@cortexkit/pi-antigravity-auth 2.2.1 → 3.0.1

package/dist/vault-setup.d.ts

@@ -0,0 +1,144 @@
+/**
+ * Setup for serving Pi's Antigravity provider from the Claustrum vault
+ * ("custody") instead of Pi's own login ("local"). The two never serve
+ * together. Enrollment as `antigravity-auth-pi` runs only from the Vault
+ * menu section, never from a model request; the enrollment token stays in
+ * the vault library's owner-only file and Pi's auth slot is only read.
+ */
+import type { CommonAuthClaustrumModule } from '@cortexkit/antigravity-auth-core';
+import type { ClaustrumEnrollmentConnection, ClaustrumEnrollmentPaths, ClaustrumEnrollmentStatus, HostSlotContent } from '@cortexkit/antigravity-auth-core/common-auth/claustrum';
+import type { PluginExtraSection } from '@cortexkit/antigravity-auth-core/common-auth/commands';
+/** Pi's provider id; also the key of its auth slot in Pi's auth.json. */
+export declare const PI_ANTIGRAVITY_PROVIDER_ID = "google";
+/** The host name this extension enrolls under, one enrollment per host. */
+export declare const PI_ANTIGRAVITY_VAULT_HOST = "pi";
+/** The enrollment name the operator sees and approves for Pi. */
+export declare const PI_ANTIGRAVITY_ENROLLMENT_NAME = "antigravity-auth-pi";
+export type PiAntigravityMode = 'local' | 'custody';
+/**
+ * What Pi serves Antigravity from. `routeId` names the vault account the
+ * user picked; it is a roster route id, never credential material.
+ */
+export interface PiVaultModeRecord {
+    readonly version: 1;
+    readonly mode: PiAntigravityMode;
+    readonly routeId?: string;
+}
+export type PiVaultModeRead = {
+    readonly ok: true;
+    readonly record: PiVaultModeRecord;
+} | {
+    readonly ok: false;
+    readonly reason: string;
+};
+/**
+ * Read the mode file. A missing file is local mode, so an extension that
+ * was never set up keeps serving its single login. A file that exists but
+ * cannot be understood is reported, not guessed: the caller refuses to serve
+ * rather than pick a mode the user may not have chosen.
+ */
+export declare function readPiVaultMode(path: string): PiVaultModeRead;
+export declare function writePiVaultMode(path: string, record: PiVaultModeRecord): Promise<void>;
+/** An account shown in the vault menu; declined accounts are excluded from request selection. */
+export interface PiVaultAccountChoice {
+    readonly routeId: string;
+    /** Display label from the vault roster; may hold the account's email. */
+    readonly label: string;
+    readonly email?: string;
+    readonly declined: boolean;
+}
+/**
+ * Vault account discovery and selection used by the setup menu.
+ * These operations become available after the operator approves access.
+ */
+export interface PiVaultAccountsPort {
+    /** Reload and save the list of permitted vault accounts, then return it to the menu. */
+    list(): Promise<readonly PiVaultAccountChoice[]>;
+    decline(routeId: string): Promise<void>;
+    accept(routeId: string): Promise<void>;
+}
+export interface PiVaultSetupStatus {
+    readonly mode: PiAntigravityMode | 'unreadable';
+    readonly modeProblem?: string;
+    readonly selectedRouteId?: string;
+    readonly enrollment: ClaustrumEnrollmentStatus;
+    readonly hostSlot: HostSlotContent | 'dormant';
+}
+export interface PiVaultSetupOptions {
+    claustrum: CommonAuthClaustrumModule;
+    /** Pi's vault directory (see `getPiAntigravityVaultDir`). */
+    stateDir: string;
+    /** Pi's vault mode file (see `getPiAntigravityVaultModeFile`). */
+    modeFile: string;
+    /** Read Pi's own Google credential record, only when local accounts are selected. */
+    readHostSlot: () => unknown;
+    /** Opens the setup-only enrollment connection to the vault. */
+    connectEnrollment: () => Promise<ClaustrumEnrollmentConnection>;
+    /** Re-register the Google provider after its selected account source changes. */
+    onModeChanged?: (record: PiVaultModeRecord) => void | Promise<void>;
+    now?: () => number;
+}
+/** A setup action refused before anything changed, with a message for the user. */
+export declare class PiVaultSetupError extends Error {
+    constructor(message: string);
+}
+export declare class PiVaultSetup {
+    #private;
+    readonly paths: ClaustrumEnrollmentPaths;
+    constructor(options: PiVaultSetupOptions);
+    /** Read vault approval and local/vault settings without opening Pi's Google credentials. */
+    sourceStatus(): Promise<Omit<PiVaultSetupStatus, 'hostSlot'>>;
+    /** Inspect the native login only when local accounts are selected. */
+    status(): Promise<PiVaultSetupStatus>;
+    /**
+     * Propose Pi to the vault or poll its recorded proposal. Clear a denied or
+     * blocked request before starting again. Only setup actions call this method.
