@namzu/cli 8.2.0 → 8.3.0

package/dist/integrations/providers/subscription-login.d.ts

@@ -0,0 +1,123 @@
+/**
+ * Obtaining a subscription credential from inside namzu.
+ *
+ * namzu could already USE and REFRESH a plan-backed credential; it could not
+ * get one. The only way in was to install another product, sign in there, and
+ * let discovery borrow what that product had stored — which works on exactly
+ * one operating system and requires the other product. This is the missing
+ * half: an authorization-code exchange, run by namzu, that ends with a
+ * credential in namzu's own store (`credential-store.ts`).
+ *
+ * ## The flow
+ *
+ * Authorization code with PKCE (RFC 7636, S256), redirected to a loopback
+ * address (RFC 8252 §7.3). Two ways to finish, and BOTH are always offered:
+ *
+ *  1. **Loopback.** A one-request server on `127.0.0.1` at the port the
+ *     redirect is registered under. The browser lands on it and the code
+ *     never touches a screen.
+ *  2. **Paste.** The operator copies the code — or the whole redirect URL —
+ *     out of a browser and hands it back.
+ *
+ * The second is not a consolation prize. A container, a remote shell over
+ * SSH, a machine with no graphical session: none of them can be redirected
+ * to, and on all of them the loopback server is either unreachable from
+ * wherever the browser actually is or cannot bind at all. `start()` says
+ * which of the two it managed to arrange (`loopback`), and the paste path
+ * works whether or not it did.
+ *
+ * ## What never happens here
+ *
+ * No token is logged, printed, or put in an error. Failures name the status,
+ * the endpoint and the stage; they never carry the response body, because a
+ * token endpoint's body is where the token is. Nothing is written to the
+ * store until an exchange has fully succeeded, so an abandoned or rejected
+ * login leaves no partial credential behind.
+ */
+import type { DetectedProvider } from './discover.js';
+import type { AgentOAuthCredential } from './keychain.js';
+/** What a completed attempt produced. Never carries a secret in `reason`. */
+export type LoginOutcome = {
+    readonly ok: true;
+    /** The stored credential, so the caller can open a session without re-reading. */
+    readonly credential: AgentOAuthCredential;
+    /** Where it landed, so a surface can say so without guessing the path. */
+    readonly storedAt: string;
+} | {
+    readonly ok: false;
+    readonly reason: string;
+};
+export interface SubscriptionLogin {
+    /** The page to open. Safe to print — it carries a challenge, never a secret. */
+    readonly url: string;
+    readonly redirectUri: string;
+    /**
+     * Whether the loopback listener came up.
+     *
+     * `false` is not a failure: the port was busy, or the environment forbids
+     * listening. The paste path is unaffected, and a surface should say so
+     * rather than imply the login is broken.
+     */
+    readonly loopback: boolean;
+    /**
+     * Resolve when the browser reaches the loopback listener, or never.
+     *
+     * `null` when `loopback` is false, so a caller cannot await a promise that
+     * has no way to settle. Racing this against `completeWithPastedCode` is the
+     * intended use; whichever finishes first wins and `cancel()` releases the
+     * other.
+     */
+    waitForCallback(): Promise<LoginOutcome> | null;
+    /** Finish from a pasted redirect URL, `code#state`, or a bare code. */
+    completeWithPastedCode(input: string): Promise<LoginOutcome>;
+    /** Release the listener. Safe to call twice, and safe to call after success. */
+    cancel(): void;
+}
+export interface SubscriptionLoginOptions {
+    /** Override `homedir()` — tests, and an operator with a relocated home. */
+    readonly home?: string;
+    /** Override the token-exchange transport (tests inject a stub). */
+    readonly fetch?: typeof fetch;
+    /**
+     * Try to listen on the loopback redirect. Default true.
+     *
+     * A caller that knows there is no browser here — `--no-browser`, a
+     * container — passes false and skips a bind that would only ever time out.
+     */
+    readonly loopback?: boolean;
+}
+/**
+ * Begin a login. Returns the page to open plus the two ways to finish it.
+ *
+ * Deliberately does NOT open a browser. Which of `open`, `xdg-open` or a
+ * Windows protocol handler to spawn — and whether spawning anything is even
+ * appropriate — is a property of the surface the operator is sitting in front
+ * of, not of the protocol. A module that reached for a browser would be
+ * unusable from the one place that most needs it: a machine that has none.
