@north-light/crouter 0.3.317 → 0.3.319

package/dist/commands/sys/panels/provider-panel.js

@@ -1,538 +1 @@
-import { LoginDialogComponent, } from '@earendil-works/pi-coding-agent';
-import { Input, matchesKey, truncateToWidth, } from '@earendil-works/pi-tui';
-import { execFile } from 'node:child_process';
-import { dialogAuthInteraction } from '../../../core/auth-interaction.js';
-import { isManagedProvider, promoteSubscription, readSubscriptionPool, renameSubscription, } from '../../../core/subscription-state.js';
-import { removeProviderRow } from '../../../core/provider-management.js';
-import { cliClient } from '../../api-client.js';
-import { fitTail, theme, visibleRange, } from '../../../core/tui/panel.js';
-/** Curated setup-catalog view over pi's OAuth providers + the model registry. */
-export function buildProviderCatalog(runtime, registry) {
-    const oauth = runtime
-        .getProviders()
-        .filter((provider) => provider.auth.oauth !== undefined);
-    const oauthIds = new Set(oauth.map((provider) => provider.id));
-    const seen = new Set();
-    return [
-        ...oauth.map((provider) => ({
-            providerId: provider.id,
-            name: provider.name,
-            managed: isManagedProvider(provider.id),
-            authType: "oauth",
-        })),
-        ...registry.getAll().map((model) => ({
-            providerId: model.provider,
-            name: registry.getProviderDisplayName(model.provider),
-            managed: isManagedProvider(model.provider),
-            authType: oauthIds.has(model.provider)
-                ? "oauth"
-                : "api_key",
-        })),
-    ].filter((provider) => !seen.has(provider.providerId) && Boolean(seen.add(provider.providerId)));
-}
-/** Classifies a `startLogin` failure into a user-facing status line. */
-export function classifyLoginFailure(error, aborted) {
-    if (aborted)
-        return "Login cancelled";
-    if (error instanceof Error && error.name === "AbortError")
-        return "Login cancelled";
-    return `Login error: ${error instanceof Error ? error.message : String(error)}`;
-}
-export class ProviderPanel {
-    tui;
-    agentDir;
-    runtime;
-    registry;
-    renameInput = new Input();
-    rows = [];
-    selected = 0;
-    mode = "list";
-    notice = "";
-    catalog = [];
-    catalogIndex = 0;
-    loginProvider;
-    loginFlow;
-    mutationInFlight = false;
-    // Wired by the host wizard to bust its render-line cache. The panel proxies pi's
-    // LoginDialogComponent (it is not a real pi TUI child), so the host only repaints on
-    // synchronous input. startLogin drives OAuth through async promise chains whose state
-    // transitions land between keystrokes; notifyChange() lets each one force a fresh frame.
-    onChange;
-    constructor(tui, agentDir, runtime, registry) {
-        this.tui = tui;
-        this.agentDir = agentDir;
-        this.runtime = runtime;
-        this.registry = registry;
-        this.renameInput.onSubmit = () => this.rename();
-        this.renameInput.onEscape = () => {
-            this.mode = "list";
-        };
-        this.reload();
-    }
-    // Repaint the host after an async login transition: bust the wizard's cached lines
-    // (onChange) so render() recomputes the NEW state, then ask pi's loop to draw a frame.
-    notifyChange() {
-        this.onChange?.();
-        this.tui.requestRender();
-    }
-    /** auth.json changed under us (a login landed, a provider was removed). pi 0.82
-     *  serves provider auth status from the runtime's SNAPSHOT rather than a live file
-     *  read, so the snapshot has to be re-taken before the roster can see the change.
-     *  `refresh()` is local-only here (the runtime is composed with model network access
-     *  off), so this is a credential re-list, not a catalog fetch. */
-    reloadAfterAuthChange() {
-        this.reload();
-        void this.registry.refresh().then(() => {
-            this.reload();
-            this.notifyChange();
-        });
-    }
-    reload() {
-        const registry = this.registry;
-        const rows = [];
-        for (const provider of buildProviderCatalog(this.runtime, registry)) {
-            const status = registry.getProviderAuthStatus(provider.providerId);
-            if (provider.managed) {
-                const pool = readSubscriptionPool(provider.providerId);
-                if (pool.length === 0 && !status.source)
-                    continue;
-                // Every stored account carries a credential, so pool occupancy is what makes the
-                // provider configured.
