sent with. */
+export interface RequestRoutingEntry {
+    accountId: string;
+    modelFamily: 'claude' | 'gemini';
+    headerStyle: 'antigravity' | 'gemini-cli';
+    strategy?: 'sticky' | 'round-robin' | 'hybrid';
+    updatedAt: number;
+}
+export type RequestNoticeVariant = 'info' | 'warning' | 'success' | 'error';
+/** One upstream send's wire inputs, taken from a single credential grant. */
+export interface AgyWireRequestInput {
+    /** The host's Generative Language URL (or Request). */
+    readonly input: RequestInfo;
+    readonly init?: RequestInit;
+    readonly accessToken: string;
+    readonly projectId: string;
+    /** Antigravity endpoint for this attempt. */
+    readonly endpoint?: string;
+    readonly headerStyle?: HeaderStyle;
+    /** Close the tool loop and retry after a corrupted-thinking rejection. */
+    readonly forceThinkingRecovery?: boolean;
+    readonly options?: PrepareRequestOptions;
+}
+/**
+ * Prepares one upstream Antigravity request: payload transforms, AGY
+ * metadata and envelope, header order and the endpoint URL. It is the single
+ * entry point the engine uses for every send, and the rules are exactly
+ * `RequestWire.prepare`'s.
+ */
+export declare function prepareAgyWireRequest(wire: Pick<RequestWire, 'prepare'>, request: AgyWireRequestInput): PreparedAgyRequest;
+/** This location's debug-log methods the engine calls. */
+export type RequestDebug = Pick<LocationDebug, 'isDebugEnabled' | 'logAccountContext' | 'logAntigravityDebugResponse' | 'logModelFamily' | 'logRateLimitEvent' | 'logRateLimitSnapshot' | 'logResponseBody' | 'startAntigravityDebugRequest'>;
+/**
+ * One location's collaborators for the shared request engine. `A` is the
+ * location's pool row type; `credentials.domain` selects how a selected row
+ * becomes a token and project.
+ */
+export interface RequestServicesDeps<A extends RequestAccountRow> {
+    /** Check the persistent account source before each operation that uses credentials. */
+    readonly assertAdmission?: () => Promise<void>;
+    readonly config: AntigravityConfig;
+    readonly accounts: RequestAccountPool<A>;
+    readonly credentials: RequestCredentials<A>;
+    /** This location's AGY conversation/trajectory session metadata. */
+    readonly sessions: AgySessionRegistry;
+    /**
+     * Live operator settings: routing overrides and the killswitch, which
+     * excludes accounts whose remaining quota is below a threshold.
+     */
+    readonly operatorSettings?: Pick<OperatorSettingsController, 'get'>;
+    /**
+     * Raw HTTP/1.1 AGY sender for `antigravity` header-style sends. The engine
+     * transforms the request first, then passes the prepared URL, init and
+     * the caller's AbortSignal to it.
+     */
+    readonly transport: RequestTransport;
+    /** Standard fetch for `gemini-cli` header-style sends and their warmups. */
+    readonly fetchImpl: RequestFetch;
+    readonly wire: RequestWire;
+    readonly debug: RequestDebug;
+    readonly dump: Pick<GeminiDumpState, 'dumpRequest'>;
+    readonly logger: Logger;
+    readonly trackers: {
+        readonly health: Pick<HealthScoreTracker, 'recordFailure' | 'recordRateLimit' | 'recordSuccess'>;
+        readonly token: Pick<TokenBucketTracker, 'consume' | 'refund'>;
+    };
+    /**
+     * Recognises Google's ACCOUNT_INELIGIBLE and VALIDATION_REQUIRED 403
+     * bodies. It does not classify quota errors.
+     */
+    classifyAccessError(bodyText: string): AccountAccessErrorDetails;
+    /** Host notice (OpenCode 1 toast). Rejections and throws are ignored. */
+    notify?(message: string, variant: RequestNoticeVariant): unknown;
+    /**
+     * Records the route a session's request was dispatched on. Called without
+     * awaiting; the dispatch path never waits on it and a throw is ignored.
+     */
+    onRouting?(sessionId: string, entry: RequestRoutingEntry): void;
+}
+/** Per-request inputs the host supplies alongside the HTTP request. */
+export interface RequestExecuteOptions {
+    /**
+     * The host session this request belongs to. When omitted, the OpenCode
+     * session headers on the request are read.
