@openrig/cli 0.6.6 → 0.6.7

package/dist/provider-auth.d.ts

@@ -0,0 +1,32 @@
+export interface ProviderAuthDeps {
+    exec: (cmd: string) => string;
+    readFile: (path: string) => string | null;
+    env?: NodeJS.ProcessEnv;
+}
+export interface ProviderCheck {
+    name: string;
+    status: "pass" | "fail" | "skipped";
+    message: string;
+    reason?: string;
+    fix?: string;
+}
+/** Issue #194 — how the Codex provider selected in `$CODEX_HOME/config.toml`
+ *  authenticates. Only an explicit provider entry with
+ *  `requires_openai_auth = false` and an `env_key` uses its credential
+ *  variable; every unresolved case keeps the OpenAI login check. Other Codex
+ *  config layers are not resolved here. The daemon's kernel probe
+ *  (`selectCodexProviderAuth` in kernel-boot.ts) carries the same rule. */
+export type CodexProviderAuth = {
+    kind: "openai-login";
+    unresolved?: string;
+} | {
+    kind: "env-key";
+    providerId: string;
+    envKey: string;
+};
+export declare function selectCodexProviderAuth(configToml: string | null): CodexProviderAuth;
+export declare function checkClaudeAuth(deps: ProviderAuthDeps, installed: boolean): ProviderCheck;
+export declare function checkCodexAuth(deps: ProviderAuthDeps, installed: boolean): ProviderCheck;
+/** Read-only checks: neither installs a CLI nor starts a login or agent session. */
+export declare function checkProviderReadiness(deps: ProviderAuthDeps): ProviderCheck[];
+//# sourceMappingURL=provider-auth.d.ts.map

package/dist/provider-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth.d.ts","sourceRoot":"","sources":["../src/provider-auth.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IAC9B,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;2EAK2E;AAC3E,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5D,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,iBAAiB,CAuBpF;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,GAAG,aAAa,CAsBzF;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,GAAG,aAAa,CA2CxF;AAED,oFAAoF;AACpF,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,GAAG,aAAa,EAAE,CAqB9E"}

