@kenkaiiii/ggcoder 5.74.3 → 5.75.1

package/dist/app-sidecar/auth-routes.js

@@ -0,0 +1,290 @@
+import { XIAOMI_CREDITS_KEY, dualAuthProvider } from "@kenkaiiii/gg-core";
+import { loginAnthropic } from "../core/oauth/anthropic.js";
+import { loginOpenAI } from "../core/oauth/openai.js";
+import { loginGemini } from "../core/oauth/gemini.js";
+import { loginKimi } from "../core/oauth/kimi.js";
+import { loginXai } from "../core/oauth/xai.js";
+import { AUTH_PROVIDERS } from "../core/auth-providers.js";
+import { readBody, json } from "./http.js";
+export function handleAuthRoutes(ctx, req, res, url, method) {
+    // ── Provider auth (login) ───────────────────────────────
+    if (method === "GET" && url === "/auth/status") {
+        void ctx.authStatusPayload().then((payload) => json(res, 200, payload));
+        return true;
+    }
+    if (method === "POST" && url === "/auth/apikey") {
+        void readBody(req, res).then(async (raw) => {
+            if (raw === null)
+                return;
+            let provider = "";
+            let key;
+            let variant;
+            try {
+                const body = JSON.parse(raw);
+                provider = body.provider ?? "";
+                key = (body.key ?? "").trim();
+                variant = body.variant;
+            }
+            catch {
+                json(res, 400, { error: "invalid JSON body" });
+                return;
+            }
+            const meta = AUTH_PROVIDERS.find((p) => p.value === provider);
+            if (!meta || !meta.methods.includes("apikey")) {
+                json(res, 400, { error: "provider does not support API key auth" });
+                return;
+            }
+            if (!key) {
+                json(res, 400, { error: "API key is required" });
+                return;
+            }
+            // Providers with multiple API-key variants (currently only Xiaomi: Token
+            // Plan vs. API Credits) store under the chosen variant's key/baseUrl,
+            // defaulting to the first variant. Single-variant providers fall back to
+            // the legacy provider-id storage key + flat apiKeyBaseUrl.
+            const chosenVariant = meta.apiKeyVariants?.find((v) => v.key === variant) ?? meta.apiKeyVariants?.[0];
+            const storageKey = chosenVariant?.key ?? provider;
+            const baseUrl = chosenVariant?.baseUrl ?? meta.apiKeyBaseUrl;
+            const creds = {
+                accessToken: key,
+                refreshToken: "",
+                expiresAt: Date.now() + 365 * 24 * 60 * 60 * 1000 * 100, // ~100y
+                ...(baseUrl ? { baseUrl } : {}),
+            };
+            await ctx.auth.setCredentials(storageKey, creds);
+            // auth.json is shared by every window, so this is a global change:
+            // close their login modals and refresh their provider lists too.
+            ctx.broadcastAll("auth_done", { provider });
+            // `auth_done` means "a login succeeded" (modals close on it).
+            // `auth_change` means "auth.json changed" — which a DISCONNECT also is,
+            // so connection state has one signal that covers both directions.
+            ctx.broadcastAll("auth_change", { provider });
+            // A newly connected provider unlocks its models. `/models` filters on
+            // who is logged in, so every window's picker is now stale — without
+            // this the new models don't appear until the session is reopened.
+            ctx.broadcastAll("models_change", {});
+            json(res, 200, { ok: true });
+        });
+        return true;
+    }
+    if (method === "POST" && url === "/auth/oauth/start") {
+        void readBody(req, res).then((raw) => {
+            if (raw === null)
+                return;
+            let provider = "";
+            try {
+                provider = JSON.parse(raw).provider ?? "";
+            }
+            catch {
+                json(res, 400, { error: "invalid JSON body" });
+                return;
+            }
+            const meta = AUTH_PROVIDERS.find((p) => p.value === provider);
+            if (!meta || !meta.methods.includes("oauth")) {
+                json(res, 400, { error: "provider does not support OAuth" });
+                return;
+            }
+            if (ctx.oauthInFlight) {
+                json(res, 409, { error: "a login is already in progress" });
+                return;
+            }
+            // A login writes the shared ~/.gg/auth.json, so two windows racing the
+            // same provider means two browser tabs and two token exchanges whose
+            // writes clobber each other. The per-session flag above cannot see
+            // that — guard the provider daemon-wide as well.