+     */
+    readonly session?: OpenCodeSessionIdentity;
+    /**
+     * The host's request kind. `title` routes the request as a session title
+     * (see `routeTitleModel`); every kind other than `primary` keeps its own
+     * AGY session metadata. Omitted by OpenCode 1, which has no kind.
+     */
+    readonly kind?: RequestKind;
+    /**
+     * Raw sender for this request's `antigravity` header-style sends, in place
+     * of `RequestServicesDeps.transport`. It receives the transformed request's
+     * URL and init, and the caller's AbortSignal object itself.
+     */
+    readonly transport?: RequestTransport;
+}
+/** The request kinds an OpenCode 2 host reports for a model request. */
+export type RequestKind = 'primary' | 'compaction' | 'title' | 'generate';
+/**
+ * The model a title request is sent to when the host selected one this
+ * plugin does not serve as text: an unregistered model or an image model.
+ */
+export declare const TITLE_FALLBACK_MODEL = "gemini-3.5-flash-low";
+/**
+ * Routes a title request: a registered text model is kept; any other model
+ * (unregistered, or an image model) is replaced in the URL by
+ * `TITLE_FALLBACK_MODEL`. Everything else in the URL is unchanged.
+ */
+export declare function routeTitleModel(url: string): string;
+/** The shared engine bound to one location. */
+export interface AntigravityRequestExecutor {
+    /**
+     * Sends a Generative Language request through account selection, retries
+     * and response transformation. Abort uses `init.signal` (or the Request's
+     * signal) at every wait and send.
+     */
+    execute(input: RequestInfo | URL, init?: RequestInit, options?: RequestExecuteOptions): Promise<Response>;
+    /**
+     * Stops admitting requests without cancelling the ones already admitted:
+     * later `execute` calls reject, while admitted requests keep their retries
+     * and response bodies. Resolves once every admitted request and body has
+     * finished, then releases retry and warmup bookkeeping. A later `dispose`
+     * still aborts whatever is left.
+     */
+    retire(): Promise<void>;
+    /**
+     * Aborts every admitted request and response body, waits for them to
+     * finish, then releases retry and warmup bookkeeping.
+     */
+    dispose(): Promise<void>;
+}
+/**
+ * Background quota refresh after a successful send, for rows held in a core
+ * account manager. It reads the row's refresh token, so it applies to local
+ * credentials only. A reading for a row removed or replaced meanwhile is
+ * dropped.
+ */
+export declare function createLocalQuotaRefresh(accountManager: Pick<CoreAccountManager, 'getAccounts' | 'getAccountsForQuotaCheck' | 'updateQuotaCache' | 'requestSaveToDisk'>, quotaManager: Pick<QuotaManager, 'refreshAccount' | 'hashedLogLabel'>, log: Logger): (account: ManagedAccount, intervalMinutes: number) => Promise<void>;
+/**
+ * Builds one location's request engine. Each executor owns its retry and
+ * warmup bookkeeping, so disposing it releases every counter.
+ */
+export declare function createRequestExecutor<A extends RequestAccountRow>(deps: RequestServicesDeps<A>): AntigravityRequestExecutor;
+export {};
+//# sourceMappingURL=request-services.d.ts.map

package/dist/types/src/plugin/shared/request-services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-services.d.ts","sourceRoot":"","sources":["../../../../../src/plugin/shared/request-services.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EACL,KAAK,mBAAmB,EAExB,KAAK,cAAc,IAAI,kBAAkB,EAGzC,KAAK,WAAW,EAGhB,KAAK,kBAAkB,EAEvB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EAGzB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,KAAK,YAAY,EAKjB,KAAK,kBAAkB,EAExB,MAAM,kCAAkC,CAAA;AACzC,OAAO,EAEL,KAAK,WAAW,EACjB,MAAM,iBAAiB,CAAA;AACxB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAkB7C,OAAO,EAAE,KAAK,eAAe,EAA0B,MAAM,gBAAgB,CAAA;AAE7E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAA;AACtE,OAAO,KAAK,EACV,uBAAuB,EACvB,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,EACrB,yBAAyB,EACzB,4BAA4B,EAC7B,MAAM,YAAY,CAAA;AAMnB,OAAO,EACL,KAAK,kBAAkB,EAEvB,KAAK,uBAAuB,EAC7B,