package/dist/provider-auth.js

@@ -0,0 +1,128 @@
+import path from "node:path";
+import { parse as parseToml } from "smol-toml";
+import { resolveCodexHome } from "./lib/codex-auth.js";
+export function selectCodexProviderAuth(configToml) {
+    if (configToml === null)
+        return { kind: "openai-login" };
+    let config;
+    try {
+        config = parseToml(configToml);
+    }
+    catch {
+        return { kind: "openai-login", unresolved: "config.toml could not be parsed" };
+    }
+    if (Object.hasOwn(config, "profile")) {
+        return { kind: "openai-login", unresolved: "config.toml selects a legacy profile, which is not resolved here" };
+    }
+    const providerId = config["model_provider"];
+    const providers = config["model_providers"];
+    if (typeof providerId !== "string" || !providers || typeof providers !== "object" || !Object.hasOwn(providers, providerId)) {
+        return { kind: "openai-login" };
+    }
+    const entry = providers[providerId];
+    if (!entry || typeof entry !== "object")
+        return { kind: "openai-login" };
+    const { requires_openai_auth: requiresOpenAiAuth, env_key: envKey } = entry;
+    if (requiresOpenAiAuth !== false || typeof envKey !== "string" || !/^[A-Za-z_][A-Za-z0-9_]*$/.test(envKey)) {
+        return { kind: "openai-login" };
+    }
+    return { kind: "env-key", providerId, envKey };
+}
+export function checkClaudeAuth(deps, installed) {
+    if (installed) {
+        try {
+            deps.exec("claude auth status");
+            return { name: "claude_auth", status: "pass", message: "Claude Code authentication available." };
+        }
+        catch (err) {
+            return {
+                name: "claude_auth",
+                status: "fail",
+                message: `Claude Code is installed but not ready to launch: ${err.message}`,
+                reason: "Claude Code seats cannot launch until the Claude CLI is logged in and usable.",
+                fix: "Run `claude auth login` or open `claude` once to complete authentication, then rerun `rig setup`.",
+            };
+        }
+    }
+    else {
+        return {
+            name: "claude_auth",
+            status: "skipped",
+            message: "Skipped: Claude Code is not installed.",
+            reason: "Authentication cannot be checked until the Claude Code CLI is installed.",
+        };
+    }
+}
+export function checkCodexAuth(deps, installed) {
+    if (installed) {
+        const env = deps.env ?? process.env;
+        const codexAuth = selectCodexProviderAuth(deps.readFile(path.join(resolveCodexHome(env).codexHome, "config.toml")));
+        if (codexAuth.kind === "env-key") {
+            if (env[codexAuth.envKey]?.trim()) {
+                return {
+                    name: "codex_auth",
+                    status: "pass",
+                    message: `Codex provider "${codexAuth.providerId}" does not use an OpenAI login, and its credential variable ${codexAuth.envKey} is set. This confirms a local credential is available, not that the provider accepts it or that managed seats receive it.`,
+                };
+            }
+            else {
+                return {
+                    name: "codex_auth",
+                    status: "fail",
+                    message: `Codex provider "${codexAuth.providerId}" needs ${codexAuth.envKey}, which is not set in this environment.`,
+                    reason: "Codex seats using this provider cannot authenticate without that variable.",
+                    fix: `Export ${codexAuth.envKey} in the environment that runs rig setup and the OpenRig daemon, then rerun \`rig setup\`.`,
+                };
+            }
+        }
+        else {
+            try {
+                deps.exec("codex login status");
+                return { name: "codex_auth", status: "pass", message: "Codex authentication available." };
+            }
+            catch (err) {
+                const unresolved = codexAuth.unresolved ? ` (${codexAuth.unresolved}, so the OpenAI login was checked)` : "";
+                return {
+                    name: "codex_auth",
+                    status: "fail",
+                    message: `Codex is installed but not ready to launch${unresolved}: ${err.message}`,
+                    reason: "Codex seats cannot launch until the Codex CLI is logged in and usable.",
+                    fix: "Run `codex login` and complete authentication, then rerun `rig setup`.",
+                };
+            }
+        }
+    }
+    else {
+        return {
+            name: "codex_auth",
+            status: "skipped",
+            message: "Skipped: Codex is not installed.",
+            reason: "Authentication cannot be checked until the Codex CLI is installed.",
+        };
+    }
+}
+/** Read-only checks: neither installs a CLI nor starts a login or agent session. */
+export function checkProviderReadiness(deps) {
+    const checks = [];
+    for (const [command, label, auth] of [
+        ["claude", "Claude Code", checkClaudeAuth],
+        ["codex", "Codex", checkCodexAuth],
+    ]) {
+        let installed = false;
+        try {
+            deps.exec(`${command} --version`);
+            installed = true;
+            checks.push({ name: `${command}_install`, status: "pass", message: `${label} available.` });
+        }
+        catch {
+            checks.push({
+                name: `${command}_install`, status: "fail", message: `${label} not found.`,
+                reason: `${label} authentication cannot be checked until its CLI is installed.`,
+                fix: "Run `rig setup` to install the runtime, then rerun `rig doctor`.",
+            });
+        }
+        checks.push(auth(deps, installed));
+    }
+    return checks;
+}
+//# sourceMappingURL=provider-auth.js.map