+            if (ctx.oauthInFlightProviders.has(provider)) {
+                json(res, 409, {
+                    error: `a ${meta.label} login is already in progress in another window`,
+                });
+                return;
+            }
+            ctx.oauthInFlight = true;
+            ctx.oauthInFlightProviders.add(provider);
+            json(res, 202, { accepted: true });
+            void (async () => {
+                const cb = ctx.authCallbacks();
+                try {
+                    let creds;
+                    let storageKey = provider;
+                    if (provider === "anthropic")
+                        creds = await loginAnthropic(cb);
+                    else if (provider === "openai")
+                        creds = await loginOpenAI(cb);
+                    else if (provider === "gemini")
+                        creds = await loginGemini(cb);
+                    else if (provider === "moonshot" || provider === "xai") {
+                        // Subscription OAuth (Kimi plan / SuperGrok-X Premium) stores under
+                        // a distinct key so it can coexist with the provider's API key.
+                        creds = provider === "moonshot" ? await loginKimi(cb) : await loginXai(cb);
+                        storageKey = dualAuthProvider(provider).oauthKey;
+                    }
+                    else {
+                        throw new Error(`OAuth not implemented for ${provider}`);
+                    }
+                    await ctx.auth.setCredentials(storageKey, creds);
+                    // Terminal outcome of a GLOBAL change: every window's login modal
+                    // should close and its provider list refresh, not just the one
+                    // that started the flow.
+                    ctx.broadcastAll("auth_done", { provider });
+                    ctx.broadcastAll("auth_change", { provider });
+                    // The OAuth provider's models just became selectable everywhere.
+                    ctx.broadcastAll("models_change", {});
+                }
+                catch (err) {
+                    // Deliberately session-scoped: this is the outcome of ONE window's
+                    // attempt. Another window that never pressed Connect has nothing to
+                    // show an error about, and its modal correctly still offers login.
+                    ctx.broadcast("auth_error", {
+                        provider,
+                        message: err instanceof Error ? err.message : String(err),
+                    });
+                }
+                finally {
+                    ctx.oauthInFlight = false;
+                    ctx.oauthInFlightProviders.delete(provider);
+                    ctx.pendingCode = null;
+                }
+            })();
+        });
+        return true;
+    }
+    if (method === "POST" && url === "/auth/oauth/code") {
+        void readBody(req, res).then((raw) => {
+            if (raw === null)
+                return;
+            let code;
+            try {
+                code = JSON.parse(raw).code ?? "";
+            }
+            catch {
+                json(res, 400, { error: "invalid JSON body" });
+                return;
+            }
+            if (!ctx.pendingCode) {
+                json(res, 409, { error: "no login is awaiting a code" });
+                return;
+            }
+            ctx.pendingCode(code.trim());
+            ctx.pendingCode = null;
+            json(res, 200, { ok: true });
+        });
+        return true;
+    }
+    if (method === "POST" && url.startsWith("/mcp/elicit/")) {
+        const id = decodeURIComponent(url.slice("/mcp/elicit/".length));
+        void readBody(req, res).then((raw) => {
+            if (raw === null)
+                return;
+            let result;
+            try {
+                const parsed = JSON.parse(raw);
+                if (parsed.action !== "accept" &&
+                    parsed.action !== "decline" &&
+                    parsed.action !== "cancel") {
+                    json(res, 400, { error: "action must be accept, decline, or cancel" });
+                    return;
+                }
+                result =
+                    parsed.action === "accept"
+                        ? { action: "accept", content: parsed.content ?? {} }
+                        : { action: parsed.action };
+            }
+            catch {
+                json(res, 400, { error: "invalid JSON body" });
+                return;
+            }
+            // Unknown id means it already timed out or was cancelled by an abort —
+            // the tool call has moved on, so the answer has nowhere to go.
+            if (!ctx.elicitations.settle(id, result)) {
+                json(res, 409, { error: "no elicitation is awaiting a response" });
+                return;
+            }
+            json(res, 200, { ok: true });
+        });
+        return true;
+    }
+    // Answer (or dismiss) an `ask_user` question band. The turn is blocked on
+    // this, so both paths must land: "answer" carries the picked values,
+    // "cancel" releases the tool call with no answer.