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,KAAK,kBAAkB,EAGxB,MAAM,eAAe,CAAA;AAWtB,uEAAuE;AACvE,MAAM,MAAM,gBAAgB,GAAG,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,WAAW,EAClB,OAAO,CAAC,EAAE,mBAAmB,KAC1B,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEtB;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,CACzB,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,CAAC,EAAE,WAAW,KACf,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEtB;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAA;IAClC,wDAAwD;IACxD,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,mBAAmB,EAAE;QAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KACzB,CAAA;IACD,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAA;IACrE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;CACvC;AAED,KAAK,QAAQ,CAAC,CAAC,SAAS,MAAM,kBAAkB,IAC9C,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,KAAK,OAAO,GAAG,CAAC,GAAG,KAAK,CAAA;AACzE,KAAK,oBAAoB,CAAC,CAAC,SAAS,MAAM,kBAAkB,IAC1D,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,CAAA;AAC7D,KAAK,UAAU,CAAC,CAAC,SAAS,MAAM,kBAAkB,IAChD,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;AAEzE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,WAAW,kBAAkB,CAAC,CAAC,SAAS,iBAAiB;IAC7D,2BAA2B,CACzB,GAAG,IAAI,EAAE,QAAQ,CAAC,6BAA6B,CAAC,GAC/C,OAAO,CAAA;IACV,eAAe,IAAI,MAAM,CAAA;IACzB,WAAW,IAAI,CAAC,EAAE,CAAA;IAClB,mBAAmB,IAAI,CAAC,EAAE,CAAA;IAC1B,kBAAkB,IAAI,CAAC,EAAE,CAAA;IACzB,uBAAuB,CACrB,OAAO,EAAE,CAAC,EACV,GAAG,IAAI,EAAE,oBAAoB,CAAC,yBAAyB,CAAC,GACvD,UAAU,CAAC,yBAAyB,CAAC,CAAA;IACxC,yBAAyB,CACvB,GAAG,IAAI,EAAE,QAAQ,CAAC,2BAA2B,CAAC,GAC7C,CAAC,GAAG,IAAI,CAAA;IACX,qBAAqB,CACnB,GAAG,IAAI,EAAE,QAAQ,CAAC,uBAAuB,CAAC,GACzC,UAAU,CAAC,uBAAuB,CAAC,CAAA;IACtC,uBAAuB,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,yBAAyB,CAAC,GAAG,MAAM,CAAA;IAC7E,0BAA0B,CACxB,GAAG,IAAI,EAAE,QAAQ,CAAC,4BAA4B,CAAC,GAC9C,MAAM,GAAG,IAAI,CAAA;IAChB,iBAAiB,IAAI,UAAU,CAAC,mBAAmB,CAAC,CAAA;IACpD,qBAAqB,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,uBAAuB,CAAC,GAAG,MAAM,CAAA;IACzE,uCAAuC,CACrC,GAAG,IAAI,EAAE,QAAQ,CAAC,yCAAyC,CAAC,GAC3D,OAAO,CAAA;IACV,2BAA2B,CACzB,OAAO,EAAE,CAAC,EACV,GAAG,IAAI,EAAE,oBAAoB,CAAC,6BAA6B,CAAC,GAC3D,OAAO,CAAA;IACV,sBAAsB,CACpB,OAAO,EAAE,CAAC,EACV,GAAG,IAAI,EAAE,oBAAoB,CAAC,wBAAwB,CAAC,GACtD,IAAI,CAAA;IACP,qBAAqB,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,uBAAuB,CAAC,GAAG,OAAO,CAAA;IAC1E,eAAe,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAA;IAC3D,+BAA+B,CAC7B,GAAG,IAAI,EAAE,QAAQ,CAAC,iCAAiC,CAAC,GACnD,OAAO,CAAA;IACV,eAAe,CACb,OAAO,EAAE,CAAC,EACV,GAAG,IAAI,EAAE,oBAAoB,CAAC,iBAAiB,CAAC,GAC/C,IAAI,CAAA;IACP,yBAAyB,CACvB,OAAO,EAAE,CAAC,EACV,GAAG,IAAI,EAAE,oBAAoB,CAAC,2BAA2B,CAAC,GACzD,MAAM,CAAA;IACT,cAAc,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAA;IACzD,0BAA0B,CACxB,GAAG,IAAI,EAAE,QAAQ,CAAC,4BAA4B,CAAC,GAC9C,CAAC,GAAG,IAAI,CAAA;IACX,aAAa,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC,GAAG,IAAI,CAAA;IACvD,kBAAkB,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAA;IACjE,4BAA4B,CAC1B,GAAG,IAAI,EAAE,QAAQ,CAAC,8BAA8B,CAAC,GAChD,UAAU,CAAC,8BAA8B,CAAC,CAAA;IAC7C,iBAAiB,IAAI,IAAI,CAAA;IACzB,uBAAuB,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,yBAAyB,CAAC,GAAG,OAAO,CAAA;IAC9E,sBAAsB,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,wBAAwB,CAAC,GAAG,OAAO,CAAA;IAC5E,gBAAgB,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAA;CACjE;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,iBAAiB;IAClE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,wCAAwC;IACxC,aAAa,CAAC,OAAO,EAAE,CAAC,GAAG,gBAAgB,CAAA;IAC3C,oEAAoE;IACpE,cAAc,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAAA;IACxD,4EAA4E;IAC5E,aAAa,CAAC,OAAO,EAAE,CAAC,GAAG,OAAO,CAAA;IAClC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC;;;;;;;OAOG;IACH,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAA;IAC1D,qDAAqD;IACrD,aAAa,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACpE,qEAAqE;IACrE,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAA;IACvC,4EAA4E;IAC5E,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAChC;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,KAAK,EAAE;QAClB,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;QACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;KAC7B,GAAG,kBAAkB,CAAA;IACtB;;;;OAIG;IACH,wBAAwB,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9E;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,iBAAiB;IAClE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,KAAK,CAAC,OAAO,EAAE;QACb,+CAA+C;QAC/C,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;QACnB,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CAAA;KACzC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;CAClC;AAED,gEAAgE;AAChE,MAAM,WAAW,oBAAoB;IACnC,kDAAkD;IAClD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,yDAAyD;IACzD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,+DAA+D;IAC/D,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAC5C;AAED,wDAAwD;AACxD,MAAM,MAAM,kBAAkB,CAAC,CAAC,SAAS,iBAAiB,IACtD,uBAAuB,CAAC,CAAC,CAAC,GAC1B,uBAAuB,CAAC,CAAC,CAAC,CAAA;AAE9B,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,yBAAyB,CAAA;IACzC,iBAAiB,EAAE,OAAO,4BAA4B,CAAA;IACtD,uBAAuB,EAAE,OAAO,uBAAuB,CAAA;IACvD,uBAAuB,EAAE,OAAO,uBAAuB,CAAA;IACvD,iBAAiB,EAAE,OAAO,iBAAiB,CAAA;CAC5C;AAED,wEAAwE;AACxE,MAAM,MAAM,kBAAkB,GAAG,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAA;AAEnE,sEAAsE;AACtE,MAAM,WAAW,yBAAyB;IACxC,kBAAkB,EAAE,OAAO,CAAA;IAC3B,iBAAiB,EAAE,OAAO,CAAA;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,8EAA8E;AAC9E,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,QAAQ,GAAG,QAAQ,CAAA;IAChC,WAAW,EAAE,aAAa,GAAG,YAAY,CAAA;IACzC,QAAQ,CAAC,EAAE,QAAQ,GAAG,aAAa,GAAG,QAAQ,CAAA;IAC9C,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAA;AAE3E,6EAA6E;AAC7E,MAAM,WAAW,mBAAmB;IAClC,uDAAuD;IACvD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAA;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,6CAA6C;IAC7C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAA;IAClC,0EAA0E;IAC1E,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAA;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAA;CACzC;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,EAClC,OAAO,EAAE,mBAAmB,GAC3B,kBAAkB,CAWpB;AAED,0DAA0D;AAC1D,MAAM,MAAM,YAAY,GAAG,IAAI,CAC7B,aAAa,EACX,gBAAgB,GAChB,mBAAmB,GACnB,6BAA6B,GAC7B,gBAAgB,GAChB,mBAAmB,GACnB,sBAAsB,GACtB,iBAAiB,GACjB,8BAA8B,CACjC,CAAA;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB,CAAC,CAAC,SAAS,iBAAiB;IAC9D,uFAAuF;IACvF,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAA;IACxC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAA;IAC3C,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAA;IACrC;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAA;IACnE;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAA;IAChC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,CAAA;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,MAAM,EAAE,IAAI,CACnB,kBAAkB,EAClB,eAAe,GAAG,iBAAiB,GAAG,eAAe,CACtD,CAAA;QACD,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,SAAS,GAAG,QAAQ,CAAC,CAAA;KAC/D,CAAA;IACD;;;OAGG;IACH,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,yBAAyB,CAAA;IAChE,yEAAyE;IACzE,MAAM,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAA;IAChE;;;OAGG;IACH,SAAS,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAAA;CAChE;AAED,uEAAuE;AACvE,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,uBAAuB,CAAA;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAA;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAA;CACtC;AAED,wEAAwE;AACxE,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,YAAY,GAAG,OAAO,GAAG,UAAU,CAAA;AAEzE;;;GAGG;AACH,eAAO,MAAM,oBAAoB,yBAAyB,CAAA;AAE1D;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQnD;AAmBD,+CAA+C;AAC/C,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,OAAO,CACL,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,CAAC,EAAE,WAAW,EAClB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,QAAQ,CAAC,CAAA;IACpB;;;;;;OAMG;IACH,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB;;;OAGG;IACH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB;AAkHD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,cAAc,EAAE,IAAI,CAClB,kBAAkB,EAChB,aAAa,GACb,0BAA0B,GAC1B,kBAAkB,GAClB,mBAAmB,CACtB,EACD,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,gBAAgB,GAAG,gBAAgB,CAAC,EACrE,GAAG,EAAE,MAAM,GACV,CAAC,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAsDrE;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,SAAS,iBAAiB,EAC/D,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC,GAC3B,0BAA0B,CA0oE5B"}