+     */
+    connectStep(): Promise<ClaustrumEnrollmentStatus>;
+    /**
+     * Select the vault account used for requests after the operator approves
+     * enrollment. Await the host's Google credential-slot transition before
+     * returning, so provider registration cannot race it.
+     */
+    useVault(routeId?: string): Promise<PiVaultModeRecord>;
+    /** Use Pi's local login only after vault enrollment has been disconnected. */
+    useLocal(): Promise<PiVaultModeRecord>;
+    /**
+     * Forget this host's enrollment (token and ceremony state) and go back to
+     * local mode. The vault keeps the enrollment approved until the operator
+     * revokes it there.
+     */
+    disconnect(): Promise<void>;
+}
+/** Setup-menu status text with no credentials or Antigravity project identifiers. */
+export declare function formatPiVaultSetupStatus(status: PiVaultSetupStatus): string[];
+export interface PiVaultSectionOptions {
+    /** The setup controller; created on first use so the vault library loads lazily. */
+    setup: () => Promise<PiVaultSetup>;
+    /** Vault account actions, available only after the approved account source is constructed. */
+    accounts?: () => PiVaultAccountsPort | undefined;
+    /** How Request access polls for the operator's approval (tests shorten it). */
+    wait?: PiVaultWaitOptions;
+}
+export interface PiVaultWaitOptions {
+    pollIntervalMs?: number;
+    timeoutMs?: number;
+    sleep?: (ms: number) => Promise<void>;
+}
+/**
+ * A vault account's display name in the menu: its position in the vault's
+ * list. The roster label is usually the account's email, which must not
+ * leave this process in a menu payload; positions are shown, never accepted
+ * as targets.
+ */
+export declare function vaultAccountName(listed: readonly PiVaultAccountChoice[], account: PiVaultAccountChoice): string;
+export declare function opaqueItemId(routeId: string): string;
+/**
+ * The Vault section of Pi's command menu: mode and enrollment status, the
+ * vault accounts with use/decline/accept, requesting access (the only place
+ * enrollment runs), switching between the vault and the local Pi login, and
+ * forgetting the enrollment. Shows status only, never the enrollment token,
+ * and never a raw route id, roster label or email.
+ */
+export declare function createPiVaultSection(options: PiVaultSectionOptions): PluginExtraSection;
+//# sourceMappingURL=vault-setup.d.ts.map

package/dist/vault-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-setup.d.ts","sourceRoot":"","sources":["../src/vault-setup.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAA;AAMjF,OAAO,KAAK,EACV,6BAA6B,EAC7B,wBAAwB,EACxB,yBAAyB,EACzB,eAAe,EAChB,MAAM,wDAAwD,CAAA;AAC/D,OAAO,KAAK,EAIV,kBAAkB,EACnB,MAAM,uDAAuD,CAAA;AAE9D,yEAAyE;AACzE,eAAO,MAAM,0BAA0B,WAA0B,CAAA;AACjE,2EAA2E;AAC3E,eAAO,MAAM,yBAAyB,OAAO,CAAA;AAC7C,iEAAiE;AACjE,eAAO,MAAM,8BAA8B,wBAAwB,CAAA;AAMnE,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,SAAS,CAAA;AAEnD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GACzD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AA2BnD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAmB7D;AAED,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAAC,IAAI,CAAC,CAMf;AAMD,iGAAiG;AACjG,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,yEAAyE;IACzE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,wFAAwF;IACxF,IAAI,IAAI,OAAO,CAAC,SAAS,oBAAoB,EAAE,CAAC,CAAA;IAChD,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACvC;AAMD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,YAAY,CAAA;IAC/C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAA;IAC9C,QAAQ,CAAC,QAAQ,EAAE,eAAe,GAAG,SAAS,CAAA;CAC/C;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,yBAAyB,CAAA;IACpC,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAA;IAChB,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAA;IAChB,qFAAqF;IACrF,YAAY,EAAE,MAAM,OAAO,CAAA;IAC3B,+DAA+D;IAC/D,iBAAiB,EAAE,MAAM,OAAO,CAAC,6BAA6B,CAAC,CAAA;IAC/D,iFAAiF;IACjF,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED,mFAAmF;AACnF,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,YAAY;;IAEvB,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAA;gBAE5B,OAAO,EAAE,mBAAmB;IAexC,4FAA4F;IACtF,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