-                rows.push({
-                    ...provider,
-                    configured: pool.length > 0 || status.configured,
-                    source: status.source,
-                    sourceLabel: status.label,
-                });
-                pool.forEach((account, index) => rows.push({
-                    ...provider,
-                    label: account.label,
-                    preferred: index === 0,
-                    cooldownUntil: account.rateLimitedUntil,
-                    accountId: account.accountId,
-                }));
-                continue;
-            }
-            if (!status.source)
-                continue;
-            rows.push({
-                ...provider,
-                configured: status.configured,
-                source: status.source,
-                sourceLabel: status.label,
-            });
-        }
-        this.rows = rows;
-        this.selected = Math.min(this.selected, Math.max(0, rows.length));
-    }
-    selectedRow() {
-        return this.rows[this.selected];
-    }
-    openBrowser(url) {
-        const command = process.platform === "darwin"
-            ? "open"
-            : process.platform === "win32"
-                ? "cmd"
-                : "xdg-open";
-        const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
-        execFile(command, args, { timeout: 5_000 }, () => { });
-    }
-    openCatalog() {
-        this.catalog = buildProviderCatalog(this.runtime, this.registry);
-        this.catalogIndex = 0;
-        this.mode = "catalog";
-    }
-    startLogin(provider, label) {
-        this.loginProvider = provider;
-        let flow;
-        const complete = (message) => {
-            if (!flow.active || this.loginFlow !== flow)
-                return;
-            flow.active = false;
-            this.loginFlow = undefined;
-            this.mode = "list";
-            this.notice = message;
-            this.reloadAfterAuthChange();
-            this.notifyChange();
-        };
-        const dialog = new LoginDialogComponent(this.tui, provider.providerId, (success, message) => {
-            if (!success)
-                complete(message ? `Login failed: ${message}` : "Login cancelled");
-        }, provider.name);
-        flow = { dialog, active: true, committing: false };
-        this.loginFlow = flow;
-        this.mode = "login";
-        const handleDialogInput = dialog.handleInput.bind(dialog);
-        dialog.handleInput = (data) => {
-            if (!flow.committing)
-                handleDialogInput(data);
-        };
-        const isActive = () => flow.active && this.loginFlow === flow && !dialog.signal.aborted;
-        const beginCommit = () => {
-            if (!isActive())
-                return false;
-            flow.committing = true;
-            dialog.showDetails(["Saving credentials…"]);
-            return true;
-        };
-        const fail = (error) => {
-            complete(classifyLoginFailure(error, dialog.signal.aborted));
-        };
-        if (provider.authType === "api_key") {
-            void dialog
-                .showPrompt(`Enter API key for ${provider.name}:`, "sk-...")
-                .then(async (key) => {
-                if (!isActive())
-                    return;
-                if (!key.trim()) {
-                    complete("No key entered — login cancelled");
-                    return;
-                }
-                // Interactive collection stays client-side (TTY); the WRITE moves to the
-                // API (PUT /model-auth/{provider}) so this process never touches auth.json.
-                if (!beginCommit())
-                    return;
-                await cliClient().installCredential(provider.providerId, {
-                    kind: "api_key",
-                    api_key: key.trim(),
-                });
-                complete(`API key saved for ${provider.name}`);
-            })
-                .catch(fail);
-            return;
-        }
-        // pi 0.82 collapsed the six login callbacks into one AuthInteraction; the adapter
-        // onto LoginDialogComponent is shared with the attach viewer's /login overlay.
-        const interaction = dialogAuthInteraction(dialog, {
-            openBrowser: (url) => this.openBrowser(url),
-            onChange: () => this.notifyChange(),
-            isActive,
-        });
-        const oauth = this.runtime.getProvider(provider.providerId)?.auth.oauth;
-        if (!oauth) {
-            complete(`Unknown OAuth provider: ${provider.providerId}`);
-            return;
-        }
-        if (!provider.managed) {
-            // Collect tokens client-side (browser/TTY), then WRITE via the API so this
-            // process never touches auth.json. In 0.82 `provider.auth.oauth.login()`
-            // RETURNS the credential without persisting it (persistence is app-owned),
-            // which is exactly the collect-without-persist half this needs.