package/dist/types/src/plugin/shared/runtime.d.ts

@@ -0,0 +1,217 @@
+/**
+ * One server location's runtime. A location is one workspace directory the
+ * host serves; on OpenCode 2 (the 2.x host line) one process can serve
+ * several, and each plugin setup there (an activation) gets its own
+ * runtime. This module builds the activation's services in order, tears them
+ * down in a fixed order and rolls everything back if construction fails.
+ *
+ * Every service here is created for this location alone: logger,
+ * configuration (its own clone of the defaults), debug file, the switch for
+ * dumping Gemini requests to disk, operator settings handle, signature-cache
+ * handle, quota manager, background quota poller and the queue that
+ * refreshes OAuth tokens before they expire. Nothing falls back to the
+ * module-level logger, configuration, health tracker or sidebar file that
+ * the OpenCode 1 plugin (one location per process) uses, and no credential
+ * cache is shared between locations. Disposing one location's runtime never
+ * stops another's.
+ *
+ * Process-shared state stays shared on purpose and is reached only through
+ * per-location handles: operator files have one controller per file
+ * (`acquireLocationOperatorSettings`), the signature disk cache has one
+ * writer per file (`acquireLocationSignatureCache`). With the OpenCode 1
+ * sidebar file as the quota snapshot store, background pollers in different
+ * processes coordinate through it: a poll is skipped while the file's
+ * `checkedAt` is recent, and a lock file beside it lets only one process
+ * poll at a time. An OpenCode 2 location keeps its snapshots in memory and
+ * writes no sidebar file.
+ *
+ * Teardown order:
+ *   1. producers (everything that can still queue snapshot writes) are
+ *      stopped and awaited, newest first: the refresh queue, the background
+ *      poller and the quota manager, plus anything the host binding adds
+ *      (request bridge, RPC handlers);
+ *   2. queued snapshot writes drain;
+ *   3. consumers close, newest first: signature handle, operator settings,
+ *      debug file.
+ * Stopping producers before the drain means no write can be queued after
+ * the drain has finished; consumers stay open until the last write lands.
+ *
+ * The functions that use credentials (quota fetch, tier lookup, token
+ * refresh) and the account view come from the location's account service.
+ * This module never reads account storage or builds a host client.
+ */
+import type { AccountMetadataV3, FetchAccountQuota } from '@cortexkit/antigravity-auth-core';
+import type { acquireFencedFileLock } from '@cortexkit/antigravity-auth-core/file-lock';
+import { type SidebarMachineState } from '../../sidebar-state.js';
+import { BackgroundQuotaRefresh, type PollerAccountView, type PollerSnapshotStore } from '../background-quota-refresh.js';
+import { type LocationSignatureCache, type SignatureProcessState } from '../cache.js';
+import { type LocationConfig } from '../config/index.js';
+import { type LocationDebug } from '../debug.js';
+import { type GeminiDumpState } from '../gemini-dump.js';
+import { type LocationLogger } from '../logger.js';
+import type { LocationLogSink } from '../neutral-types.js';
+import { type LocationOperatorSettings, type OperatorSettingsRegistry } from '../operator-settings.js';
+import { type QuotaManager } from '../quota.js';
+import { type ProactiveRefreshQueue, type RefreshQueueAccountView, type RefreshQueueTokenRefresher } from '../refresh-queue.js';
+/** Producers stop before drains; consumers close after drains. */
+export type RuntimePhase = 'producer' | 'consumer';
+export interface RuntimeResource {
+    dispose(): Promise<void> | void;
+}
+/**
+ * Resources acquired by one activation, released exactly once in phase
+ * order. A resource added after disposal started is disposed at once, so a
+ * slow acquisition that finishes late cannot outlive its activation.
