@cortexkit/opencode-antigravity-auth 2.2.0 → 3.0.0

package/dist/tui-ga-build-map.json

@@ -0,0 +1,187 @@
+{
+  "schema": 1,
+  "compiler": "@cortexkit/common-auth/tui-build@0.14.2",
+  "bun": "1.4.2",
+  "raw": {
+    "selector": "selector.js",
+    "externals": [
+      "solid-js"
+    ],
+    "files": [
+      {
+        "source": "src/common-auth-embedded/quota/map.js",
+        "output": "src/tui-ga-raw/shared/77138df80c7ae006-map.js",
+        "bytes": 4271,
+        "sha256": "61fb25c789389e57ff8cceb450f6872c2b6e4961cec3c4650f6af699ab5a27f2",
+        "transform": "public-raw"
+      },
+      {
+        "source": "src/common-auth-embedded/quota/merge.js",
+        "output": "src/tui-ga-raw/shared/ecc214300932dfb6-merge.js",
+        "bytes": 6530,
+        "sha256": "f3188832c0cd87c6aa9e95643562403af0a9cbada3146c23fb6aa5bf1d6213c1",
+        "transform": "public-raw"
+      },
+      {
+        "source": "src/common-auth-embedded/quota/codec.js",
+        "output": "src/tui-ga-raw/shared/ca21dc417b36dc5d-codec.js",
+        "bytes": 481,
+        "sha256": "cee2b513848c321a0a1f1e63f541c780e4e9dfb3707a6d13ad16512a69b30e87",
+        "transform": "public-raw"
+      },
+      {
+        "source": "src/common-auth-embedded/quota/format.js",
+        "output": "src/tui-ga-raw/shared/aef2402f8fc342f0-format.js",
+        "bytes": 5836,
+        "sha256": "b271d2ca390d705ce12f299e5c57e26d4c9a9fecc0d036eacc075713653a88c1",
+        "transform": "public-raw"
+      },
+      {
+        "source": "src/common-auth-embedded/quota/projection.js",
+        "output": "src/tui-ga-raw/shared/1ff34afa7c42d196-projection.js",
+        "bytes": 5526,
+        "sha256": "3a9714f112d5960dd7a9b9f703533e788bf6c204c9d42584a48072a989d70317",
+        "transform": "public-raw"
+      },
+      {
+        "source": "src/common-auth-embedded/quota/index.js",
+        "output": "src/tui-ga-raw/shared/bf17cbee28e58197-index.js",
+        "bytes": 548,
+        "sha256": "72d2e78a0d7c7155720db25b45605a621d5fc109d9ee51fa34b14f53790b3270",
+        "transform": "public-raw"
+      },
+      {
+        "source": "src/quota-presentation.ts",
+        "output": "src/tui-ga-raw/shared/98cc0c186c46c42d-quota-presentation.js",
+        "bytes": 1744,
+        "sha256": "d7654d82635dc30ddf267656981a1d3830300334166a1dd714e3d093b929ebb5",
+        "transform": "public-raw"
+      },
+      {
+        "source": "src/sidebar-projection.ts",
+        "output": "src/tui-ga-raw/shared/8ae1927e5910ea81-sidebar-projection.js",
+        "bytes": 3655,
+        "sha256": "7b5cd300da61536f7bf1ad3a05b7a121758a587d99582681f4fd5171eb462956",
+        "transform": "public-raw"
+      },
+      {
+        "source": "src/tui/host-api.ts",
+        "output": "src/tui-ga-raw/shared/07365a7d2ccade4c-host-api.js",
+        "bytes": 10284,
+        "sha256": "18b63effb779ae5e911060910b1a3c4b810d2b90275acd1ac327417c3d3231af",
+        "transform": "public-raw"
+      },
+      {
+        "source": "src/tui/command-dialogs.tsx",
+        "output": "src/tui-ga-raw/shared/0e19a88ff3535906-command-dialogs.tsx",
+        "bytes": 14698,
+        "sha256": "c97d7b942476301768f4c74e3ba277ed56ab450b3b179dea08d5f561b42ee622",
+        "transform": "public-raw"
+      },
+      {
+        "source": "src/ga/tui/host-ga.tsx",
+        "output": "src/tui-ga-raw/host-ga.tsx",
+        "bytes": 56181,
+        "sha256": "b8ba5ddc6727e5251bbc1f8f0e7ffb259a9c7732dbbc7e9bc567282d412c3de7",
+        "transform": "public-raw"
+      },
+      {
+        "source": "../../tools/common-auth-build/node_modules/@cortexkit/common-auth/dist/tui/index.js",
+        "output": "src/tui-ga-raw/selector.js",
+        "bytes": 950,
+        "sha256": "c9a1e381382128b64eea0b3b049beb1b210cb68e768ea04683662b8b1a73bbb1",
+        "transform": "verbatim-selector"