+ */
+export declare function beginSubscriptionLogin(options?: SubscriptionLoginOptions): Promise<SubscriptionLogin>;
+/**
+ * The detected-provider record a completed sign-in produces.
+ *
+ * Shaped exactly like a discovered one — the same shape `discoverProviders`
+ * would return on the NEXT launch, having read the file this login just
+ * wrote — so every downstream path treats it identically and nothing has to
+ * learn that a session began with a login. It carries `origin: 'stored'`, so
+ * the between-turn refresh writes back to the file rather than to a Keychain
+ * this machine may not have.
+ */
+export declare function subscriptionDetectedProvider(credential: AgentOAuthCredential, storedAt: string): DetectedProvider;
+/**
+ * Pull a code (and a state, when there is one) out of whatever got pasted.
+ *
+ * Four spellings reach this in practice: the full redirect address, its query
+ * string alone, the `code#state` pair a consent screen offers for copying,
+ * and a bare code. Anything else yields no code and is refused by the caller
+ * — guessing at a fifth shape would send an arbitrary string to a token
+ * endpoint as if it were an authorization code.
+ */
+export declare function parsePastedInput(input: string): {
+    code?: string;
+    state?: string;
+};
+//# sourceMappingURL=subscription-login.d.ts.map

package/dist/integrations/providers/subscription-login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscription-login.d.ts","sourceRoot":"","sources":["../../../src/integrations/providers/subscription-login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAMH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AASrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAGzD,6EAA6E;AAC7E,MAAM,MAAM,YAAY,GACrB;IACA,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,kFAAkF;IAClF,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAA;IACzC,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CACxB,GACD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAElD,MAAM,WAAW,iBAAiB;IACjC,gFAAgF;IAChF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B;;;;;;;OAOG;IACH,eAAe,IAAI,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAAA;IAC/C,uEAAuE;IACvE,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC5D,gFAAgF;IAChF,MAAM,IAAI,IAAI,CAAA;CACd;AAED,MAAM,WAAW,wBAAwB;IACxC,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,mEAAmE;IACnE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC3C,OAAO,GAAE,wBAA6B,GACpC,OAAO,CAAC,iBAAiB,CAAC,CA6D5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAC3C,UAAU,EAAE,oBAAoB,EAChC,QAAQ,EAAE,MAAM,GACd,gBAAgB,CAYlB;AA4KD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA+BjF"}

package/dist/integrations/providers/subscription-login.js

@@ -0,0 +1,348 @@
+/**
+ * Obtaining a subscription credential from inside namzu.
+ *
+ * namzu could already USE and REFRESH a plan-backed credential; it could not
+ * get one. The only way in was to install another product, sign in there, and
+ * let discovery borrow what that product had stored — which works on exactly
+ * one operating system and requires the other product. This is the missing
+ * half: an authorization-code exchange, run by namzu, that ends with a
+ * credential in namzu's own store (`credential-store.ts`).
+ *
+ * ## The flow
+ *
+ * Authorization code with PKCE (RFC 7636, S256), redirected to a loopback
+ * address (RFC 8252 §7.3). Two ways to finish, and BOTH are always offered:
+ *
+ *  1. **Loopback.** A one-request server on `127.0.0.1` at the port the
+ *     redirect is registered under. The browser lands on it and the code
+ *     never touches a screen.
+ *  2. **Paste.** The operator copies the code — or the whole redirect URL —
+ *     out of a browser and hands it back.
+ *
+ * The second is not a consolation prize. A container, a remote shell over
+ * SSH, a machine with no graphical session: none of them can be redirected
+ * to, and on all of them the loopback server is either unreachable from
+ * wherever the browser actually is or cannot bind at all. `start()` says
+ * which of the two it managed to arrange (`loopback`), and the paste path
+ * works whether or not it did.
+ *
+ * ## What never happens here
+ *
+ * No token is logged, printed, or put in an error. Failures name the status,
+ * the endpoint and the stage; they never carry the response body, because a
+ * token endpoint's body is where the token is. Nothing is written to the
+ * store until an exchange has fully succeeded, so an abandoned or rejected
+ * login leaves no partial credential behind.