package/dist/provider-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth.js","sourceRoot":"","sources":["../src/provider-auth.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AA0BvD,MAAM,UAAU,uBAAuB,CAAC,UAAyB;IAC/D,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IACzD,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,UAAU,CAA4B,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,iCAAiC,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,kEAAkE,EAAE,CAAC;IAClH,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC5C,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC;QAC3H,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAClC,CAAC;IACD,MAAM,KAAK,GAAI,SAAqC,CAAC,UAAU,CAAC,CAAC;IACjE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IACzE,MAAM,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,KAAgC,CAAC;IACvG,IAAI,kBAAkB,KAAK,KAAK,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3G,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAClC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAsB,EAAE,SAAkB;IACxE,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAChC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;QACnG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,IAAI,EAAE,aAAa;gBACnB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,qDAAsD,GAAa,CAAC,OAAO,EAAE;gBACtF,MAAM,EAAE,+EAA+E;gBACvF,GAAG,EAAE,mGAAmG;aACzG,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,wCAAwC;YACjD,MAAM,EAAE,0EAA0E;SACnF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAsB,EAAE,SAAkB;IACvE,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACpC,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;QACpH,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;gBAClC,OAAO;oBACL,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,mBAAmB,SAAS,CAAC,UAAU,+DAA+D,SAAS,CAAC,MAAM,4HAA4H;iBAC5P,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO;oBACL,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,mBAAmB,SAAS,CAAC,UAAU,WAAW,SAAS,CAAC,MAAM,yCAAyC;oBACpH,MAAM,EAAE,4EAA4E;oBACpF,GAAG,EAAE,UAAU,SAAS,CAAC,MAAM,2FAA2F;iBAC3H,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;gBAChC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;YAC5F,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,UAAU,oCAAoC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7G,OAAO;oBACL,IAAI,EAAE,YAAY;oBAClB,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,6CAA6C,UAAU,KAAM,GAAa,CAAC,OAAO,EAAE;oBAC7F,MAAM,EAAE,wEAAwE;oBAChF,GAAG,EAAE,wEAAwE;iBAC9E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,kCAAkC;YAC3C,MAAM,EAAE,oEAAoE;SAC7E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,sBAAsB,CAAC,IAAsB;IAC3D,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI;QACnC,CAAC,QAAQ,EAAE,aAAa,EAAE,eAAe,CAAC;QAC1C,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC;KAC1B,EAAE,CAAC;QACX,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,YAAY,CAAC,CAAC;YAClC,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,OAAO,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,aAAa,EAAE,CAAC,CAAC;QAC9F,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,GAAG,OAAO,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,aAAa;gBAC1E,MAAM,EAAE,GAAG,KAAK,+DAA+D;gBAC/E,GAAG,EAAE,kEAAkE;aACxE,CAAC,CAAC;QACL,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/terminal-window.d.ts

@@ -0,0 +1,19 @@
+import type { DaemonClient } from "./client.js";
+import type { OpenViewResult } from "./commands/terminal.js";
+export interface WindowDeps {
+    platform: NodeJS.Platform;
+    env: NodeJS.ProcessEnv;
+    exists(file: string): boolean;
+    exec(file: string, args: string[], timeoutMs?: number): Promise<string>;
+    launch(file: string, args: string[]): Promise<void>;
+    sleep(ms: number): Promise<void>;
+    id(): string;
+    herdrConfig(socketPath: string, columns?: number): string;
+    /** Hosting terminal measurement also works for an agent shell tool with piped stdio. */
+    columns?(): Promise<number | undefined>;
+    notice?(message: string): void;
+}
+export declare function defaultWindowDeps(): WindowDeps;
+/** Render the daemon's existing composition; never rediscover/relaunch kernel seats here. */
+export declare function openTerminalWindow(client: DaemonClient, view: string, requestedProvider?: string, deps?: WindowDeps, expectedPlan?: string): Promise<OpenViewResult>;
+//# sourceMappingURL=terminal-window.d.ts.map

package/dist/terminal-window.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-window.d.ts","sourceRoot":"","sources":["../src/terminal-window.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAU7D,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,EAAE,IAAI,MAAM,CAAC;IACb,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1D,wFAAwF;IACxF,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC,MAAM,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,wBAAgB,iBAAiB,IAAI,UAAU,CA+C9C;AAuKD,6FAA6F;AAC7F,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,aAAsB,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAsOnL"}