-            void oauth
-                .login(interaction)
-                .then(async (credentials) => {
-                if (!isActive())
-                    return;
-                if (!beginCommit())
-                    return;
-                // Forward non-standard credential keys (e.g. github-copilot's `enterpriseUrl`)
-                // so enterprise routing and token refresh retain the provider data they require.
-                // The named tokens and store `type` are handled separately; all other keys travel
-                // through `extra` and the handler writes them into auth.json.
-                const { type: _type, access, refresh, expires, ...extra } = credentials;
-                await cliClient().installCredential(provider.providerId, {
-                    kind: "oauth",
-                    access_token: access,
-                    refresh_token: refresh,
-                    expires_at: new Date(expires).toISOString(),
-                    ...(Object.keys(extra).length > 0 ? { extra } : {}),
-                });
-                if (isActive())
-                    complete(`Logged in to ${provider.name}`);
-            })
-                .catch(fail);
-            return;
-        }
-        // Snapshot the newest pool cooldown before OAuth so a later 429 remains authoritative.
-        const lastRateLimitedAt = Math.max(0, ...readSubscriptionPool(provider.providerId).map((entry) => entry.lastRateLimitedAt));
-        void oauth
-            .login(interaction)
-            .then(async (credential) => {
-            if (!isActive())
-                return;
-            if (!beginCommit())
-                return;
-            const accountId = typeof credential.accountId === "string" &&
-                credential.accountId.trim()
-                ? credential.accountId.trim()
-                : undefined;
-            // Collected via pi's managed login (client); the API persists it into the pool, where
-            // account identity selects an existing row or labels a newly seen account.
-            await cliClient().installCredential(provider.providerId, {
-                kind: "managed_account",
-                ...(label ? { label } : {}),
-                ...(label ? {} : { auto_label: true }),
-                ...(accountId ? { account_id: accountId } : {}),
-                access_token: credential.access,
-                refresh_token: credential.refresh,
-                expires_at: new Date(credential.expires).toISOString(),
-                last_rate_limited_at: lastRateLimitedAt,
-            });
-            if (isActive())
-                complete(`Logged in to ${provider.name}`);
-        })
-            .catch(fail);
-    }
-    isNestedFlowActive() {
-        return this.mode === "login";
-    }
-    dispose() {
-        const flow = this.loginFlow;
-        if (!flow)
-            return;
-        flow.active = false;
-        this.loginFlow = undefined;
-        flow.dialog.handleInput("\u001b");
-    }
-    runMutation(operation) {
-        if (this.mutationInFlight)
-            return;
-        this.mutationInFlight = true;
-        void operation()
-            .catch((error) => {
-            this.notice = error instanceof Error ? error.message : String(error);
-        })
-            .finally(() => {
-            this.mutationInFlight = false;
-            this.notifyChange();
-        });
-    }
-    rename() {
-        const row = this.selectedRow();
-        if (!row?.managed || !row.label)
-            return;
-        this.mode = "list";
-        this.runMutation(async () => {
-            await renameSubscription(row.providerId, row.label, this.renameInput.getValue());
-            this.notice = `Renamed ${row.name} account`;
-            this.reload();
-        });
-    }
-    remove(row) {
-        this.runMutation(async () => {
-            this.notice = await removeProviderRow(this.agentDir, row);
-            this.reloadAfterAuthChange();
-        });
-    }
-    promote(row) {
-        this.runMutation(async () => {
-            await promoteSubscription(row.providerId, row.label);
-            this.notice = `Preferred ${row.name} account`;
-            this.reload();
-        });
-    }
-    handleInput(data) {
-        if (this.mode === "login") {
-            this.loginFlow?.dialog.handleInput(data);
-            return true;
-        }
-        if (this.mutationInFlight)
-            return true;
-        if (this.mode === "rename" || this.mode === "label") {
-            this.renameInput.handleInput(data);
-            return true;
-        }
-        if (this.mode === "catalog") {
-            if (matchesKey(data, "escape")) {
-                this.mode = "list";
-                return true;
-            }
-            if (matchesKey(data, "j") || matchesKey(data, "down")) {
-                this.catalogIndex = Math.min(this.catalog.length - 1, this.catalogIndex + 1);