;IAwCnE,sEAAsE;IAChE,MAAM,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAQ3C;;;OAGG;IACG,WAAW,IAAI,OAAO,CAAC,yBAAyB,CAAC;IA2BvD;;;;OAIG;IACG,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAqB5D,8EAA8E;IACxE,QAAQ,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAiB5C;;;;OAIG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAYlC;AAsCD,qFAAqF;AACrF,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,EAAE,CAqB7E;AAMD,MAAM,WAAW,qBAAqB;IACpC,oFAAoF;IACpF,KAAK,EAAE,MAAM,OAAO,CAAC,YAAY,CAAC,CAAA;IAClC,8FAA8F;IAC9F,QAAQ,CAAC,EAAE,MAAM,mBAAmB,GAAG,SAAS,CAAA;IAChD,+EAA+E;IAC/E,IAAI,CAAC,EAAE,kBAAkB,CAAA;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACtC;AAUD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,SAAS,oBAAoB,EAAE,EACvC,OAAO,EAAE,oBAAoB,GAC5B,MAAM,CAER;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpD;AA+BD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,qBAAqB,GAC7B,kBAAkB,CAmJpB"}

package/dist/vault-source.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Pi's custody request path. Each physical send takes its bearer and
+ * Antigravity project from one fresh vault receipt, so a revoked account or
+ * a moved project applies on the next send and a 401 is reported against the
+ * exact record version that was served. Nothing is cached or refreshed
+ * locally. Each send checks the vault mode file. Account discovery and
+ * changes use the vault source's enrollment checks, without reading Pi's
+ * saved Google login.
+ */
+import { type AntigravityVaultAccountSource, type CommonAuthClaustrumModule, type CommonAuthCommandsModule, type CommonAuthPiSlotModule } from '@cortexkit/antigravity-auth-core';
+import type { ClaustrumEnrollmentConnection, ClaustrumScopedClient } from '@cortexkit/antigravity-auth-core/common-auth/claustrum';
+import type { AntigravityVaultSend } from './stream.ts';
+import { type PiVaultAccountsPort, type PiVaultModeRead, type PiVaultModeRecord, PiVaultSetup } from './vault-setup.ts';
+/** The shared vault account source operations Pi's request path and setup use. */
+export type PiVaultAccountSource = Pick<AntigravityVaultAccountSource, 'refresh' | 'routes' | 'send' | 'decline' | 'accept'>;
+export declare class PiVaultSendError extends Error {
+    constructor(message: string);
+}
+export interface PiVaultRequestPathOptions {
+    /** Read this host's vault enrollment and account-source choice before each operation; never reuse an earlier request's state. */
+    readMode: () => PiVaultModeRead | Promise<PiVaultModeRead>;
+    /** The shared vault account source, created once on first use. */
+    source: () => Promise<PiVaultAccountSource>;
+}
+/** The send function the custody stream uses for every model request. */
+export declare function createPiVaultSend(options: PiVaultRequestPathOptions): AntigravityVaultSend;
+/** Vault accounts for the setup command, with declined ones marked. */
+export declare function createPiVaultAccountsPort(options: PiVaultRequestPathOptions): PiVaultAccountsPort;
+/**
+ * I/O seams of the vault composition. Pi's default entry passes none: the
+ * vault client connects through the connection file Claustrum publishes,
+ * Pi's auth slot is read from Pi's auth.json, and files live under Pi's
+ * vault directory. Tests replace only the client transport and file paths.
+ */
+export interface PiVaultSeams {
+    connect?: () => Promise<ClaustrumScopedClient>;
+    connectEnrollment?: () => Promise<ClaustrumEnrollmentConnection>;
+    readHostSlot?: () => unknown;
+    nativeAuthPath?: string;
+    nativeStashPath?: string;
+    loadPiSlot?: () => Promise<CommonAuthPiSlotModule>;
+    vaultDir?: string;
+    modeFile?: string;
+    rosterFile?: string;
+    loadClaustrum?: () => Promise<CommonAuthClaustrumModule>;
+    /** Commands library loader for the menu (tests capture the renderer call). */
+    loadCommands?: () => Promise<CommonAuthCommandsModule>;
+}
+export interface PiVaultRuntime {
+    readMode(): PiVaultModeRead;
+    readonly requestPath: PiVaultRequestPathOptions;
+    setup(): Promise<PiVaultSetup>;
+}
+/**
+ * Build Pi's vault composition. Nothing is loaded or connected here; the
+ * vault library and the shared account source are created on the first
+ * custody send or setup action.
