@gravity-rail/cli 0.13.0 → 0.14.0

package/dist/{cli-client-context-C5l8lg7h.d.ts → cli-client-context-D81-ym1X.d.ts}

@@ -37,6 +37,16 @@ declare const DEFAULT_PROFILE = "default";
  * Dev profiles imported from dev-realms.json are token-only (accessToken +
  * optional workspaceUuid) — no OAuth client registration.
  */
+/**
+ * A cached org-scoped SSO session (`gr_sess_...`) obtained via browser step-up.
+ * Replayed as the `X-Org-Session` header so subsequent invocations skip the
+ * browser until the session expires (GRA-6995).
+ */
+interface StoredOrgSession {
+    session: string;
+    /** ISO expiry; treated as a cache miss once passed. */
+    expiresAt?: string;
+}
 interface CLICredentials {
     clientId?: string;
     clientSecret?: string;
@@ -45,6 +55,11 @@ interface CLICredentials {
     expiresAt?: string;
     /** Default workspace UUID (workspace/member profiles from dev-realms). */
     workspaceUuid?: string;
+    /**
+     * Cached org-scoped SSO sessions keyed by organization UUID. Populated by the
+     * org-auth step-up handler; independent of the account token's own expiry.
+     */
+    orgSessions?: Record<string, StoredOrgSession>;
 }
 interface ProfileSummary {
     name: string;
@@ -110,6 +125,18 @@ declare class CredentialsManager {
      * Pass a profile name to clear a specific account without touching others.
      */
     clear(env: string, profile?: string): void;
+    /**
+     * Read a cached org-scoped SSO session for an org, if present and unexpired.
+     * Independent of the account token's expiry — a valid org session is reusable
+     * even while the account token is being refreshed.
+     */
+    getOrgSession(env: string, profile: string | undefined, orgUuid: string): string | undefined;
+    /**
+     * Cache an org-scoped SSO session under an existing profile, keyed by org UUID.
+     * No-op when the profile does not exist — org sessions only attach to a
+     * logged-in account profile (never create a token-less profile row).
+     */
+    setOrgSession(env: string, profile: string | undefined, orgUuid: string, session: string, expiresAt?: string): void;
     getCacheDir(): string;
     /** Absolute path of the credentials file for `env` (for docs / `auth list`). */
     getCredentialsFilePath(env: string): string;

package/dist/cli-utils.d.ts

@@ -1,5 +1,5 @@
-import { a as CLICredentials, E as EnvironmentConfig, C as CredentialsManager, b as ConciergeAppContextPayload } from './cli-client-context-C5l8lg7h.js';
-export { d as CALLBACK_PATH, e as CALLBACK_PORT, D as DEFAULT_PROFILE, f as ENVIRONMENTS, P as ProfileSummary, R as REDIRECT_URI, g as getEnvironmentConfig } from './cli-client-context-C5l8lg7h.js';
+import { a as CLICredentials, E as EnvironmentConfig, C as CredentialsManager, b as ConciergeAppContextPayload } from './cli-client-context-D81-ym1X.js';
+export { d as CALLBACK_PATH, e as CALLBACK_PORT, D as DEFAULT_PROFILE, f as ENVIRONMENTS, P as ProfileSummary, R as REDIRECT_URI, g as getEnvironmentConfig } from './cli-client-context-D81-ym1X.js';
 