+      }
+    ]
+  },
+  "runtime": {
+    "selector": "selector.js",
+    "externals": [],
+    "files": [
+      {
+        "source": "src/common-auth-embedded/quota/map.js",
+        "output": "src/tui-ga-compiled/shared/77138df80c7ae006-map.js",
+        "bytes": 4271,
+        "sha256": "61fb25c789389e57ff8cceb450f6872c2b6e4961cec3c4650f6af699ab5a27f2",
+        "transform": "public-solid-runtime"
+      },
+      {
+        "source": "src/common-auth-embedded/quota/merge.js",
+        "output": "src/tui-ga-compiled/shared/ecc214300932dfb6-merge.js",
+        "bytes": 6530,
+        "sha256": "f3188832c0cd87c6aa9e95643562403af0a9cbada3146c23fb6aa5bf1d6213c1",
+        "transform": "public-solid-runtime"
+      },
+      {
+        "source": "src/common-auth-embedded/quota/codec.js",
+        "output": "src/tui-ga-compiled/shared/ca21dc417b36dc5d-codec.js",
+        "bytes": 481,
+        "sha256": "cee2b513848c321a0a1f1e63f541c780e4e9dfb3707a6d13ad16512a69b30e87",
+        "transform": "public-solid-runtime"
+      },
+      {
+        "source": "src/common-auth-embedded/quota/format.js",
+        "output": "src/tui-ga-compiled/shared/aef2402f8fc342f0-format.js",
+        "bytes": 5836,
+        "sha256": "b271d2ca390d705ce12f299e5c57e26d4c9a9fecc0d036eacc075713653a88c1",
+        "transform": "public-solid-runtime"
+      },
+      {
+        "source": "src/common-auth-embedded/quota/projection.js",
+        "output": "src/tui-ga-compiled/shared/1ff34afa7c42d196-projection.js",
+        "bytes": 5526,
+        "sha256": "3a9714f112d5960dd7a9b9f703533e788bf6c204c9d42584a48072a989d70317",
+        "transform": "public-solid-runtime"
+      },
+      {
+        "source": "src/common-auth-embedded/quota/index.js",
+        "output": "src/tui-ga-compiled/shared/bf17cbee28e58197-index.js",
+        "bytes": 548,
+        "sha256": "72d2e78a0d7c7155720db25b45605a621d5fc109d9ee51fa34b14f53790b3270",
+        "transform": "public-solid-runtime"
+      },
+      {
+        "source": "src/quota-presentation.ts",
+        "output": "src/tui-ga-compiled/shared/98cc0c186c46c42d-quota-presentation.js",
+        "bytes": 1744,
+        "sha256": "d7654d82635dc30ddf267656981a1d3830300334166a1dd714e3d093b929ebb5",
+        "transform": "public-solid-runtime"
+      },
+      {
+        "source": "src/sidebar-projection.ts",
+        "output": "src/tui-ga-compiled/shared/8ae1927e5910ea81-sidebar-projection.js",
+        "bytes": 3655,
+        "sha256": "7b5cd300da61536f7bf1ad3a05b7a121758a587d99582681f4fd5171eb462956",
+        "transform": "public-solid-runtime"
+      },
+      {
+        "source": "src/tui/host-api.ts",
+        "output": "src/tui-ga-compiled/shared/07365a7d2ccade4c-host-api.js",
+        "bytes": 10284,
+        "sha256": "18b63effb779ae5e911060910b1a3c4b810d2b90275acd1ac327417c3d3231af",
+        "transform": "public-solid-runtime"
+      },
+      {
+        "source": "src/tui/command-dialogs.tsx",
+        "output": "src/tui-ga-compiled/shared/0e19a88ff3535906-command-dialogs.js",
+        "bytes": 13027,
+        "sha256": "0f03fad2e1c68cf827b44b749807c1760222a577775a37bb500df0f721e6f26a",
+        "transform": "public-solid-runtime"
+      },
+      {
+        "source": "src/ga/tui/host-ga.tsx",
+        "output": "src/tui-ga-compiled/host-ga.js",
+        "bytes": 47782,
+        "sha256": "4335896b2c25c9d7600d2fe31f3e5f21d357c01b6f835bd2e7db2b76f844282e",
+        "transform": "public-solid-runtime"
+      },
+      {
+        "source": "../../tools/common-auth-build/node_modules/@cortexkit/common-auth/dist/tui/index.js",
+        "output": "src/tui-ga-compiled/selector.js",
+        "bytes": 950,
+        "sha256": "c9a1e381382128b64eea0b3b049beb1b210cb68e768ea04683662b8b1a73bbb1",
+        "transform": "verbatim-selector"
+      }
+    ]
+  }
+}