+ */
+import { createHash, randomBytes, timingSafeEqual } from 'node:crypto';
+import { createServer } from 'node:http';
+import { writeStoredSubscriptionCredential } from './credential-store.js';
+import { AUTHORIZE_URL, OAUTH_CLIENT_ID, OAUTH_SCOPES, OAUTH_TOKEN_URL, REDIRECT_URI, SUBSCRIPTION_REDIRECT_PORT, } from './identity.js';
+import { PROVIDER_REGISTRY } from './registry.js';
+/**
+ * Begin a login. Returns the page to open plus the two ways to finish it.
+ *
+ * Deliberately does NOT open a browser. Which of `open`, `xdg-open` or a
+ * Windows protocol handler to spawn — and whether spawning anything is even
+ * appropriate — is a property of the surface the operator is sitting in front
+ * of, not of the protocol. A module that reached for a browser would be
+ * unusable from the one place that most needs it: a machine that has none.
+ */
+export async function beginSubscriptionLogin(options = {}) {
+    const verifier = base64Url(randomBytes(32));
+    const challenge = base64Url(createHash('sha256').update(verifier).digest());
+    // An independent value, not the verifier reused.
+    //
+    // Reusing the verifier as `state` is a thing implementations do, and it
+    // undoes PKCE: `state` travels in the authorization URL, so the verifier
+    // would sit in the address bar, the browser history and any referrer along
+    // the way — and the secret PKCE exists to keep out of that URL is exactly
+    // the verifier.
+    const state = base64Url(randomBytes(16));
+    const listener = options.loopback === false ? null : await openLoopback(state);
+    let settled = false;
+    const exchangeOnce = async (code, seenState) => {
+        if (settled)
+            return { ok: false, reason: 'This login was already completed.' };
+        if (!constantTimeEquals(seenState, state)) {
+            return {
+                ok: false,
+                reason: 'The sign-in did not come back with the value namzu sent, so it cannot be matched to this attempt. Nothing was stored. Start the login again.',
+            };
+        }
+        settled = true;
+        return exchange(code, state, verifier, options);
+    };
+    return {
+        url: authorizeUrl(challenge, state),
+        redirectUri: REDIRECT_URI,
+        loopback: listener !== null,
+        waitForCallback: () => listener === null
+            ? null
+            : listener.received.then((got) => got === null
+                ? {
+                    ok: false,
+                    reason: 'The sign-in was cancelled before the browser came back.',
+                }
+                : got.error
+                    ? {
+                        ok: false,
+                        reason: `The sign-in did not complete (${got.error}). Nothing was stored.`,
+                    }
+                    : exchangeOnce(got.code, got.state)),
+        completeWithPastedCode: async (input) => {
+            const parsed = parsePastedInput(input);
+            if (!parsed.code) {
+                return {
+                    ok: false,
+                    reason: 'That does not contain an authorization code. Paste the whole address the browser finished on, or the code it showed you.',
+                };
+            }
+            return exchangeOnce(parsed.code, parsed.state ?? state);
+        },
+        cancel: () => listener?.close(),
+    };
+}
+/**
+ * The detected-provider record a completed sign-in produces.
+ *
+ * Shaped exactly like a discovered one — the same shape `discoverProviders`
+ * would return on the NEXT launch, having read the file this login just
+ * wrote — so every downstream path treats it identically and nothing has to
+ * learn that a session began with a login. It carries `origin: 'stored'`, so
+ * the between-turn refresh writes back to the file rather than to a Keychain
+ * this machine may not have.
+ */
+export function subscriptionDetectedProvider(credential, storedAt) {
+    return {
+        entry: PROVIDER_REGISTRY.anthropic,
+        source: { kind: 'stored', path: storedAt },
+        apiKey: credential.accessToken,
+        oauth: {
+            refreshToken: credential.refreshToken,
+            expiresAt: credential.expiresAt,
+            origin: 'stored',
+        },
+        alternatives: [],
+    };
+}
+function authorizeUrl(challenge, state) {
+    const params = new URLSearchParams({
+        code: 'true',
+        client_id: OAUTH_CLIENT_ID,
+        response_type: 'code',
+        redirect_uri: REDIRECT_URI,
+        scope: OAUTH_SCOPES,
+        code_challenge: challenge,
+        code_challenge_method: 'S256',
+        state,
+    });
+    return `${AUTHORIZE_URL}?${params.toString()}`;
+}
+/**
+ * Exchange the code, and store the result only once it is whole.