 /**
  * CLI OAuth2 authentication utilities
@@ -170,7 +170,34 @@ declare class AGUIClient {
      */
     streamRequest(request: AguiRequestBody, onEvent: (event: AGUIEvent) => void, options?: AguiStreamOptions): Promise<void>;
     private postStream;
+    /**
+     * Subscribe to the chat's persistent AG-UI event feed and surface
+     * server-initiated turns that arrive while we're idle between our own turns.
+     *
+     * The feed at ``/chats/{chatId}/events`` replays every AG-UI event for the
+     * chat across all turns (assistant events plus user-message echoes). It never
+     * self-terminates — it ends only on disconnect. On reconnect we send
+     * ``Last-Event-ID`` so the server replays the gap. The loop reconnects with
+     * capped exponential backoff and resolves quietly once ``signal`` aborts;
+     * it never throws except when required args are missing (callers gate on
+     * availability, so that path is a programming error).
+     */
+    subscribeToFeed(opts: {
+        onEvent: (event: AGUIEvent) => void;
+        signal: AbortSignal;
+        onDebug?: (msg: string) => void;
+    }): Promise<void>;
 }
+/**
+ * Parse a Server-Sent Events stream body into AG-UI events.
+ *
+ * Shared by ``AGUIClient.postStream`` (per-turn POST) and ``subscribeToFeed``
+ * (persistent GET feed). Surfaces ``data:`` frames as parsed events, ``id:``
+ * frames via ``onId`` (feed reconnect uses the last id as ``Last-Event-ID``),
+ * and ignores SSE comment frames (``: turn-done``, keepalives). ``onId`` is
+ * optional — the POST path has no use for entry ids.
+ */
+declare function parseSseStream(body: ReadableStream<Uint8Array>, onEvent: (event: AGUIEvent, eventName?: string) => void, onId?: (id: string) => void): Promise<void>;
 interface AguiStreamOptions {
     autoApprove?: boolean;
 }
@@ -200,4 +227,4 @@ declare function getTextDelta(event: AGUIEvent): string | null;
  */
 declare function getErrorMessage(event: AGUIEvent): string | null;
 
-export { type ChatMessage as AGUIChatMessage, AGUIClient, type AGUIClientOptions, type AGUIEvent, type AGUIEventType, type AuthResult, CLICredentials, CredentialsManager, EnvironmentConfig, type OAuthFlowOptions, type SelectFromListOptions, type SelectResult, clearScreen, formatTimestamp, generatePKCE, getErrorMessage, getTextDelta, isErrorEvent, isTextContentEvent, openBrowser, performOAuthFlow, printMessage, printTable, refreshAccessToken, selectFromList, startCallbackServer, wrapText };
+export { type ChatMessage as AGUIChatMessage, AGUIClient, type AGUIClientOptions, type AGUIEvent, type AGUIEventType, type AuthResult, CLICredentials, CredentialsManager, EnvironmentConfig, type OAuthFlowOptions, type SelectFromListOptions, type SelectResult, clearScreen, formatTimestamp, generatePKCE, getErrorMessage, getTextDelta, isErrorEvent, isTextContentEvent, openBrowser, parseSseStream, performOAuthFlow, printMessage, printTable, refreshAccessToken, selectFromList, startCallbackServer, wrapText };

package/dist/cli-utils.js

@@ -15,6 +15,7 @@ import {
   isErrorEvent,
   isTextContentEvent,
   openBrowser,
+  parseSseStream,
   performOAuthFlow,
   printMessage,
   printTable,
@@ -22,7 +23,7 @@ import {
   selectFromList,
   startCallbackServer,
   wrapText
-} from "./chunk-SIV2WU2I.js";
+} from "./chunk-PODEUTUQ.js";
 export {
   AGUIClient,
   CALLBACK_PATH,
@@ -40,6 +41,7 @@ export {
   isErrorEvent,
   isTextContentEvent,
   openBrowser,
+  parseSseStream,
   performOAuthFlow,
   printMessage,
   printTable,

package/dist/{errors-YHGVIDPO.js → errors-CFRLSAGA.js}

@@ -2,10 +2,10 @@ import {
   AuthRequiredError,
   CLIError,
   handleError
-} from "./chunk-WZVMWN3S.js";
+} from "./chunk-3T7A5PSF.js";
 export {
   AuthRequiredError,
   CLIError,
   handleError
 };
-//# sourceMappingURL=errors-YHGVIDPO.js.map
+//# sourceMappingURL=errors-CFRLSAGA.js.map