-                return true;
-            }
-            if (matchesKey(data, "k") || matchesKey(data, "up")) {
-                this.catalogIndex = Math.max(0, this.catalogIndex - 1);
-                return true;
-            }
-            if (matchesKey(data, "enter")) {
-                const provider = this.catalog[this.catalogIndex];
-                if (provider.managed) {
-                    this.loginProvider = provider;
-                    this.renameInput.setValue("");
-                    this.renameInput.onSubmit = () => {
-                        const label = this.renameInput.getValue().trim();
-                        if (label)
-                            this.startLogin(provider, label);
-                    };
-                    this.mode = "label";
-                }
-                else
-                    this.startLogin(provider);
-                return true;
-            }
-            return true;
-        }
-        if (this.mode === "remove") {
-            if (matchesKey(data, "y") || matchesKey(data, "enter")) {
-                const row = this.selectedRow();
-                if (row && (row.managed || row.configured)) {
-                    this.remove(row);
-                }
-            }
-            this.mode = "list";
-            return true;
-        }
-        if (matchesKey(data, "j") || matchesKey(data, "down")) {
-            this.selected = Math.min(this.rows.length, this.selected + 1);
-            return true;
-        }
-        if (matchesKey(data, "k") || matchesKey(data, "up")) {
-            this.selected = Math.max(0, this.selected - 1);
-            return true;
-        }
-        const row = this.selectedRow();
-        if (matchesKey(data, "p") && row?.managed && row.label) {
-            this.promote(row);
-            return true;
-        }
-        if (matchesKey(data, "r") && row?.managed && row.label) {
-            this.renameInput.setValue(row.label);
-            this.renameInput.onSubmit = () => this.rename();
-            this.mode = "rename";
-            return true;
-        }
-        if (matchesKey(data, "x") && (row?.managed || row?.configured)) {
-            this.mode = "remove";
-            return true;
-        }
-        if (matchesKey(data, "a")) {
-            this.openCatalog();
-            return true;
-        }
-        const viewOnly = row?.source === "environment" || row?.source === "runtime";
-        if (matchesKey(data, "l") && row && !viewOnly) {
-            if (row.managed && row.label)
-                this.startLogin(row, row.label);
-            else
-                this.startLogin(row);
-            return true;
-        }
-        if (matchesKey(data, "enter")) {
-            if (row && !viewOnly)
-                this.startLogin(row, row.managed && row.label ? row.label : undefined);
-            else if (!row)
-                this.openCatalog();
-            return true;
-        }
-        return false;
-    }
-    // `height` is the panel's row budget, supplied by the host page's live
-    // terminal-row callback. It can shrink to just a couple of rows, so every part
-    // of the panel below the mandatory content is chrome that collapses under
-    // pressure. For the roster/catalog list this
-    // is: the title/count header first, then the hint/notice/empty-state line, then the
-    // position indicator — never letting the selected row scroll out of view. The
-    // login/rename/label/remove modals have no list to window, so they apply the same
-    // budget via `fitTail`: their bodies always end on the actionable line (a live
-    // input, a confirm prompt, a login dialog's current prompt), so clipping from the
-    // head sheds chrome (title/count/older status lines) first and keeps that line.
-    badge() {
-        return String(this.rows.filter((row) => row.label === undefined).length);
-    }
-    render(width, height) {
-        const titleLine = theme.fg("accent", theme.bold("Providers"));
-        const countLine = theme.fg("dim", `${this.rows.filter((row) => row.label === undefined).length} configured`);
-        const contentBudget = Math.max(1, height);
-        let body;
-        if (this.mode === "login") {
-            body = fitTail(this.loginFlow?.dialog.render(width) ?? [], contentBudget);
-        }
-        else if (this.mode === "rename" || this.mode === "label") {
-            body = fitTail([
-                titleLine,
-                countLine,
-                "",
-                theme.fg("accent", this.mode === "rename"
-                    ? "Rename account"
-                    : `Name the ${this.loginProvider?.name ?? "provider"} account`),
-                ...this.renameInput.render(Math.max(1, width - 8)),
-            ], contentBudget);
-        }
-        else if (this.mode === "remove") {
-            const target = this.selectedRow();
-            const label = target?.label ??