+ *
+ * The store write is the LAST thing. A response missing an access token, a
+ * non-2xx, a transport failure and a malformed body all return before it, so
+ * there is no path on which a failed login leaves a file behind.
+ */
+async function exchange(code, state, verifier, options) {
+    const fetchFn = options.fetch ?? globalThis.fetch;
+    let res;
+    try {
+        res = await fetchFn(OAUTH_TOKEN_URL, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json', accept: 'application/json' },
+            body: JSON.stringify({
+                grant_type: 'authorization_code',
+                client_id: OAUTH_CLIENT_ID,
+                code,
+                state,
+                redirect_uri: REDIRECT_URI,
+                code_verifier: verifier,
+            }),
+            signal: AbortSignal.timeout(30_000),
+        });
+    }
+    catch (err) {
+        // The MESSAGE of a transport error is safe (a hostname, a timeout); the
+        // body of a response is not, and there is none here.
+        return {
+            ok: false,
+            reason: `Could not reach the sign-in service (${err instanceof Error ? err.message : String(err)}). Nothing was stored.`,
+        };
+    }
+    if (!res.ok) {
+        // The status, never the body. A token endpoint answers failures with a
+        // document that can contain the very thing this module must not leak.
+        return {
+            ok: false,
+            reason: `The sign-in service refused the exchange (HTTP ${res.status}). The code may have already been used, or expired. Nothing was stored.`,
+        };
+    }
+    let data;
+    try {
+        data = (await res.json());
+    }
+    catch {
+        return {
+            ok: false,
+            reason: 'The sign-in service answered with something that is not a token. Nothing was stored.',
+        };
+    }
+    if (typeof data.access_token !== 'string' || data.access_token.length === 0) {
+        return {
+            ok: false,
+            reason: 'The sign-in service answered without a token. Nothing was stored.',
+        };
+    }
+    const credential = {
+        accessToken: data.access_token,
+        ...(typeof data.refresh_token === 'string' && data.refresh_token.length > 0
+            ? { refreshToken: data.refresh_token }
+            : {}),
+        ...(typeof data.expires_in === 'number'
+            ? { expiresAt: Date.now() + data.expires_in * 1_000 }
+            : {}),
+    };
+    let storedAt;
+    try {
+        storedAt = writeStoredSubscriptionCredential(credential, options.home);
+    }
+    catch (err) {
+        // The store refused to prove the file private, so there is no file. Say
+        // what happened; the credential is dropped with the process.
+        return {
+            ok: false,
+            reason: `Signed in, but the credential could not be stored privately: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+    return { ok: true, credential, storedAt };
+}
+/**
+ * A single-purpose listener on the loopback redirect, or `null`.
+ *
+ * `null` on every failure to bind — the port is in use (a second namzu, or
+ * another product's login mid-flight), the sandbox forbids listening, there
+ * is no loopback interface. None of those is fatal, because the paste path
+ * does not need this.
+ */
+async function openLoopback(expectedState) {
+    let settle = () => { };
+    const received = new Promise((r) => {
+        let done = false;
+        settle = (v) => {
+            if (done)
+                return;
+            done = true;
+            r(v);
+        };
+    });
+    const server = createServer((req, res) => {
+        const url = new URL(req.url ?? '/', `http://127.0.0.1:${SUBSCRIPTION_REDIRECT_PORT}`);
+        const error = url.searchParams.get('error');
+        const code = url.searchParams.get('code');
+        const state = url.searchParams.get('state');
+        const finish = (status, text) => {
+            res.writeHead(status, { 'content-type': 'text/plain; charset=utf-8' });
+            res.end(text);
+        };
+        if (error) {
+            finish(400, 'Sign-in did not complete. Return to namzu.');
+            settle({ code: '', state: '', error });
+            return;
+        }
+        if (!code || !state) {
+            // Not our redirect — a browser probing the port, a favicon request.
+            // Answering and NOT settling keeps the listener alive for the real one.
+            finish(404, 'Not the sign-in callback.');
+            return;
+        }
+        if (!constantTimeEquals(state, expectedState)) {
+            // Refused here as well as at the exchange. This is the request a
+            // cross-site attempt would make, and answering it with "done" would
+            // tell whoever made it that the port is a live login.
