@modelprofile.com/authswitch 2.2.0 → 3.0.0

package/ts/interfaces.harness.ts

@@ -12,6 +12,64 @@ export interface IHarnessLoginHandle {
   close(): Promise<void>;
 }
 
+/** One running instance of a harness binary, owned by the current user. */
+export interface IHarnessProcess {
+  pid: number;
+  /** Executable name as the platform reports it, without a path. */
+  command: string;
+  /** Bounded command line, for identifying which instance this is. Never parsed for identity. */
+  commandLine: string;
+  /** Start time, which distinguishes a reused pid from the process we enumerated. */
+  startedAt: string | null;
+  /** An ancestor of the running authswitch command: stopping it would kill this command. */
+  isAncestor: boolean;
+}
+
+export interface IHarnessStopOutcome {
+  /** Instances that exited within the bounded wait. */
+  stopped: IHarnessProcess[];
+  /** Instances that were still running when the wait elapsed. */
+  survivors: IHarnessProcess[];
+  /** Instances that were re-verified and then killed, only ever with an explicit force request. */
+  forced: IHarnessProcess[];
+}
+
+/**
+ * Enumerating and stopping a harness's own running instances.
+ *
+ * Only pids this control enumerated for the current user are ever signalled, and a stop is graceful
+ * unless the caller explicitly forces it. Adapters whose process lifecycle belongs to another
+ * manager (Codex' app-server daemon) expose no control at all.
+ */
+export interface IHarnessProcessControl {
+  readonly binary: string;
+  /** Why enumerated instances cannot be signalled on this platform; null when they can. */
+  readonly stopUnavailableReason: string | null;
+  list(): IHarnessProcess[];
+  stop(processesArg: readonly IHarnessProcess[], optionsArg?: { force?: boolean; timeoutMs?: number }): Promise<IHarnessStopOutcome>;
+}
+
+/**
+ * A live credential that no longer holds the account the last switch activated.
+ *
+ * Authswitch records the hash of what it wrote, in its own store. A different hash with the same
+ * account is that account's own token refresh; a different account is what a running instance
+ * writing its in-memory login back looks like.
+ */
+export interface IHarnessCredentialDrift {
+  slotId?: string;
+  /** The account the recorded switch activated. */
+  expectedAccountId: string;
+  /** Its saved label, or null when that account is no longer saved. */
+  expectedLabel: string | null;
+  /** The account the credential file holds now, or null when the slot has no active login. */
+  currentAccountId: string | null;
+  currentLabel: string | null;
+  /** Whether the current account has a saved copy of its own. */
+  currentIsSaved: boolean;
+  switchedAt: string;
+}
+
 /** Account IDs are opaque and scoped to one harness. Credentials never cross this interface. */
 export interface IHarnessAccount {
   id: string;
@@ -28,6 +86,8 @@ export interface IHarnessState {
   accounts: IHarnessAccount[];
   /** Explains why an active login cannot be saved, when applicable. */
   saveUnavailableReason: string | null;
+  /** Slots whose credential file no longer holds the account the last switch wrote. */
+  credentialDrift?: IHarnessCredentialDrift[];
 }
 
 export interface IHarnessAccountStatus {
@@ -97,6 +157,8 @@ export interface IAuthHarness {
   readonly loginHint: string;
   readonly diagnosticsLabel: string;
   readState(): THarnessResult<IHarnessState>;
+  /** Running instances of this harness, when the adapter owns their lifecycle. */
+  readonly processes?: IHarnessProcessControl;
   readAccountStatus(accountIdArg: string): Promise<IHarnessAccountStatus>;
   readonly loginProviders?: IHarnessLoginProvider[];
   beginLogin?(options: IHarnessLoginOptions): Promise<IHarnessLoginHandle>;

package/ts/interfaces.list.ts

@@ -1,4 +1,4 @@
-import type { IHarnessAccount, IHarnessAccountStatus } from './interfaces.harness.js';
+import type { IHarnessAccount, IHarnessAccountStatus, IHarnessCredentialDrift } from './interfaces.harness.js';
 
 /** Credential-free, versioned output of list --json. Missing status fields stay omitted. */
 export interface IAccountList {
@@ -14,6 +14,77 @@ export interface IHarnessAccountList {
   loginHint: string;
   saveUnavailableReason: string | null;
   accounts: (IHarnessAccount & { status: IHarnessAccountStatus })[];
+  /** Slots whose credential file no longer holds the account the last switch wrote. */
+  credentialDrift: IHarnessCredentialDrift[];
   /** A state lookup failure is distinct from an empty account list. */
   problems: string[];
 }
+
+/** Credential-free, versioned output of limits --json. One entry per account and limit type. */
+export interface IAccountLimits {
+  schemaVersion: 1;
+  generatedAt: string;
+  complete: boolean;
+  limits: IAccountLimitRow[];
+  /** Why a row has no numbers. Never a substitute for a value. */
+  notes: string[];
+}
+
+export interface IAccountLimitRow {
+  harnessId: string;
+  /** Harness label, qualified by the credential slot when the harness owns several. */
+  provider: string;
+  /** The account's public label, which is its email wherever the provider reports one. */
+  account: string | null;
+  accountId: string | null;
+  slotId?: string;
+  isActive: boolean;
+  /** The provider's own window name, or null when no limit data is available. */
+  limitType: string | null;
+  scope: 'account' | 'feature' | null;
+  windowSeconds: number | null;
+  /** Never inferred: null means the provider reported no percentage, not zero usage. */
+  usedPercent: number | null;
+  resetAt: string | null;
+  /** Human countdown for the same `resetAt`, relative to `generatedAt`. */
+  resetsIn: string;
+  unavailableReason: string | null;
+}
+
+/** Credential-free, versioned output of active --json. One entry per active credential slot. */
+export interface IActiveAccounts {
+  schemaVersion: 1;
+  generatedAt: string;
+  complete: boolean;
+  active: IActiveAccountRow[];
+  notes: string[];
+}
+
+export interface IActiveAccountRow {
+  harnessId: string;
+  provider: string;
+  account: string | null;
+  accountId: string | null;
+  slotId?: string;
+  /** When authswitch last saved this login; null when it was never stashed. */
+  savedAt: string | null;
+  /** Human elapsed time for the same `savedAt`, relative to `generatedAt`. */
+  savedAgo: string;
+  /** Where the shown account comes from. Whether it is also saved is the `savedAt` field's answer. */
+  source: 'credential file' | 'stash only' | 'none';
+  unavailableReason: string | null;
+  /** Set when the credential file no longer holds the account the last switch wrote. */
+  drift: IActiveAccountDrift | null;
+}
+
+/** A credential file that changed underneath a switch, with both accounts named where known. */
+export interface IActiveAccountDrift {
+  expectedAccountId: string;
+  expectedAccount: string | null;
+  currentAccountId: string | null;
+  currentAccount: string | null;
+  currentIsSaved: boolean;
+  switchedAt: string;
+  /** The sentence the table footnotes, for consumers that display one string. */
+  reason: string;
+}