-                (target?.managed
-                    ? `${target.name} · all accounts`
-                    : (target?.name ?? "account"));
-            body = fitTail([
-                titleLine,
-                countLine,
-                "",
-                theme.fg("warning", `Remove ${label}? y/enter confirm · any other key cancel`),
-            ], contentBudget);
-        }
-        else {
-            // The title/count header is the first chrome to give way: only as many of its
-            // two lines are kept as fit while still reserving at least one row for the
-            // mandatory selected entry.
-            const header = [titleLine, countLine].slice(0, Math.max(0, contentBudget - 1));
-            const remaining = contentBudget - header.length; // always >= 1
-            body = [...header];
-            if (this.mode === "catalog") {
-                const items = this.catalog.length;
-                const clipped = items > remaining;
-                // Only trade a row for the position indicator when there's a spare row to trade;
-                // at `remaining === 1` the sole row goes to the mandatory selected entry instead.
-                const reserveIndicator = clipped && remaining >= 2;
-                const rowBudget = reserveIndicator ? remaining - 1 : remaining;
-                const { start, end } = visibleRange(items, this.catalogIndex, rowBudget);
-                let leftover = remaining - (end - start) - (reserveIndicator ? 1 : 0);
-                if (leftover > 0) {
-                    body.push(theme.fg("dim", "Select a provider to add · esc back"));
-                    leftover -= 1;
-                }
-                for (let index = start; index < end; index++) {
-                    const provider = this.catalog[index];
-                    body.push(`${index === this.catalogIndex ? theme.fg("accent", "▶") : " "} ${provider.name}`);
-                }
-                if (reserveIndicator)
-                    body.push(theme.fg("dim", `(${this.catalogIndex + 1}/${items})`));
-            }
-            else {
-                const totalEntries = this.rows.length + 1; // + the trailing "Add provider" sentinel
-                const clipped = totalEntries > remaining;
-                const reserveIndicator = clipped && remaining >= 2;
-                const rowBudget = reserveIndicator ? remaining - 1 : remaining;
-                const { start, end } = visibleRange(totalEntries, this.selected, rowBudget);
-                let leftover = remaining - (end - start) - (reserveIndicator ? 1 : 0);
-                const showEmpty = this.rows.length === 0 && leftover > 0;
-                if (showEmpty)
-                    leftover -= 1;
-                const showNotice = Boolean(this.notice) && leftover > 0;
-                if (showEmpty)
-                    body.push(theme.fg("warning", "No provider configured yet."));
-                for (let index = start; index < end; index++) {
-                    if (index === this.rows.length) {
-                        body.push(`${this.selected === this.rows.length ? theme.fg("accent", "▶") : " "} ${theme.fg("accent", "＋ Add provider")}`);
-                        continue;
-                    }
-                    const row = this.rows[index];
-                    const selected = index === this.selected ? theme.fg("accent", "▶") : " ";
-                    if (!row.label) {
-                        const state = row.managed
-                            ? `${this.rows.filter((item) => item.providerId === row.providerId && item.label).length} accounts`
-                            : row.source === "environment" || row.source === "runtime"