+ */
+export interface RuntimeScope {
+    add(resource: RuntimeResource, phase: RuntimePhase): void;
+    /** A step run after every producer stopped and before any consumer. */
+    addDrain(drain: () => Promise<void>): void;
+    readonly disposed: boolean;
+    /**
+     * Release everything. Idempotent: later calls return the first call's
+     * promise. Every step runs even when an earlier one fails; failures are
+     * reported together afterwards as an `AggregateError`.
+     */
+    dispose(): Promise<void>;
+}
+export declare function createRuntimeScope(): RuntimeScope;
+/**
+ * Where a location's quota snapshots (redacted accounts plus `checkedAt` and
+ * backoff) go. The background poller also reads `checkedAt` from it and
+ * takes its cross-process lock on `pollLockPath`.
+ */
+export interface LocationQuotaSnapshots extends PollerSnapshotStore {
+    /**
+     * Wait until every queued quota snapshot write has landed. The runtime
+     * calls it after all producers stopped and before any consumer closes.
+     */
+    drain(): Promise<void>;
+}
+/**
+ * The OpenCode 1 sidebar file: snapshots merge into the file the TUI reads,
+ * pollers in other processes see its `checkedAt`, and the poll lock sits
+ * beside it.
+ */
+export declare function createSidebarFileQuotaSnapshots(stateFile: string): LocationQuotaSnapshots;
+/**
+ * An OpenCode 2 location's snapshots, kept in memory: no sidebar file is
+ * written or read, and clients get the data through the native RPC
+ * `state` method. Without `pollLockPath` the poller takes no cross-process
+ * lock.
+ */
+export interface MemoryQuotaSnapshots extends LocationQuotaSnapshots {
+    /** The newest snapshot, or `null` before the first refresh. */
+    latest(): SidebarMachineState | null;
+}
+export declare function createMemoryQuotaSnapshots(options?: {
+    readonly pollLockPath?: string | null;
+}): MemoryQuotaSnapshots;
+/**
+ * The live account pool as the runtime's services use it: the background
+ * poller's view plus the refresh queue's view. The core `AccountManager`
+ * satisfies both.
+ */
+export type LocationAccountView = PollerAccountView & RefreshQueueAccountView;
+export interface LocationRuntimeOptions {
+    /** The host-owned location directory; never a caller-supplied path. */
+    directory: string;
+    /**
+     * Host destination for this location's log records. Without one, records
+     * reach only the environment-gated console fallback.
+     */
+    logSink?: LocationLogSink;
+    /**
+     * Where this location's quota snapshots go:
+     * `createSidebarFileQuotaSnapshots` for the OpenCode 1 sidebar file, or
+     * `createMemoryQuotaSnapshots` for an OpenCode 2 location, which keeps no
+     * sidebar file.
+     */
+    quotaSnapshots: LocationQuotaSnapshots;
+    /** Fetches one account's model quota with the location's credentials. */
+    fetchAccountQuota: FetchAccountQuota;
+    /**
+     * Refreshes one account's OAuth token. The refresh queue calls it for
+     * tokens close to expiry, so requests rarely wait on a refresh.
+     */
+    refreshToken: RefreshQueueTokenRefresher;
+    /** Check current enrollment before each background task; vault mode suppresses local work. */
+    mayRun?: () => boolean | Promise<boolean>;
+    /**
+     * Best-effort plan tier lookup. The background poller refreshes quota for
+     * all accounts on a timer and also records each account's plan tier for
+     * the sidebar.
+     */
+    loadAccountTier?: (account: AccountMetadataV3) => Promise<{
+        id: string;
+        paidId?: string;
+        capturedAt: number;
+    } | null>;
+    /**
+     * Health score (0–100, how reliably the account has answered recently) per
+     * account index, from this location's account rotation. Without one,
+     * sidebar snapshots carry no score.
+     */
+    healthScore?: (index: number) => number;
+    /**
+     * Derives a short hash from an account's refresh token. Each cached quota
+     * entry is stamped with it, so a cached reading is dropped when a
+     * different account now sits at the same position.
+     */
+    quotaAccountIdentity?: (refreshToken: string) => string;
+    /**
+     * Table of operator-settings file controllers. Defaults to the one the
+     * whole process shares; tests pass an isolated one.