+    if (method === "POST" && url.startsWith("/ask/")) {
+        const id = decodeURIComponent(url.slice("/ask/".length));
+        void readBody(req, res).then((raw) => {
+            if (raw === null)
+                return;
+            let result;
+            try {
+                const parsed = JSON.parse(raw);
+                if (parsed.action !== "answer" && parsed.action !== "cancel") {
+                    json(res, 400, { error: "action must be answer or cancel" });
+                    return;
+                }
+                if (parsed.action === "cancel") {
+                    result = { action: "cancel" };
+                }
+                else {
+                    // Only strings and string arrays are answers; anything else is a
+                    // malformed client, not a value to hand the model.
+                    const answers = {};
+                    for (const [key, value] of Object.entries(parsed.answers ?? {})) {
+                        if (typeof value === "string")
+                            answers[key] = value;
+                        else if (Array.isArray(value) && value.every((v) => typeof v === "string")) {
+                            answers[key] = value;
+                        }
+                    }
+                    result = { action: "answer", answers };
+                }
+            }
+            catch {
+                json(res, 400, { error: "invalid JSON body" });
+                return;
+            }
+            if (!ctx.asks.settle(id, result)) {
+                json(res, 409, { error: "no question is awaiting an answer" });
+                return;
+            }
+            json(res, 200, { ok: true });
+        });
+        return true;
+    }
+    if (method === "POST" && url === "/auth/logout") {
+        void readBody(req, res).then(async (raw) => {
+            if (raw === null)
+                return;
+            let provider;
+            let logoutMethod;
+            try {
+                const body = JSON.parse(raw);
+                provider = body.provider ?? "";
+                logoutMethod =
+                    body.method === "oauth" || body.method === "apikey" ? body.method : undefined;
+            }
+            catch {
+                json(res, 400, { error: "invalid JSON body" });
+                return;
+            }
+            const dual = dualAuthProvider(provider);
+            // A dual-auth provider can be disconnected one method at a time: dropping
+            // a spent API key should not sign the user out of their subscription, and
+            // vice versa. Omitting `method` still clears everything (the plain
+            // "Disconnect" action).
+            if (logoutMethod !== "apikey") {
+                await ctx.auth.clearCredentials(dual ? dual.oauthKey : provider);
+            }
+            if (logoutMethod !== "oauth") {
+                // Non-dual providers store their only credential under the provider id,
+                // so this covers both them and a dual provider's API key.
+                await ctx.auth.clearCredentials(provider);
+                // Xiaomi's API Credits credential lives under a distinct key — clear it
+                // too so "disconnect" fully removes both the Token Plan and Credits keys.
+                if (provider === "xiaomi")
+                    await ctx.auth.clearCredentials(XIAOMI_CREDITS_KEY);
+            }
+            ctx.broadcast("auth_done", { provider });
+            json(res, 200, { ok: true });
+        });
+        return true;
+    }
+    return false;
+}
+//# sourceMappingURL=auth-routes.js.map

package/dist/app-sidecar/auth-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-routes.js","sourceRoot":"","sources":["../../src/app-sidecar/auth-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAmB,MAAM,2BAA2B,CAAC;AAG5E,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAG3C,MAAM,UAAU,gBAAgB,CAC9B,GAAwB,EACxB,GAAyB,EACzB,GAAwB,EACxB,GAAW,EACX,MAAc;IAEd,2DAA2D;IAC3D,IAAI,MAAM,KAAK,KAAK,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;QAC/C,KAAK,GAAG,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;QAChD,KAAK,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACzC,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO;YACzB,IAAI,QAAQ,GAAG,EAAE,CAAC;YAClB,IAAI,GAAW,CAAC;YAChB,IAAI,OAA2B,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0D,CAAC;gBACtF,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;gBAC/B,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC9B,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;YAC9D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YACD,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