-                                ? `${row.source}${row.sourceLabel ? ` · ${row.sourceLabel}` : ""} (view only)`
-                                : "configured";
-                        body.push(`${selected} ${theme.fg("accent", row.name)}${theme.fg("dim", `  ${state}`)}`);
-                    }
-                    else {
-                        const health = row.cooldownUntil && row.cooldownUntil > Date.now()
-                            ? `cooldown ${Math.ceil((row.cooldownUntil - Date.now()) / 60000)}m`
-                            : "ready";
-                        const identity = row.accountId
-                            ? ` · ${row.accountId.length > 12 ? `${row.accountId.slice(0, 8)}…${row.accountId.slice(-4)}` : row.accountId}`
-                            : "";
-                        body.push(`${selected}   ${row.preferred ? theme.fg("success", "●") : " "} ${row.label}${theme.fg("dim", identity)}  ${theme.fg("dim", health)}${row.preferred ? theme.fg("accent", "  preferred") : ""}`);
-                    }
-                }
-                if (reserveIndicator)
-                    body.push(theme.fg("dim", `(${this.selected + 1}/${totalEntries})`));
-                if (showNotice)
-                    body.push(theme.fg("dim", this.notice));
-            }
-        }
-        return body.map((line) => truncateToWidth(line, width));
-    }
-}
+var M=Object.defineProperty;var p=(f,e)=>M(f,"name",{value:e,configurable:!0});import{LoginDialogComponent as R}from"@earendil-works/pi-coding-agent";import{Input as D,matchesKey as h,truncateToWidth as E}from"@earendil-works/pi-tui";import{execFile as B}from"node:child_process";import{dialogAuthInteraction as N}from"../../../core/auth-interaction.js";import{isManagedProvider as A,promoteSubscription as U,readSubscriptionPool as S,renameSubscription as O}from"../../../core/subscription-state.js";import{removeProviderRow as T}from"../../../core/provider-management.js";import{cliClient as C}from"../../api-client.js";import{fitTail as k,theme as c,visibleRange as _}from"../../../core/tui/panel.js";function F(f,e){const t=f.getProviders().filter(i=>i.auth.oauth!==void 0),o=new Set(t.map(i=>i.id)),n=new Set;return[...t.map(i=>({providerId:i.id,name:i.name,managed:A(i.id),authType:"oauth"})),...e.getAll().map(i=>({providerId:i.provider,name:e.getProviderDisplayName(i.provider),managed:A(i.provider),authType:o.has(i.provider)?"oauth":"api_key"}))].filter(i=>!n.has(i.providerId)&&!!n.add(i.providerId))}p(F,"buildProviderCatalog");function V(f,e){return e||f instanceof Error&&f.name==="AbortError"?"Login cancelled":`Login error: ${f instanceof Error?f.message:String(f)}`}p(V,"classifyLoginFailure");class X{static{p(this,"ProviderPanel")}tui;agentDir;runtime;registry;renameInput=new D;rows=[];selected=0;mode="list";notice="";catalog=[];catalogIndex=0;loginProvider;loginFlow;mutationInFlight=!1;onChange;constructor(e,t,o,n){this.tui=e,this.agentDir=t,this.runtime=o,this.registry=n,this.renameInput.onSubmit=()=>this.rename(),this.renameInput.onEscape=()=>{this.mode="list"},this.reload()}notifyChange(){this.onChange?.(),this.tui.requestRender()}reloadAfterAuthChange(){this.reload(),this.registry.refresh().then(()=>{this.reload(),this.notifyChange()})}reload(){const e=this.registry,t=[];for(const o of F(this.runtime,e)){const n=e.getProviderAuthStatus(o.providerId);if(o.managed){const i=S(o.providerId);if(i.length===0&&!n.source)continue;t.push({...o,configured:i.length>0||n.configured,source:n.source,sourceLabel:n.label}),i.forEach((a,s)=>t.push({...o,label:a.label,preferred:s===0,cooldownUntil:a.rateLimitedUntil,accountId:a.accountId}));continue}n.source&&t.push({...o,configured:n.configured,source:n.source,sourceLabel:n.label})}this.rows=t,this.selected=Math.min(this.selected,Math.max(0,t.length))}selectedRow(){return this.rows[this.selected]}openBrowser(e){const t=process.platform==="darwin"?"open":process.platform==="win32"?"cmd":"xdg-open",o=process.platform==="win32"?