+            finish(400, 'Sign-in did not complete. Return to namzu.');
+            return;
+        }
+        finish(200, 'Signed in. You can close this tab and return to namzu.');
+        settle({ code, state });
+    });
+    const bound = await new Promise((resolve) => {
+        server.once('error', () => resolve(false));
+        server.listen(SUBSCRIPTION_REDIRECT_PORT, '127.0.0.1', () => resolve(true));
+    });
+    if (!bound) {
+        server.close();
+        return null;
+    }
+    return {
+        received,
+        close: () => {
+            settle(null);
+            server.close();
+        },
+    };
+}
+/**
+ * Pull a code (and a state, when there is one) out of whatever got pasted.
+ *
+ * Four spellings reach this in practice: the full redirect address, its query
+ * string alone, the `code#state` pair a consent screen offers for copying,
+ * and a bare code. Anything else yields no code and is refused by the caller
+ * — guessing at a fifth shape would send an arbitrary string to a token
+ * endpoint as if it were an authorization code.
+ */
+export function parsePastedInput(input) {
+    const value = input.trim();
+    if (value.length === 0)
+        return {};
+    if (/^https?:\/\//i.test(value)) {
+        try {
+            const url = new URL(value);
+            return {
+                code: url.searchParams.get('code') ?? undefined,
+                state: url.searchParams.get('state') ?? undefined,
+            };
+        }
+        catch {
+            return {};
+        }
+    }
+    if (value.includes('code=')) {
+        const params = new URLSearchParams(value.replace(/^\?/, ''));
+        return {
+            code: params.get('code') ?? undefined,
+            state: params.get('state') ?? undefined,
+        };
+    }
+    if (value.includes('#')) {
+        const [code, state] = value.split('#', 2);
+        return { code: code || undefined, state: state || undefined };
+    }
+    // A bare code. Whitespace already ruled out by the trim + the checks above
+    // only when it contained a separator, so reject an obviously-wrong paste
+    // (a sentence, a wrapped line) rather than posting it.
+    if (/\s/.test(value))
+        return {};
+    return { code: value };
+}
+/**
+ * Compare two opaque values without leaking their relationship through timing.
+ *
+ * `state` is compared, not a secret, so this is belt-and-braces — but the
+ * cheap version of this comparison is `===`, and `===` on strings of equal
+ * length is the shape that teaches the next person to write it for the
+ * verifier too.
+ */
+function constantTimeEquals(a, b) {
+    const left = Buffer.from(a, 'utf8');
+    const right = Buffer.from(b, 'utf8');
+    if (left.length !== right.length)
+        return false;
+    return timingSafeEqual(left, right);
+}
+function base64Url(bytes) {
+    return bytes.toString('base64url');
+}
+//# sourceMappingURL=subscription-login.js.map

package/dist/integrations/providers/subscription-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscription-login.js","sourceRoot":"","sources":["../../../src/integrations/providers/subscription-login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACtE,OAAO,EAAe,YAAY,EAAE,MAAM,WAAW,CAAA;AAErD,OAAO,EAAE,iCAAiC,EAAE,MAAM,uBAAuB,CAAA;AAEzE,OAAO,EACN,aAAa,EACb,eAAe,EACf,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,0BAA0B,GAC1B,MAAM,eAAe,CAAA;AAEtB,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAsDjD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,UAAoC,EAAE;IAEtC,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3C,MAAM,SAAS,GAAG,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IAC3E,iDAAiD;IACjD,EAAE;IACF,wEAAwE;IACxE,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,gBAAgB;IAChB,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAA;IAExC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC,CAAA;IAE9E,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,MAAM,YAAY,GAAG,KAAK,EAAE,IAAY,EAAE,SAAiB,EAAyB,EAAE;QACrF,IAAI,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAA;QAC9E,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,MAAM,EACL,8IAA8I;aAC/I,CAAA;QACF,CAAC;QACD,OAAO,GAAG,IAAI,CAAA;QACd,OAAO,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;IAChD,CAAC,CAAA;IAED,OAAO;QACN,GAAG,EAAE,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC;QACnC,WAAW,EAAE,YAAY;QACzB,QAAQ,EAAE,QAAQ,KAAK,IAAI;QAC3B,eAAe,EAAE,GAAG,EAAE,CACrB,QAAQ,KAAK,IAAI;YAChB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAC/B,GAAG,KAAK,IAAI;gBACX,CAAC,CAAE;oBACD,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,yDAAyD;iBAChD;gBACnB,CAAC,CAAC,GAAG,CAAC,KAAK;oBACV,CAAC,CAAE;wBACD,EAAE,EAAE,KAAK;wBACT,MAAM,EAAE,iCAAiC,GAAG,CAAC,KAAK,wBAAwB;qBACzD;oBACnB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CACrC;QACJ,sBAAsB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACvC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;YACtC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO;oBACN,EAAE,EAAE,KAAK;oBACT,MAAM,EACL,0HAA0H;iBAC3H,CAAA;YACF,CAAC;YACD,OAAO,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,CAAA;QACxD,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE;KAC/B,CAAA;AACF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,4BAA4B,CAC3C,UAAgC,EAChC,QAAgB;IAEhB,OAAO;QACN,KAAK,EAAE,iBAAiB,CAAC,SAAS;QAClC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC1C,MAAM,EAAE,UAAU,CAAC,WAAW;QAC9B,KAAK,EAAE;YACN,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,MAAM,EAAE,QAAQ;SAChB;QACD,YAAY,EAAE,EAAE;KAChB,CAAA;AACF,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,KAAa;IACrD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QAClC,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE,eAAe;QAC1B,aAAa,EAAE,MAAM;QACrB,YAAY,EAAE,YAAY;QAC1B,KAAK,EAAE,YAAY;QACnB,cAAc,EAAE,SAAS;QACzB,qBAAqB,EAAE,MAAM;QAC7B,KAAK;KACL,CAAC,CAAA;IACF,OAAO,GAAG,aAAa,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,QAAQ,CACtB,IAAY,EACZ,KAAa,EACb,QAAgB,EAChB,OAAiC;IAEjC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAA;IACjD,IAAI,GAAa,CAAA;IACjB,IAAI,CAAC;QACJ,GAAG,GAAG,MAAM,OAAO,CAAC,eAAe,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACpB,UAAU,EAAE,oBAAoB;gBAChC,SAAS,EAAE,eAAe;gBAC1B,IAAI;gBACJ,KAAK;gBACL,YAAY,EAAE,YAAY;gBAC1B,aAAa,EAAE,QAAQ;aACvB,CAAC;YACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACnC,CAAC,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,wEAAwE;QACxE,qDAAqD;QACrD,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,wCAAwC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,wBAAwB;SACxH,CAAA;IACF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACb,uEAAuE;QACvE,sEAAsE;QACtE,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,kDAAkD,GAAG,CAAC,MAAM,yEAAyE;SAC7I,CAAA;IACF,CAAC;IACD,IAAI,IAA+E,CAAA;IACnF,IAAI,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgB,CAAA;IACzC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EACL,sFAAsF;SACvF,CAAA;IACF,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7E,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,mEAAmE;SAC3E,CAAA;IACF,CAAC;IACD,MAAM,UAAU,GAAyB;QACxC,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,GAAG,CAAC,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;YAC1E,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE;YACtC,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YACtC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,KAAK,EAAE;YACrD,CAAC,CAAC,EAAE,CAAC;KACN,CAAA;IACD,IAAI,QAAgB,CAAA;IACpB,IAAI,CAAC;QACJ,QAAQ,GAAG,iCAAiC,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IACvE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,wEAAwE;QACxE,6DAA6D;QAC7D,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,gEAAgE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SAC1H,CAAA;IACF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA;AAC1C,CAAC;AAOD;;;;;;;GAOG;AACH,KAAK,UAAU,YAAY,CAAC,aAAqB;IAChD,IAAI,MAAM,GAAwE,GAAG,EAAE,GAAE,CAAC,CAAA;IAC1F,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAyD,CAAC,CAAC,EAAE,EAAE;QAC1F,IAAI,IAAI,GAAG,KAAK,CAAA;QAChB,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE;YACd,IAAI,IAAI;gBAAE,OAAM;YAChB,IAAI,GAAG,IAAI,CAAA;YACX,CAAC,CAAC,CAAC,CAAC,CAAA;QACL,CAAC,CAAA;IACF,CAAC,CAAC,CAAA;IAEF,MAAM,MAAM,GAAW,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAChD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,0BAA0B,EAAE,CAAC,CAAA;QACrF,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,EAAE;YAC/C,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAA;YACtE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACd,CAAC,CAAA;QACD,IAAI,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,GAAG,EAAE,4CAA4C,CAAC,CAAA;YACzD,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;YACtC,OAAM;QACP,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,oEAAoE;YACpE,wEAAwE;YACxE,MAAM,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAA;YACxC,OAAM;QACP,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC;YAC/C,iEAAiE;YACjE,oEAAoE;YACpE,sDAAsD;YACtD,MAAM,CAAC,GAAG,