package/dist/types/src/antigravity/oauth.d.ts

@@ -0,0 +1,2 @@
+export * from '@cortexkit/antigravity-auth-core';
+//# sourceMappingURL=oauth.d.ts.map

package/dist/types/src/antigravity/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../../src/antigravity/oauth.ts"],"names":[],"mappings":"AACA,cAAc,kCAAkC,CAAA"}

package/dist/types/src/cli.d.ts

@@ -0,0 +1,66 @@
+import { type AccountMetadataV3, type AccountMigrationOutcome, type AccountQuotaResult, type AccountRow, type AccountStorageV4 } from '@cortexkit/antigravity-auth-core';
+import { type AntigravityTokenExchangeSuccess, type OAuthLoginRequest, performOAuthLogin } from './plugin/oauth-login.js';
+interface WritableOutput {
+    write(value: string): unknown;
+}
+export interface CliDependencies {
+    stdout: WritableOutput;
+    stderr: WritableOutput;
+    prompt(message: string): Promise<string>;
+    openBrowser(url: string): Promise<void>;
+    isHeadless?(): boolean;
+    performLogin(request: OAuthLoginRequest, openBrowser: (url: string) => Promise<void>): Promise<AntigravityTokenExchangeSuccess>;
+    loadAccounts(): Promise<AccountStorageV4 | null>;
+    getQuota(accounts: AccountMetadataV3[], options: {
+        refresh: boolean;
+    }): Promise<AccountQuotaResult[]>;
+    /** Offline operations on the account store; see `AccountStoreOperations`. */
+    accountStore: AccountStoreOperations;
+}
+/**
+ * The offline account-store operations, each bound to the canonical
+ * migration module. `migrate` and `rollback` run only after the operator
+ * confirmed that every Antigravity process and timer has stopped; `init`
+ * creates an empty store only where no account file exists.
+ */
+export interface AccountStoreOperations {
+    /** The absolute path of the pre-store account file the store is derived from. */
+    legacyPath(): string;
+    migrate(legacyPath: string): Promise<AccountMigrationOutcome>;
+    rollback(legacyPath: string): Promise<AccountMigrationOutcome>;
+    initialize(legacyPath: string): Promise<AccountMigrationOutcome>;
+    /** Reads the accounts list and quota show, without writing. */
+    read(legacyPath: string): Promise<CliAccountsRead>;
+}
+/**
+ * Where `list` and `quota` read accounts from. Once the account store is
+ * active the pre-store file is retired, so the store is the only source;
+ * before migration (or after a rollback) the pre-store file still is.
+ */
+export type CliAccountsRead = {
+    kind: 'store';
+    accounts: AccountMetadataV3[];
+} | {
+    kind: 'legacy';
+} | {
+    kind: 'uninitialized';
+} | {
+    kind: 'unavailable';
+    reason: string;
+};
+export declare function runCli(argv: string[], deps: CliDependencies): Promise<number>;
+export declare function createDefaultCliDependencies(): CliDependencies;
+/**
+ * One store row in the account shape `list` and `quota` print. Only display
+ * fields and what a quota check needs; nothing is written back.
+ */
+export declare function cliAccountOf(row: AccountRow): AccountMetadataV3;
+/**
+ * The account-store operations over the embedded common-auth `./store` and
+ * `./fs` modules. The operator's `--offline` flag and confirmation are what
+ * `processesStopped` records; the migration module itself verifies the
+ * pointer, journal and retired-writer state before it writes.
+ */
+export declare function createDefaultAccountStoreOperations(): AccountStoreOperations;
+export { performOAuthLogin };
+//# sourceMappingURL=cli.d.ts.map