+ */
+export declare function createPiVaultRuntime(readHostSlot: () => unknown, seams?: PiVaultSeams, onModeChanged?: (record: PiVaultModeRecord) => void | Promise<void>): PiVaultRuntime;
+//# sourceMappingURL=vault-source.d.ts.map

package/dist/vault-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-source.d.ts","sourceRoot":"","sources":["../src/vault-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EACL,KAAK,6BAA6B,EAClC,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAK5B,MAAM,kCAAkC,CAAA;AACzC,OAAO,KAAK,EACV,6BAA6B,EAC7B,qBAAqB,EACtB,MAAM,wDAAwD,CAAA;AAO/D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EAIL,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,YAAY,EAEb,MAAM,kBAAkB,CAAA;AAEzB,kFAAkF;AAClF,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACrC,6BAA6B,EAC7B,SAAS,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,CACrD,CAAA;AAID,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,yBAAyB;IACxC,iIAAiI;IACjI,QAAQ,EAAE,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IAC1D,kEAAkE;IAClE,MAAM,EAAE,MAAM,OAAO,CAAC,oBAAoB,CAAC,CAAA;CAC5C;AAgDD,yEAAyE;AACzE,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,yBAAyB,GACjC,oBAAoB,CAgBtB;AAED,uEAAuE;AACvE,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,yBAAyB,GACjC,mBAAmB,CAuDrB;AAMD;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,qBAAqB,CAAC,CAAA;IAC9C,iBAAiB,CAAC,EAAE,MAAM,OAAO,CAAC,6BAA6B,CAAC,CAAA;IAChE,YAAY,CAAC,EAAE,MAAM,OAAO,CAAA;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,sBAAsB,CAAC,CAAA;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,yBAAyB,CAAC,CAAA;IACxD,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,wBAAwB,CAAC,CAAA;CACvD;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,IAAI,eAAe,CAAA;IAC3B,QAAQ,CAAC,WAAW,EAAE,yBAAyB,CAAA;IAC/C,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC,CAAA;CAC/B;AAoBD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,YAAY,EAAE,MAAM,OAAO,EAC3B,KAAK,GAAE,YAAiB,EACxB,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAClE,cAAc,CAkFhB"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cortexkit/pi-antigravity-auth",
-  "version": "2.2.1",
-  "description": "Google Antigravity OAuth extension for pi - access Gemini 3 and Claude 4.6 using Google credentials",
+  "version": "3.0.1",
+  "description": "Google Antigravity OAuth extension for pi - access Gemini and Claude models using Google credentials",
   "type": "module",
   "license": "MIT",
   "author": "CortexKit",
@@ -37,13 +37,14 @@
     ]
   },
   "scripts": {
-    "build": "rm -rf dist && tsc -p tsconfig.build.json --emitDeclarationOnly && esbuild src/index.ts --bundle --platform=node --format=esm --external:@earendil-works/* --external:@cortexkit/antigravity-auth-core --outfile=dist/index.js --sourcemap",
+    "build": "rm -rf dist && tsc -p tsconfig.build.json --emitDeclarationOnly && esbuild src/index.ts --bundle --platform=node --format=esm --external:@earendil-works/* --external:@cortexkit/antigravity-auth-core --external:@cortexkit/claustrum-client --outfile=dist/index.js --sourcemap",
     "typecheck": "tsc --noEmit",
     "test": "bun test --isolate ./src",
     "prepublishOnly": "bun run build"
   },
   "dependencies": {
-    "@cortexkit/antigravity-auth-core": "2.2.1"
+    "@cortexkit/antigravity-auth-core": "3.0.1",
+    "@cortexkit/claustrum-client": "0.6.2"
   },
   "peerDependencies": {
     "@earendil-works/pi-ai": "*",
@@ -51,9 +52,9 @@
     "@earendil-works/pi-tui": "*"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "^0.79.1",
-    "@earendil-works/pi-coding-agent": "^0.79.1",
-    "@earendil-works/pi-tui": "^0.79.1",
+    "@earendil-works/pi-ai": "^0.87.1",
+    "@earendil-works/pi-coding-agent": "^0.87.1",
+    "@earendil-works/pi-tui": "^0.87.1",
     "esbuild": "^0.27.7"
   }
 }