,yEAAyE;YACzE,sEAAsE;YACtE,yEAAyE;YACzE,2DAA2D;YAC3D,MAAM,aAAa,GACjB,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;YAClF,MAAM,UAAU,GAAG,aAAa,EAAE,GAAG,IAAI,QAAQ,CAAC;YAClD,MAAM,OAAO,GAAG,aAAa,EAAE,OAAO,IAAI,IAAI,CAAC,aAAa,CAAC;YAC7D,MAAM,KAAK,GAAqB;gBAC9B,WAAW,EAAE,GAAG;gBAChB,YAAY,EAAE,EAAE;gBAChB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,GAAG,GAAG,EAAE,QAAQ;gBACjE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChC,CAAC;YACF,MAAM,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACjD,mEAAmE;YACnE,iEAAiE;YACjE,GAAG,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC5C,8DAA8D;YAC9D,wEAAwE;YACxE,kEAAkE;YAClE,GAAG,CAAC,YAAY,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9C,sEAAsE;YACtE,oEAAoE;YACpE,kEAAkE;YAClE,GAAG,CAAC,YAAY,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;YACtC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,mBAAmB,EAAE,CAAC;QACrD,KAAK,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YACnC,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO;YACzB,IAAI,QAAQ,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,QAAQ,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAC,QAAQ,IAAI,EAAE,CAAC;YACvE,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC;YAC9D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAC;gBAC7D,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;gBACtB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YACD,uEAAuE;YACvE,qEAAqE;YACrE,mEAAmE;YACnE,iDAAiD;YACjD,IAAI,GAAG,CAAC,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;oBACb,KAAK,EAAE,KAAK,IAAI,CAAC,KAAK,iDAAiD;iBACxE,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC;YACzB,GAAG,CAAC,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACnC,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,MAAM,EAAE,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACH,IAAI,KAAuB,CAAC;oBAC5B,IAAI,UAAU,GAAG,QAAQ,CAAC;oBAC1B,IAAI,QAAQ,KAAK,WAAW;wBAAE,KAAK,GAAG,MAAM,cAAc,CAAC,EAAE,CAAC,CAAC;yBAC1D,IAAI,QAAQ,KAAK,QAAQ;wBAAE,KAAK,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,CAAC;yBACzD,IAAI,QAAQ,KAAK,QAAQ;wBAAE,KAAK,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,CAAC;yBACzD,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;wBACvD,oEAAoE;wBACpE,gEAAgE;wBAChE,KAAK,GAAG,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,EAAE,CAAC,CAAC;wBAC3E,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAE,CAAC,QAAQ,CAAC;oBACpD,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC;oBAC3D,CAAC;oBACD,MAAM,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;oBACjD,kEAAkE;oBAClE,+DAA+D;oBAC/D,yBAAyB;oBACzB,GAAG,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;oBAC5C,GAAG,CAAC,YAAY,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;oBAC9C,iEAAiE;oBACjE,GAAG,CAAC,YAAY,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;gBACxC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,mEAAmE;oBACnE,oEAAoE;oBACpE,mEAAmE;oBACnE,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE;wBAC1B,QAAQ;wBACR,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBAC1D,CAAC,CAAC;gBACL,CAAC;wBAAS,CAAC;oBACT,GAAG,CAAC,aAAa,GAAG,KAAK,CAAC;oBAC1B,GAAG,CAAC,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC5C,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC;gBACzB,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,kBAAkB,EAAE,CAAC;QACpD,KAAK,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YACnC,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO;YACzB,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC,IAAI,IAAI,EAAE,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;gBACzD,OAAO;YACT,CAAC;YACD,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7B,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACxD,MAAM,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;QAChE,KAAK,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YACnC,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO;YACzB,IAAI,MAAoB,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAG5B,CAAC;gBACF,IACE,MAAM,CAAC,MAAM,KAAK,QAAQ;oBAC1B,MAAM,CAAC,MAAM,KAAK,SAAS;oBAC3B,MAAM,CAAC,MAAM,KAAK,QAAQ,EAC1B,CAAC;oBACD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC,CAAC;oBACvE,OAAO;gBACT,CAAC;gBACD,MAAM;oBACJ,MAAM,CAAC,MAAM,KAAK,QAAQ;wBACxB,CAAC,CAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,EAAmB;wBACvE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,uEAAuE;YACvE,+DAA+D;YAC/D,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;gBACzC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC,CAAC;gBACnE,OAAO;YACT,CAAC;YACD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0EAA0E;IAC1E,qEAAqE;IACrE,kDAAkD;IAClD,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,MAAM,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