+     */
+    operatorSettingsRegistry?: OperatorSettingsRegistry;
+    /**
+     * Thinking-signature cache state. Defaults to the one the whole process
+     * shares; tests pass an isolated one.
+     */
+    signatureState?: SignatureProcessState;
+    /** Clock and randomness for the poller; defaults to the system's. */
+    now?: () => number;
+    random?: () => number;
+    /** Replaces the poller's lock acquisition so tests are deterministic. */
+    acquireLock?: typeof acquireFencedFileLock;
+}
+export interface LocationRuntime {
+    readonly directory: string;
+    readonly logger: LocationLogger;
+    readonly config: LocationConfig;
+    readonly debug: LocationDebug;
+    readonly dump: GeminiDumpState;
+    readonly operatorSettings: LocationOperatorSettings;
+    readonly signatures: LocationSignatureCache;
+    readonly quotaManager: QuotaManager;
+    /** `null` when the `background_quota_refresh` config option is off. */
+    readonly backgroundQuotaRefresh: BackgroundQuotaRefresh | null;
+    /**
+     * The current token refresh queue, or `null` when no account view is
+     * bound or the `proactive_token_refresh` config option is off.
+     */
+    refreshQueue(): ProactiveRefreshQueue | null;
+    /** The location's current account view, or `null` before one is bound. */
+    accounts(): LocationAccountView | null;
+    /**
+     * Replace the location's account view. The previous refresh queue is
+     * stopped and awaited before a new one starts for the new view. After
+     * disposal the call does nothing.
+     */
+    replaceAccounts(view: LocationAccountView | null): Promise<void>;
+    /** Apply the operator-configured log level to this location's logger. */
+    applyOperatorSettings(): void;
+    /**
+     * The host binding registers its own resources here, as producers or
+     * consumers, so one dispose tears everything down in order.
+     */
+    readonly scope: RuntimeScope;
+    dispose(): Promise<void>;
+}
+/**
+ * Build one location's runtime. If any step throws, everything acquired so
+ * far is released before the error is rethrown, so a failed activation
+ * leaves no timer, file handle or shared-controller reference behind.
+ */
+export declare function createLocationRuntime(options: LocationRuntimeOptions, accountResources?: RuntimeResource): Promise<LocationRuntime>;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/types/src/plugin/shared/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../../../src/plugin/shared/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,kCAAkC,CAAA;AAEzC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAA;AAEvF,OAAO,EAEL,KAAK,mBAAmB,EAEzB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EACL,sBAAsB,EAEtB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACzB,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC3B,MAAM,aAAa,CAAA;AACpB,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAC9E,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,aAAa,CAAA;AACrE,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAC/E,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,cAAc,CAAA;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EAEL,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC9B,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAEL,KAAK,YAAY,EAElB,MAAM,aAAa,CAAA;AACpB,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAChC,MAAM,qBAAqB,CAAA;AAI5B,kEAAkE;AAClE,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,UAAU,CAAA;AAElD,MAAM,WAAW,eAAe;IAC9B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;CAChC;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAAA;IACzD,uEAAuE;IACvE,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IAC1C,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B;;;;OAIG;IACH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB;AAED,wBAAgB,kBAAkB,IAAI,YAAY,CA8DjD;AAID;;;;GAIG;AACH,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IACjE;;;OAGG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,GAChB,sBAAsB,CAKxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAqB,SAAQ,sBAAsB;IAClE,+DAA+D;IAC/D,MAAM,IAAI,mBAAmB,GAAG,IAAI,CAAA;CACrC;AAED,wBAAgB,0BAA0B,CACxC,OAAO,GAAE;IAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GACtD,oBAAoB,CAatB;AAID;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,GAAG,uBAAuB,CAAA;AAE7E,MAAM,WAAW,sBAAsB;IACrC,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAA;IACjB