package/dist/types/src/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../src/cli.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,UAAU,EACf,KAAK,gBAAgB,EAQtB,MAAM,kCAAkC,CAAA;AAEzC,OAAO,EACL,KAAK,+BAA+B,EACpC,KAAK,iBAAiB,EACtB,iBAAiB,EAClB,MAAM,sBAAsB,CAAA;AAM7B,UAAU,cAAc;IACtB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,cAAc,CAAA;IACtB,MAAM,EAAE,cAAc,CAAA;IACtB,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACxC,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvC,UAAU,CAAC,IAAI,OAAO,CAAA;IACtB,YAAY,CACV,OAAO,EAAE,iBAAiB,EAC1B,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAC1C,OAAO,CAAC,+BAA+B,CAAC,CAAA;IAC3C,YAAY,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;IAChD,QAAQ,CACN,QAAQ,EAAE,iBAAiB,EAAE,EAC7B,OAAO,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,GAC5B,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAA;IAChC,6EAA6E;IAC7E,YAAY,EAAE,sBAAsB,CAAA;CACrC;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,iFAAiF;IACjF,UAAU,IAAI,MAAM,CAAA;IACpB,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;IAC7D,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;IAC9D,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;IAChE,+DAA+D;IAC/D,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;CACnD;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,iBAAiB,EAAE,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,GACzB;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AA8M3C,wBAAsB,MAAM,CAC1B,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,MAAM,CAAC,CA6GjB;AAcD,wBAAgB,4BAA4B,IAAI,eAAe,CAyC9D;AAMD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,UAAU,GAAG,iBAAiB,CAoC/D;AAqDD;;;;;GAKG;AACH,wBAAgB,mCAAmC,IAAI,sBAAsB,CAuB5E;AASD,OAAO,EAAE,iBAAiB,EAAE,CAAA"}