,KAAK,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YACnC,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO;YACzB,IAAI,MAAqB,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAG5B,CAAC;gBACF,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC7D,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAC;oBAC7D,OAAO;gBACT,CAAC;gBACD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC/B,MAAM,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;gBAChC,CAAC;qBAAM,CAAC;oBACN,iEAAiE;oBACjE,mDAAmD;oBACnD,MAAM,OAAO,GAAsC,EAAE,CAAC;oBACtD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;wBAChE,IAAI,OAAO,KAAK,KAAK,QAAQ;4BAAE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;6BAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;4BAC3E,OAAO,CAAC,GAAG,CAAC,GAAG,KAAiB,CAAC;wBACnC,CAAC;oBACH,CAAC;oBACD,MAAM,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;gBACzC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;QAChD,KAAK,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACzC,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO;YACzB,IAAI,QAAgB,CAAC;YACrB,IAAI,YAAoC,CAAC;YACzC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2C,CAAC;gBACvE,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;gBAC/B,YAAY;oBACV,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YACxC,0EAA0E;YAC1E,0EAA0E;YAC1E,mEAAmE;YACnE,wBAAwB;YACxB,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;gBAC7B,wEAAwE;gBACxE,0DAA0D;gBAC1D,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBAC1C,wEAAwE;gBACxE,0EAA0E;gBAC1E,IAAI,QAAQ,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;YACjF,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/app-sidecar/autopilot-runner.d.ts

@@ -0,0 +1,61 @@
+import type { Provider } from "@kenkaiiii/gg-ai";
+import type { AgentSession } from "../core/agent-session.js";
+import type { RunLifecycle } from "../core/run-lifecycle.js";
+import { type AutopilotVerdict } from "../core/autopilot-verdict.js";
+import { type WorkflowCommandSpec } from "../core/autopilot-gate.js";
+import type { RunOutcome } from "../core/session-manager.js";
+/** Closure state of one session that the autopilot / stranded-queue / task runners use. */
+export interface AutopilotRunnerContext {
+    autopilotReviewing: boolean;
+    readonly broadcast: (type: string, data: unknown) => void;
+    readonly ensureKenAutoSession: () => Promise<AgentSession>;
+    readonly cwd: string;
+    gitBranch: string | null;
+    session: AgentSession;
+    injectedAutopilotPrompts: string[];
+    readonly loadWorkflowCommandSpecs: () => Promise<WorkflowCommandSpec[]>;
+    autopilotCancelled: boolean;
+    readonly broadcastError: (type: "error" | "ken_error" | "autopilot_error", logLabel: string, err: unknown) => void;
+    pendingKenAutoModel: {
+        provider: Provider;
+        model: string;
+    } | null;
+    readonly syncKenAutoModel: (provider: Provider, model: string) => Promise<void>;
+    pendingPlanPath: string | null;
+    planGeneration: number;
+    pendingPlanContent: string;
+    autopilot: boolean;
+    readonly runLifecycle: RunLifecycle;
+    readonly abortOwnedWork: () => void;
+    pendingCancelDrain: {
+        generation: number;
+        text: string;
+    } | null;
+    autopilotActive: boolean;
+    readonly MAX_AUTOPILOT_ROUNDS: number;
+    readonly activateApprovedPlan: (planPath: string | undefined) => Promise<number>;
+    readonly clearPendingPlan: () => void;
+    readonly planProgressPayload: () => {
+        total: number;
+        completed: number[];
+    };
+    readonly IMPLEMENT_PLAN_PROMPT: string;
+    readonly runAgent: (label: string, run: () => Promise<void>, reviewPending?: () => boolean) => Promise<void>;
+    kenAutoSession: AgentSession | null;
+    readonly reenterPlanModeForRevision: () => Promise<void>;
+    readonly finishOwnedGeneration: (generation: number, emitCancelledFallback: boolean, outcome?: RunOutcome) => boolean;
+    drainingStrandedQueue: boolean;
+    running: boolean;
+    readonly offerPendingPlan: () => void;
+    readonly deactivateApprovedPlan: () => void;
+    taskRunAll: boolean;
+}
+export interface AutopilotRunnerContextApi {
+    runAutopilotReview: (originalRequest: string) => Promise<AutopilotVerdict | null>;
+    runAutopilotPlanReview: (originalRequest: string) => Promise<AutopilotVerdict | null>;
+    runAutopilotCycle: (originalRequest: string) => Promise<void>;
+    runStrandedQueue: () => Promise<void>;
+    runTaskById: (taskId: string) => Promise<boolean>;
+    runTasks: (startId: string | null, all: boolean) => Promise<void>;
+}
+export declare function createAutopilotRunner(ctx: AutopilotRunnerContext): AutopilotRunnerContextApi;