["/c","start","",e]:[e];B(t,o,{timeout:5e3},()=>{})}openCatalog(){this.catalog=F(this.runtime,this.registry),this.catalogIndex=0,this.mode="catalog"}startLogin(e,t){this.loginProvider=e;let o;const n=p(r=>{!o.active||this.loginFlow!==o||(o.active=!1,this.loginFlow=void 0,this.mode="list",this.notice=r,this.reloadAfterAuthChange(),this.notifyChange())},"complete"),i=new R(this.tui,e.providerId,(r,u)=>{r||n(u?`Login failed: ${u}`:"Login cancelled")},e.name);o={dialog:i,active:!0,committing:!1},this.loginFlow=o,this.mode="login";const a=i.handleInput.bind(i);i.handleInput=r=>{o.committing||a(r)};const s=p(()=>o.active&&this.loginFlow===o&&!i.signal.aborted,"isActive"),d=p(()=>s()?(o.committing=!0,i.showDetails(["Saving credentials\u2026"]),!0):!1,"beginCommit"),g=p(r=>{n(V(r,i.signal.aborted))},"fail");if(e.authType==="api_key"){i.showPrompt(`Enter API key for ${e.name}:`,"sk-...").then(async r=>{if(s()){if(!r.trim()){n("No key entered \u2014 login cancelled");return}d()&&(await C().installCredential(e.providerId,{kind:"api_key",api_key:r.trim()}),n(`API key saved for ${e.name}`))}}).catch(g);return}const $=N(i,{openBrowser:p(r=>this.openBrowser(r),"openBrowser"),onChange:p(()=>this.notifyChange(),"onChange"),isActive:s}),m=this.runtime.getProvider(e.providerId)?.auth.oauth;if(!m){n(`Unknown OAuth provider: ${e.providerId}`);return}if(!e.managed){m.login($).then(async r=>{if(!s()||!d())return;const{type:u,access:w,refresh:I,expires:y,...v}=r;await C().installCredential(e.providerId,{kind:"oauth",access_token:w,refresh_token:I,expires_at:new Date(y).toISOString(),...Object.keys(v).length>0?{extra:v}:{}}),s()&&n(`Logged in to ${e.name}`)}).catch(g);return}const b=Math.max(0,...S(e.providerId).map(r=>r.lastRateLimitedAt));m.login($).then(async r=>{if(!s()||!d())return;const u=typeof r.accountId=="string"&&r.accountId.trim()?r.accountId.trim():void 0;await C().installCredential(e.providerId,{kind:"managed_account",...t?{label:t}:{},...t?{}:{auto_label:!0},...u?{account_id:u}:{},access_token:r.access,refresh_token:r.refresh,expires_at:new Date(r.expires).toISOString(),last_rate_limited_at:b}),s()&&n(`Logged in to ${e.name}`)}).catch(g)}isNestedFlowActive(){return this.mode==="login"}dispose(){const e=this.loginFlow;e&&(e.active=!1,this.loginFlow=void 0,e.dialog.handleInput("\x1B"))}runMutation(e){this.mutationInFlight||(this.mutationInFlight=!0,e().catch(t=>{this.notice=t instanceof Error?t.message:String(t)}).finally(()=>{this.mutationInFlight=!1,this.notifyChange()}))}rename(){const e=this.selectedRow();!e?.managed||!e.label||(this.mode="list",this.runMutation(async()=>{await O(e.providerId,e.label,this.renameInput.getValue()),this.notice=`Renamed ${e.name} account`,this.reload()}))}remove(e){this.runMutation(async()=>{this.notice=await T(this.agentDir,e),this.reloadAfterAuthChange()})}promote(e){this.runMutation(async()=>{await U(e.providerId,e.label),this.notice=`Preferred ${e.name} account`,this.reload()})}handleInput(e){if(this.mode==="login")return this.loginFlow?.dialog.handleInput(e),!0;if(this.mutationInFlight)return!0;if(this.mode==="rename"||this.mode==="label")return this.renameInput.handleInput(e),!0;if(this.mode==="catalog"){if(h(e,"escape"))return this.mode="list",!0;if(h(e,"j")||h(e,"down"))return this.catalogIndex=Math.min(this.catalog.length-1,this.catalogIndex+1),!0;if(h(e,"k")||h(e,"up"))return this.catalogIndex=Math.max(0,this.catalogIndex-1),!0;if(h(e,"enter")){const n=this.catalog[this.catalogIndex];return n.managed?