;;;OAGG;IACH,OAAO,CAAC,EAAE,eAAe,CAAA;IACzB;;;;;OAKG;IACH,cAAc,EAAE,sBAAsB,CAAA;IACtC,yEAAyE;IACzE,iBAAiB,EAAE,iBAAiB,CAAA;IACpC;;;OAGG;IACH,YAAY,EAAE,0BAA0B,CAAA;IACxC,8FAA8F;IAC9F,MAAM,CAAC,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACzC;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAChB,OAAO,EAAE,iBAAiB,KACvB,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;IACxE;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IACvC;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,MAAM,CAAA;IACvD;;;OAGG;IACH,wBAAwB,CAAC,EAAE,wBAAwB,CAAA;IACnD;;;OAGG;IACH,cAAc,CAAC,EAAE,qBAAqB,CAAA;IACtC,qEAAqE;IACrE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,MAAM,CAAA;IACrB,yEAAyE;IACzE,WAAW,CAAC,EAAE,OAAO,qBAAqB,CAAA;CAC3C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAA;IAC7B,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,wBAAwB,CAAA;IACnD,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAA;IAC3C,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAA;IACnC,uEAAuE;IACvE,QAAQ,CAAC,sBAAsB,EAAE,sBAAsB,GAAG,IAAI,CAAA;IAC9D;;;OAGG;IACH,YAAY,IAAI,qBAAqB,GAAG,IAAI,CAAA;IAC5C,0EAA0E;IAC1E,QAAQ,IAAI,mBAAmB,GAAG,IAAI,CAAA;IACtC;;;;OAIG;IACH,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAChE,yEAAyE;IACzE,qBAAqB,IAAI,IAAI,CAAA;IAC7B;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;IAC5B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,sBAAsB,EAC/B,gBAAgB,CAAC,EAAE,eAAe,GACjC,OAAO,CAAC,eAAe,CAAC,CAc1B"}

package/dist/types/src/plugin/shared/source-sidebar.d.ts

@@ -0,0 +1,15 @@
+import { type EnrollmentAuthority } from '@cortexkit/antigravity-auth-core';
+import type { SidebarMachineState } from '../../sidebar-state.js';
+export interface SourceSidebarOptions {
+    readonly readAuthority: () => Promise<EnrollmentAuthority>;
+    readonly local: () => Promise<SidebarMachineState>;
+    readonly vault: () => Promise<SidebarMachineState>;
+    readonly write: (state: SidebarMachineState, accountIds: readonly string[]) => Promise<void>;
+    readonly now?: () => number;
+}
+/** Choose local or vault sidebar rows before reading accounts; finish queued snapshot writes on shutdown. */
+export declare function createSourceSidebarPublisher(options: SourceSidebarOptions): {
+    publish(): Promise<void>;
+    dispose(): Promise<void>;
+};
+//# sourceMappingURL=source-sidebar.d.ts.map

package/dist/types/src/plugin/shared/source-sidebar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-sidebar.d.ts","sourceRoot":"","sources":["../../../../../src/plugin/shared/source-sidebar.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,kCAAkC,CAAA;AACzC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAE9D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAC1D,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAClD,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAClD,QAAQ,CAAC,KAAK,EAAE,CACd,KAAK,EAAE,mBAAmB,EAC1B,UAAU,EAAE,SAAS,MAAM,EAAE,KAC1B,OAAO,CAAC,IAAI,CAAC,CAAA;IAClB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAC5B;AAED,6GAA6G;AAC7G,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,oBAAoB;eAS3D,OAAO,CAAC,IAAI,CAAC;eAqBP,OAAO,CAAC,IAAI,CAAC;EAKjC"}

package/dist/types/src/plugin/shared/vault-menu.d.ts

@@ -0,0 +1,5 @@
+import { type AntigravityMenuSections, type AntigravityQuotaCheckReport } from '@cortexkit/antigravity-auth-core';
+import type { VaultAccountPool, VaultAccountRow } from './vault-request-credentials.js';
+/** Show accounts and quotas from the same vault account pool that selects request routes. */
+export declare function createVaultAccountMenuSections(pool: Pick<VaultAccountPool, 'selector'>, selectorOf: (row: VaultAccountRow) => string, checkQuota?: (signal: AbortSignal) => Promise<AntigravityQuotaCheckReport>): Pick<AntigravityMenuSections, 'accounts' | 'quota'>;
+//# sourceMappingURL=vault-menu.d.ts.map

package/dist/types/src/plugin/shared/vault-menu.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-menu.d.ts","sourceRoot":"","sources":["../../../../../src/plugin/shared/vault-menu.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAIjC,MAAM,kCAAkC,CAAA;AACzC,OAAO,KAAK,EACV,gBAAgB,EAChB,eAAe,EAChB,MAAM,6BAA6B,CAAA;AAEpC,6FAA6F;AAC7F,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,EACxC,UAAU,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,MAAM,EAC5C,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,2BAA2B,CAAC,GACzE,IAAI,CAAC,uBAAuB,EAAE,UAAU,GAAG,OAAO,CAAC,CAwDrD"}