package/dist/types/src/common-auth-embedded/commands/builtins.d.ts

@@ -0,0 +1,71 @@
+import type { AddInput, PoolLockSpec, PoolRow, PoolStore, RemoveOptions } from '../store/index.js';
+import type { CommandInvocation, KnobValues, MenuChoice, MenuKnob } from './model.js';
+import { type ResolvedSection } from './seam.js';
+/**
+ * What a plugin's login hands back. `ready` adds the account now. `pending`
+ * means the user must finish somewhere else (a browser, a device code):
+ * `message` tells them how, and the account is added when `completion`
+ * settles, with the result sent to the invocation that started it.
+ */
+export type LoginOutcome = {
+    status: 'ready';
+    account: AddInput;
+} | {
+    status: 'pending';
+    message: string;
+    /** Resolves with the account to add, or undefined when the user gave up. */
+    completion: Promise<AddInput | undefined>;
+} | {
+    status: 'cancelled';
+    message?: string;
+};
+export interface AccountsSectionOptions {
+    /** What to show as an account's identity; defaults to its recorded identity. */
+    describeIdentity?(row: PoolRow): string | undefined;
+    /** The plugin's login; without it the section offers no add action. */
+    login?: {
+        label?: string;
+        knobs?: MenuKnob[];
+        run(values: KnobValues, invocation: CommandInvocation): Promise<LoginOutcome>;
+    };
+    /** Passed to `store.remove`: a reason refuses removing that id. */
+    protect?: RemoveOptions['protect'];
+}
+export interface QuotaSectionOptions {
+    /** The quota scope to show (`all` or a model family); defaults to `all`. */
+    scope?: string;
+    /**
+     * Checks quota now for the named rows. Without it, the menu asks the store
+     * for a reading of each row and waits for the pulls to settle.
+     */
+    check?(ids: readonly string[], invocation: CommandInvocation): Promise<void>;
+}
+export interface RoutingSectionOptions {
+    /**
+     * Further `routing.mode` values the plugin routes as `ordered` with the
+     * former main row moved (`main-first`, `fallback-first`), offered between
+     * `ordered` and `sticky-balanced`.
+     */
+    orderedVariants?: MenuChoice[];
+    formerMainId?: string;
+}
+export interface LimitsSectionOptions {
+    /**
+     * The quota window labels a floor can be set for. Defaults to every label
+     * the pool's quota readings carry, or `primary` when there are none.
+     */
+    labels?: readonly string[];
+}
+export interface BuiltinOptions {
+    store: PoolStore;
+    extraLocks?: readonly PoolLockSpec[];
+    now: () => number;
+    accounts?: AccountsSectionOptions;
+    quota?: QuotaSectionOptions;
+    routing?: RoutingSectionOptions;
+    limits?: LimitsSectionOptions;
+}
+/** `disabledReason` recorded when the user disables an account from the menu. */
+export declare const MENU_DISABLED_REASON = "disabled from the command menu";
+/** The four built-in sections, in their fixed order, from one read of the store. */
+export declare function builtinSections(options: BuiltinOptions): Promise<ResolvedSection[]>;

package/dist/types/src/common-auth-embedded/commands/index.d.ts

@@ -0,0 +1,10 @@
+export type { AccountsSectionOptions, LimitsSectionOptions, LoginOutcome, QuotaSectionOptions, RoutingSectionOptions, } from './builtins.js';
+export { MENU_DISABLED_REASON } from './builtins.js';
+export type { CommandMenu, CommandMenuOptions, StoreSectionSlot, } from './menu.js';
+export { createCommandMenu, parseApplyRequest } from './menu.js';
+export type { ActionDefinition, ActionInput, ActionOutcome, CommandApplyRequest, CommandApplyResult, CommandDialogPayload, CommandInvocation, CommandMenuModel, ItemDefinition, KnobValue, KnobValues, MenuAccount, MenuAction, MenuChoice, MenuConfirmation, MenuItem, MenuKnob, MenuSection, NotifyKind, PluginExtraSection, PluginSection, SectionContent, SectionSlot, } from './model.js';
+export { SECTION_SLOTS } from './model.js';
+export type { PiMenuOptions, PiMenuUi } from './pi.js';
+export { runPiCommandMenu } from './pi.js';
+export type { ProjectedFailure, SeamLogger, TextRedactor } from './seam.js';
+export { ACTION_FAILED, CommandError, createTextRedactor, DEFAULT_IRREVERSIBLE_CONFIRMATION, projectFailure, } from './seam.js';