EAAE,4CAA4C,CAAC,CAAA;YACzD,OAAM;QACP,CAAC;QACD,MAAM,CAAC,GAAG,EAAE,wDAAwD,CAAC,CAAA;QACrE,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;QACpD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;QAC1C,MAAM,CAAC,MAAM,CAAC,0BAA0B,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IACF,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,CAAC,KAAK,EAAE,CAAA;QACd,OAAO,IAAI,CAAA;IACZ,CAAC;IACD,OAAO;QACN,QAAQ;QACR,KAAK,EAAE,GAAG,EAAE;YACX,MAAM,CAAC,IAAI,CAAC,CAAA;YACZ,MAAM,CAAC,KAAK,EAAE,CAAA;QACf,CAAC;KACD,CAAA;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC1B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAEjC,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;YAC1B,OAAO;gBACN,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS;gBAC/C,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;aACjD,CAAA;QACF,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,CAAA;QACV,CAAC;IACF,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAA;QAC5D,OAAO;YACN,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS;YACrC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;SACvC,CAAA;IACF,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;QACzC,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,SAAS,EAAE,KAAK,EAAE,KAAK,IAAI,SAAS,EAAE,CAAA;IAC9D,CAAC;IACD,2EAA2E;IAC3E,yEAAyE;IACzE,uDAAuD;IACvD,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAC/B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;AACvB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,CAAS,EAAE,CAAS;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;IACpC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAC9C,OAAO,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AACnC,CAAC"}

package/dist/tui/App.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"App.d.ts","sourceRoot":"","sources":["../../src/tui/App.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA0DH,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE/D,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAA;CACxB;AAWD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,GAAG,SAAS,MAAM,EAAE,CAY1F;AAGD,wBAAgB,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,QAAQ,2CAq3CpC"}
+{"version":3,"file":"App.d.ts","sourceRoot":"","sources":["../../src/tui/App.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAiEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE/D,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAA;CACxB;AAWD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,GAAG,SAAS,MAAM,EAAE,CAY1F;AAGD,wBAAgB,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,QAAQ,2CAo+CpC"}

package/dist/tui/App.js

@@ -2,7 +2,9 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 import { Box, Text, useApp, useInput } from 'ink';
 import { relative } from 'node:path';
 import { useCallback, useEffect, useRef, useState } from 'react';
-import { primaryProvider, writePreferences, } from '../integrations/providers/index.js';
+import { beginSubscriptionLogin, clearStoredSubscriptionCredential, credentialsPath, primaryProvider, readStoredSubscriptionCredential, writePreferences, } from '../integrations/providers/index.js';
+import { describeLoginOutcome, describeLoginStart, describeLogout } from './login-prompt.js';
+import { openInBrowser } from './open-browser.js';
 import { isTrusted, trustDir } from '../integrations/trust/store.js';
 import { appendMemory, composeMemoryPrompt, readMemory } from '../memory/store.js';
 import { composeSkillsPrompt, discoverSkills, loadSkillBody } from '../skills/store.js';
@@ -105,6 +107,15 @@ export function App({ ctx }) {
     const [selectedResume, setSelectedResume] = useState(0);
     const exitArmedRef = useRef(false);
     const abortRef = useRef(null);
+    /**
+     * The sign-in attempt awaiting its authorization code, if any.
+     *
+     * A ref and not state: nothing renders from it, and a re-render between
+     * `/login` and `/login <address>` must not lose the verifier — without
+     * which the code that comes back cannot be exchanged for anything.
+     */
+    const loginRef = useRef(null);
+    const runProbeRef = useRef(null);
     /**
      * The session currently holding resources, so a re-hydration can release the
      * one it replaces. A `/model` switch builds a new session, and a tool
@@ -302,6 +313,77 @@ export function App({ ctx }) {
                 pushMessage('system', s.errorHint);
         }
     }, [ctx.cwd, ctx.rules, pushMessage]);
+    /**
+     * Sign in to a subscription without leaving namzu.