(this.loginProvider=n,this.renameInput.setValue(""),this.renameInput.onSubmit=()=>{const i=this.renameInput.getValue().trim();i&&this.startLogin(n,i)},this.mode="label"):this.startLogin(n),!0}return!0}if(this.mode==="remove"){if(h(e,"y")||h(e,"enter")){const n=this.selectedRow();n&&(n.managed||n.configured)&&this.remove(n)}return this.mode="list",!0}if(h(e,"j")||h(e,"down"))return this.selected=Math.min(this.rows.length,this.selected+1),!0;if(h(e,"k")||h(e,"up"))return this.selected=Math.max(0,this.selected-1),!0;const t=this.selectedRow();if(h(e,"p")&&t?.managed&&t.label)return this.promote(t),!0;if(h(e,"r")&&t?.managed&&t.label)return this.renameInput.setValue(t.label),this.renameInput.onSubmit=()=>this.rename(),this.mode="rename",!0;if(h(e,"x")&&(t?.managed||t?.configured))return this.mode="remove",!0;if(h(e,"a"))return this.openCatalog(),!0;const o=t?.source==="environment"||t?.source==="runtime";return h(e,"l")&&t&&!o?(t.managed&&t.label?this.startLogin(t,t.label):this.startLogin(t),!0):h(e,"enter")?(t&&!o?this.startLogin(t,t.managed&&t.label?t.label:void 0):t||this.openCatalog(),!0):!1}badge(){return String(this.rows.filter(e=>e.label===void 0).length)}render(e,t){const o=c.fg("accent",c.bold("Providers")),n=c.fg("dim",`${this.rows.filter(s=>s.label===void 0).length} configured`),i=Math.max(1,t);let a;if(this.mode==="login")a=k(this.loginFlow?.dialog.render(e)??[],i);else if(this.mode==="rename"||this.mode==="label")a=k([o,n,"",c.fg("accent",this.mode==="rename"?"Rename account":`Name the ${this.loginProvider?.name??"provider"} account`),...this.renameInput.render(Math.max(1,e-8))],i);else if(this.mode==="remove"){const s=this.selectedRow(),d=s?.label??(s?.managed?`${s.name} \xB7 all accounts`:s?.name??"account");a=k([o,n,"",c.fg("warning",`Remove ${d}? y/enter confirm \xB7 any other key cancel`)],i)}else{const s=[o,n].slice(0,Math.max(0,i-1)),d=i-s.length;if(a=[...s],this.mode==="catalog"){const g=this.catalog.length,m=g>d&&d>=2,b=m?d-1:d,{start:r,end:u}=_(g,this.catalogIndex,b);let w=d-(u-r)-(m?1:0);w>0&&(a.push(c.fg("dim","Select a provider to add \xB7 esc back")),w-=1);for(let I=r;I<u;I++){const y=this.catalog[I];a.push(`${I===this.catalogIndex?c.fg("accent","\u25B6"):" "} ${y.name}`)}m&&a.push(c.fg("dim",`(${this.catalogIndex+1}/${g})`))}else{const g=this.rows.length+1,m=g>d&&d>=2,b=m?d-1:d,{start:r,end:u}=_(g,this.selected,b);let w=d-(u-r)-(m?1:0);const I=this.rows.length===0&&w>0;I&&(w-=1);const y=!!this.notice&&w>0;I&&a.push(c.fg("warning","No provider configured yet."));for(let v=r;v<u;v++){if(v===this.rows.length){a.push(`${this.selected===this.rows.length?c.fg("accent","\u25B6"):" "} ${c.fg("accent","\uFF0B Add provider")}`);continue}const l=this.rows[v],P=v===this.selected?c.fg("accent","\u25B6"):" ";if(l.label){const L=l.cooldownUntil&&l.cooldownUntil>Date.now()?`cooldown ${Math.ceil((l.cooldownUntil-Date.now())/6e4)}m`:"ready",x=l.accountId?` \xB7 ${l.accountId.length>12?`${l.accountId.slice(0,8)}\u2026${l.accountId.slice(-4)}`:l.accountId}`:"";a.push(`${P}   ${l.preferred?c.fg("success","\u25CF"):" "} ${l.label}${c.fg("dim",x)}  ${c.fg("dim",L)}${l.preferred?c.fg("accent","  preferred"):""}`)}else{const L=l.managed?`${this.rows.filter(x=>x.providerId===l.providerId&&x.label).length} accounts`:l.source==="environment"||l.source==="runtime"?`${l.source}${l.sourceLabel?` \xB7 ${l.sourceLabel}`:""} (view only)`:"configured";a.push(`${P} ${c.fg("accent",l.name)}${c.fg("dim",`  ${L}`)}`)}}m&&a.push(c.fg("dim",`(${this.selected+1}/${g})`)),y&&a.push(c.fg("dim",this.notice))}}return a.map(s=>E(s,e))}}export{X as ProviderPanel,F as buildProviderCatalog,V as classifyLoginFailure};