package/dist/types/src/common-auth-embedded/commands/menu.d.ts

@@ -0,0 +1,61 @@
+import { type RedactionOptions } from '../logger/index.js';
+import type { PoolLockSpec, PoolStore } from '../store/index.js';
+import { type AccountsSectionOptions, type LimitsSectionOptions, type QuotaSectionOptions, type RoutingSectionOptions } from './builtins.js';
+import type { CommandApplyRequest, CommandApplyResult, CommandDialogPayload, CommandInvocation, PluginExtraSection, PluginSection } from './model.js';
+import { type SeamLogger } from './seam.js';
+/** The four slots the library can build from a pool store. */
+export type StoreSectionSlot = 'accounts' | 'quota' | 'routing' | 'limits';
+export interface CommandMenuOptions {
+    /** The slash command's name without the slash (`openai`, `claude`). */
+    command: string;
+    /** The dialog title. */
+    title: string;
+    /**
+     * The pool store the built-in Accounts, Quota, Routing and Limits sections
+     * read and write. Required unless `replace` supplies all four.
+     */
+    store?: PoolStore;
+    /**
+     * Plugin sections that take the place of built-in ones, keeping their slot
+     * and the fixed order. For a plugin whose accounts are not pool rows (a
+     * single host login, or rows it must not expose by id), so it renders its
+     * own items and actions without a store. A replaced slot's built-in
+     * options (`accounts`, `quota`, ...) must not be given.
+     */
+    replace?: Partial<Record<StoreSectionSlot, PluginSection>>;
+    /** The plugin's legacy locks, passed to every store write the menu makes. */
+    extraLocks?: readonly PoolLockSpec[];
+    accounts?: AccountsSectionOptions;
+    quota?: QuotaSectionOptions;
+    routing?: RoutingSectionOptions;
+    limits?: LimitsSectionOptions;
+    /** The Cache section; omitted when the plugin has none. */
+    cache?: PluginSection;
+    /** The Diagnostics section (dumps, logging); omitted when the plugin has none. */
+    diagnostics?: PluginSection;
+    /** Provider extras, shown after every fixed section in this order. */
+    extras?: readonly PluginExtraSection[];
+    /** Receives the seam's warnings and failed actions; defaults to the library logger. */
+    logger?: SeamLogger;
+    /**
+     * The provider's secret shapes, added to the redactor every string that
+     * leaves the menu goes through (payloads and notifications). Without a
+     * pattern for its key format, a plugin's API key quoted in an outcome's
+     * text is not recognised.
+     */
+    redaction?: RedactionOptions;
+    now?: () => number;
+}
+export interface CommandMenu {
+    readonly command: string;
+    /** The dialog payload for one invocation of the slash command. */
+    open(invocation: CommandInvocation): Promise<CommandDialogPayload>;
+    /** Applies one action and returns its message and the refreshed menu. */
+    apply(request: CommandApplyRequest, invocation: CommandInvocation): Promise<CommandApplyResult>;
+}
+export declare function createCommandMenu(options: CommandMenuOptions): CommandMenu;
+/**
+ * Checks an apply request that arrived over the loopback RPC; undefined when
+ * it is not one. Only the request's own fields are kept.
+ */
+export declare function parseApplyRequest(value: unknown): CommandApplyRequest | undefined;