+     *
+     * Two calls, one command. Bare `/login` starts an attempt and parks it in
+     * `loginRef`; `/login <address>` finishes that one. Nothing here parses the
+     * argument — `slashCommands` already decided which of the two this is.
+     *
+     * ## Why it re-probes instead of installing the credential directly
+     *
+     * The login writes to the same file `discoverProviders` reads, so re-running
+     * the probe is not a lazy substitute for wiring the credential in: it is the
+     * only version that cannot disagree with a cold start. Building a session
+     * from the returned credential here, in parallel, would be a SECOND way to
+     * arrive at a provider — and the day the two differ, the operator's session
+     * works until they restart, which is the worst possible moment to find out.
+     *
+     * It also gets the no-preferences case right for free: a first-run operator
+     * who signs in lands in the picker, which is exactly where someone with a
+     * working credential and no chosen provider should be.
+     */
+    const startOrFinishLogin = useCallback(async (pasted) => {
+        if (pasted !== undefined) {
+            const pending = loginRef.current;
+            if (!pending) {
+                pushMessage('system', 'There is no sign-in waiting to be finished. Run /login on its own to start one.');
+                return;
+            }
+            const outcome = await pending.completeWithPastedCode(pasted);
+            pending.cancel();
+            loginRef.current = null;
+            pushMessage('system', describeLoginOutcome(outcome));
+            if (outcome.ok)
+                await runProbeRef.current?.();
+            return;
+        }
+        loginRef.current?.cancel();
+        loginRef.current = null;
+        let start;
+        try {
+            start = await beginSubscriptionLogin();
+        }
+        catch (err) {
+            pushMessage('system', `Could not start a sign-in: ${err instanceof Error ? err.message : String(err)}`);
+            return;
+        }
+        loginRef.current = start;
+        pushMessage('system', describeLoginStart({
+            url: start.url,
+            loopback: start.loopback,
+            browserOpened: openInBrowser(start.url),
+        }));
+        // The automatic half, when there is one. Not awaited by the caller:
+        // the composer stays live throughout, so the operator can paste
+        // instead — or type anything else — while this waits.
+        const waiting = start.waitForCallback();
+        if (!waiting)
+            return;
+        const outcome = await waiting;
+        if (loginRef.current !== start)
+            return; // superseded, or finished by paste
+        loginRef.current = null;
+        start.cancel();
+        // A cancelled listener resolves to a refusal, and saying "sign-in
+        // failed" when the operator finished it another way would be a lie
+        // about their own successful login.
+        if (!outcome.ok && outcome.reason.includes('cancelled'))
+            return;
+        pushMessage('system', describeLoginOutcome(outcome));
+        if (outcome.ok)
+            await runProbeRef.current?.();
+    }, [pushMessage]);
     const runProbe = useCallback(async () => {
         try {
             const probe = await probeAgentSession();
@@ -340,6 +422,10 @@ export function App({ ctx }) {
             pushMessage('system', `Failed to probe agents: ${err instanceof Error ? err.message : String(err)}`);
         }
     }, [hydrateSession, pushMessage]);
+    // `startOrFinishLogin` is declared above `runProbe` and calls it, so it
+    // reads the current one through a ref rather than closing over a stale
+    // binding or forcing the two into a declaration order that reads backwards.
+    runProbeRef.current = runProbe;
     // Trust gate runs first: don't touch the folder until the user trusts it.
     useEffect(() => {
         if (isTrusted(ctx.cwd)) {
@@ -822,6 +908,22 @@ export function App({ ctx }) {
                     setKeyEntryFor(null);
                     setPhase('picker');
                     return;
+                case 'login':
+                    void startOrFinishLogin(slash.pasted);
+                    return;
+                case 'logout': {
+                    const path = credentialsPath();
+                    const had = readStoredSubscriptionCredential() !== null;
+                    try {
+                        clearStoredSubscriptionCredential();
+                    }
+                    catch (err) {
+                        pushMessage('system', `Could not remove ${path}: ${err instanceof Error ? err.message : String(err)}`);
+                        return;
+                    }
+                    pushMessage('system', describeLogout(path, had));
+                    return;
+                }
                 case 'remember':
                     try {
                         appendMemory(slash.text);