package/dist/types/src/common-auth-embedded/commands/model.d.ts

@@ -0,0 +1,238 @@
+/** The section slots, in the one order every renderer shows them. */
+export declare const SECTION_SLOTS: readonly ['accounts', 'quota', 'routing', 'limits', 'cache', 'diagnostics', 'extra'];
+export type SectionSlot = (typeof SECTION_SLOTS)[number];
+/** One choice of a `choice` input. */
+export interface MenuChoice {
+    value: string;
+    label: string;
+}
+/**
+ * A typed input an action collects before it runs. `value` is the current
+ * setting, shown as the default. A `number` or `text` input that is not
+ * `required` may be left empty, which the action receives as `null`.
+ */
+export type MenuKnob = {
+    kind: 'choice';
+    id: string;
+    label: string;
+    choices: MenuChoice[];
+    value?: string;
+} | {
+    kind: 'toggle';
+    id: string;
+    label: string;
+    value: boolean;
+} | {
+    kind: 'number';
+    id: string;
+    label: string;
+    value?: number;
+    min?: number;
+    max?: number;
+    required?: boolean;
+} | {
+    kind: 'text';
+    id: string;
+    label: string;
+    value?: string;
+    placeholder?: string;
+    /** Hide what is typed (a pasted secret, for example). */
+    masked?: boolean;
+    required?: boolean;
+};
+export type KnobValue = string | number | boolean | null;
+export type KnobValues = Readonly<Record<string, KnobValue>>;
+export interface MenuConfirmation {
+    message: string;
+    /** Irreversible actions always carry a confirmation. */
+    irreversible: boolean;
+}
+export interface MenuAction {
+    id: string;
+    label: string;
+    description?: string;
+    /**
+     * The header a section-level action is listed under (`Actions`). See
+     * `MenuSection` for how renderers draw groups.
+     */
+    group?: string;
+    knobs: MenuKnob[];
+    /** Present when the action must be confirmed before it is applied. */
+    confirm?: MenuConfirmation;
+}
+/**
+ * The account fields a renderer may show, and nothing else: an account is
+ * always projected field by field, never spread, so a credential the store
+ * row carries cannot reach a payload.
+ */
+export interface MenuAccount {
+    id: string;
+    label?: string;
+    enabled: boolean;
+    type: 'oauth' | 'api';
+    /** What the plugin chose to show for the account's identity. */
+    identity?: string;
+}
+export interface MenuItem {
+    id: string;
+    label: string;
+    detail?: string;
+    /** The header the item is listed under (`Accounts`); see `MenuSection`. */
+    group?: string;
+    /**
+     * A short value shown right-aligned beside the label (`enabled`,
+     * `5h 58% left`): an OpenCode dialog option's `footer`.
+     */
+    status?: string;
+    account?: MenuAccount;
+    /**
+     * Extra name/value pairs a drawer may list under the item. Plugin data
+     * passes through here, so it is scrubbed of credential-shaped names.
+     */
+    facts?: Record<string, unknown>;
+    actions: MenuAction[];
+}
+/**
+ * One section of the menu. How every renderer draws it:
+ *
+ * - Every option a renderer shows can be selected and does something: it is
+ *   an item with at least one action, or a section-level action. Text that
+ *   does nothing is never an option; it is a group header or a line.
+ * - `lines` are read-only text. On OpenCode they are drawn as header text
+ *   (a `category`) above the first group; on Pi they are part of the select
+ *   title.
+ * - The options are the items, then the section-level actions, in that
+ *   order. When an option's `group` differs from the previous one's, a
+ *   header naming the group is drawn first. A header is never selectable
+ *   (on OpenCode it is the option's `category`).
+ * - An item's `status` is drawn right-aligned beside its label (on
+ *   OpenCode, `footer`); its `detail` and an action's `description` are
+ *   the secondary text (`description`).
+ *
+ * The built-in sections never emit an item without actions, and a plugin
+ * section should not either. A renderer that meets one must not offer it as
+ * an option: on OpenCode a `disabled` option is hidden altogether, so the
+ * item is written as header text instead, and Pi writes it into the title.
+ */
+export interface MenuSection {
+    id: string;
+    slot: SectionSlot;
+    title: string;
+    /** Read-only text shown above the rows; never a selectable option. */
+    lines: string[];
+    items: MenuItem[];
+    actions: MenuAction[];
+    facts?: Record<string, unknown>;
+}
+export interface CommandMenuModel {
+    /** The slash command's name, without the slash. */
+    command: string;
+    title: string;
+    sections: MenuSection[];
+}
+/** What a host's TUI receives when the slash command opens the dialog. */
+export interface CommandDialogPayload {
+    command: string;
+    menu: CommandMenuModel;
+}
+/**
+ * One applied action, as a renderer sends it back. `itemId` names the item
+ * the action sits on; absent for a section-level action.
+ */
+export interface CommandApplyRequest {
+    command: string;
+    sectionId: string;
+    itemId?: string;
+    actionId: string;
+    values?: KnobValues;
+    /** True once the user confirmed an action that carries a confirmation. */
+    confirmed?: boolean;
+    sessionId?: string;
+}
+/** The outcome of an apply: a message for the user and the refreshed menu. */
+export interface CommandApplyResult {
+    command: string;
+    ok: boolean;
+    text: string;
+    /**
+     * A stable code naming why the apply failed; present on every failure.
+     * The library's own codes are `unavailable`, `needs-confirmation`,
+     * `invalid-input`, `refused`, `action-failed` and `pool-<store failure
+     * kind>`; a plugin's `CommandError` or `ActionOutcome` names its own.
+     */
+    code?: string;
+    /** True when the action was refused only for want of a confirmation. */
+    needsConfirmation?: boolean;
+    menu: CommandMenuModel;
+}
+export type NotifyKind = 'info' | 'warning' | 'error';
+/**
+ * The per-invocation context of one slash-command call. The library reads
+ * both fields once, when the call starts, and keeps that copy for any work
+ * the call leaves running (a login completing later, for example), so a host
+ * that reuses one context object across sessions cannot reroute feedback.
+ */
+export interface CommandInvocation {
+    sessionId?: string;
+    notify(message: string, kind?: NotifyKind): void;
+}
+export interface ActionOutcome {
+    ok: boolean;
+    text: string;
+    /** The failure's stable code; a failure without one is `refused`. */
+    code?: string;
+}
+export interface ActionInput {
+    values: KnobValues;
+    /** The item the action sits on; absent for a section-level action. */
+    itemId?: string;
+    invocation: CommandInvocation;
+}
+type ActionBase = {
+    id: string;
+    label: string;
+    description?: string;
+    /** The header a section-level action is listed under; see `MenuSection`. */
+    group?: string;
+    knobs?: MenuKnob[];
+    run(input: ActionInput): Promise<string | ActionOutcome>;
+};
+/**
+ * An action and its body. An irreversible action must name its
+ * confirmation; a reversible one may.
+ */
+export type ActionDefinition = ActionBase & ({
+    irreversible: true;
+    confirm: string;
+} | {
+    irreversible?: false;
+    confirm?: string;
+});
+export interface ItemDefinition {
+    id: string;
+    label: string;
+    detail?: string;
+    /** The header the item is listed under; see `MenuSection`. */
+    group?: string;
+    /** A short value shown right-aligned beside the label. */
+    status?: string;
+    facts?: Record<string, unknown>;
+    actions?: ActionDefinition[];
+}
+export interface SectionContent {
+    /** Read-only text; renderers never make a line selectable. */
+    lines?: string[];
+    items?: ItemDefinition[];
+    actions?: ActionDefinition[];
+    facts?: Record<string, unknown>;
+}
+/** A section a plugin supplies for one of its slots. */
+export interface PluginSection {
+    title: string;
+    build(invocation: CommandInvocation): SectionContent | Promise<SectionContent>;
+}
+/** A provider extra: a plugin section shown after the fixed slots. */
+export interface PluginExtraSection extends PluginSection {
+    id: string;
+}
+export {};

package/dist/types/src/common-auth-embedded/commands/pi.d.ts

@@ -0,0 +1,23 @@
+import type { CommandMenu } from './menu.js';
+import type { NotifyKind } from './model.js';
+/**
+ * The part of Pi's `ExtensionUIContext` the renderer uses. `select` and
+ * `input` resolve undefined when the user backs out.
+ */
+export interface PiMenuUi {
+    select(title: string, options: string[]): Promise<string | undefined>;
+    confirm(title: string, message: string): Promise<boolean>;
+    input(title: string, placeholder?: string): Promise<string | undefined>;
+    notify(message: string, type?: NotifyKind): void;
+}
+export interface PiMenuOptions {
+    sessionId?: string;
+}
+/**
+ * Runs one invocation of the slash command on Pi: sections, then an item or
+ * a section action, then the action's inputs and confirmation; after each
+ * apply the user is back in the same section with the refreshed menu. Each
+ * section's list ends with Back, which returns to the section list; backing
+ * out of the section list ends the invocation.
+ */
+export declare function runPiCommandMenu(menu: CommandMenu, ui: PiMenuUi, options?: PiMenuOptions): Promise<void>;