@slopus/happy-agent-client 0.0.68 → 0.0.70

package/dist/oauthSignIn.js

@@ -0,0 +1,163 @@
+/**
+ * OAuth authorization code sign-in with PKCE for native apps (RFC 8252).
+ *
+ * These functions talk only to the authorization server a method names. The
+ * daemon that advertised the method is not trusted with credentials: it never
+ * sees the code, the verifier, or a refresh token, and a refresh token is only
+ * ever sent to the refresh URL recorded when it was issued.
+ */
+import { Value } from "@sinclair/typebox/value";
+import { HappyAgentOAuthError } from "./HappyAgentOAuthError.js";
+import { oauthAuthenticationMethodSchema, oauthErrorResponseSchema, oauthTokenResponseSchema, } from "./protocol/authentication.js";
+/** Start a sign-in: generate state and PKCE, and build the authorization URL. */
+export async function beginOAuthSignIn(method, options) {
+    if (!Value.Check(oauthAuthenticationMethodSchema, method)) {
+        throw new HappyAgentOAuthError("invalid_response", "The sign-in method is not valid.");
+    }
+    const authorizationUrl = secureUrl(method.authorizationUrl);
+    secureUrl(method.tokenUrl);
+    if (method.refreshUrl !== undefined)
+        secureUrl(method.refreshUrl);
+    const redirect = new URL(options.redirectUri);
+    if (redirect.hash !== "") {
+        throw new HappyAgentOAuthError("insecure_url", "The redirect URI must not have a fragment.");
+    }
+    const state = randomBase64Url(16);
+    const codeVerifier = randomBase64Url(32);
+    const challenge = base64Url(new Uint8Array(await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(codeVerifier))));
+    const parameters = {
+        response_type: "code",
+        client_id: method.clientId,
+        redirect_uri: options.redirectUri,
+        state,
+        code_challenge: challenge,
+        code_challenge_method: "S256",
+        ...(method.scope === undefined ? {} : { scope: method.scope }),
+    };
+    for (const [name, value] of Object.entries(parameters)) {
+        authorizationUrl.searchParams.set(name, value);
+    }
+    return {
+        codeVerifier,
+        host: authorizationUrl.host,
+        method,
+        redirectUri: options.redirectUri,
+        state,
+        url: authorizationUrl.toString(),
+    };
+}
+/** Finish a sign-in from the redirect it produced, exchanging the code at the method's token URL. */
+export async function completeOAuthSignIn(signIn, callbackUrl, options = {}) {
+    const parameters = new URL(callbackUrl.toString()).searchParams;
+    if (parameters.get("state") !== signIn.state) {
+        throw new HappyAgentOAuthError("state_mismatch", "The sign-in result does not match this sign-in attempt.");
+    }
+    const error = parameters.get("error");
+    if (error !== null) {
+        throw new HappyAgentOAuthError(error, parameters.get("error_description") ?? "The sign-in was not completed.");
+    }
+    const code = parameters.get("code");
+    if (code === null || code.length === 0) {
+        throw new HappyAgentOAuthError("invalid_response", "The sign-in result does not contain an authorization code.");
+    }
+    return await requestTokens(signIn.method.tokenUrl, {
+        grant_type: "authorization_code",
+        code,
+        redirect_uri: signIn.redirectUri,
+        client_id: signIn.method.clientId,
+        code_verifier: signIn.codeVerifier,
+    }, {
+        clientId: signIn.method.clientId,
+        refreshToken: null,
+        refreshUrl: signIn.method.refreshUrl ?? null,
+    }, options);
+}
+/** Exchange the credential's refresh token at the refresh URL recorded when it was issued. */
+export async function refreshOAuthCredential(credential, options = {}) {
+    if (credential.refreshToken === null || credential.refreshUrl === null) {
+        throw new HappyAgentOAuthError("refresh_unavailable", "This sign-in cannot be refreshed. Sign in again.");
+    }
+    return await requestTokens(credential.refreshUrl, {
+        grant_type: "refresh_token",
+        refresh_token: credential.refreshToken,
+        client_id: credential.clientId,
+    }, {
+        clientId: credential.clientId,
+        refreshToken: credential.refreshToken,
+        refreshUrl: credential.refreshUrl,
+    }, options);
+}
+async function requestTokens(url, form, previous, options) {
+    const fetch = options.fetch ?? globalThis.fetch.bind(globalThis);
+    let response;
+    try {
+        response = await fetch(secureUrl(url), {
+            method: "POST",
+            headers: {
+                accept: "application/json",
+                "content-type": "application/x-www-form-urlencoded",
+            },
+            body: new URLSearchParams(form).toString(),
+            redirect: "error",
+            signal: options.signal ?? null,
+        });
+    }
+    catch (error) {
+        if (options.signal?.aborted === true)
+            throw error;
+        throw new HappyAgentOAuthError("network_error", "The sign-in server could not be reached.");
+    }
+    let body;
+    try {
+        body = await response.json();
+    }
+    catch {
+        body = undefined;
+    }
+    if (!response.ok) {
+        if (Value.Check(oauthErrorResponseSchema, body)) {
+            throw new HappyAgentOAuthError(body.error, body.error_description ?? "The sign-in server rejected the request.");
+        }
+        throw new HappyAgentOAuthError("invalid_response", `The sign-in server answered ${String(response.status)}.`);
+    }
+    if (!Value.Check(oauthTokenResponseSchema, body)) {
+        throw new HappyAgentOAuthError("invalid_response", "The sign-in server returned an invalid token response.");
+    }
+    return {
+        accessToken: body.access_token,
+        clientId: previous.clientId,
+        expiresAt: body.expires_in === undefined ? null : Date.now() + body.expires_in * 1_000,
+        refreshToken: body.refresh_token ?? previous.refreshToken,
+        refreshUrl: previous.refreshUrl,
+    };
+}
+/** Credentials only travel over https, or plain http to this machine. */
+function secureUrl(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new HappyAgentOAuthError("insecure_url", "A sign-in URL is not valid.");
+    }
+    const loopback = url.hostname === "localhost" ||
+        url.hostname === "[::1]" ||
+        /^127(?:\.\d{1,3}){3}$/u.test(url.hostname);
+    if ((url.protocol !== "https:" && !(url.protocol === "http:" && loopback)) ||
+        url.username !== "" ||
+        url.password !== "" ||
+        url.hash !== "") {
+        throw new HappyAgentOAuthError("insecure_url", "Sign-in URLs must use https, or http only on this machine.");
+    }
+    return url;
+}
+function randomBase64Url(bytes) {
+    return base64Url(globalThis.crypto.getRandomValues(new Uint8Array(bytes)));
+}
+function base64Url(bytes) {
+    let binary = "";
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/u, "");
+}
+//# sourceMappingURL=oauthSignIn.js.map

package/dist/oauthSignIn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthSignIn.js","sourceRoot":"","sources":["../sources/oauthSignIn.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAEhD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EACH,+BAA+B,EAC/B,wBAAwB,EACxB,wBAAwB,GAE3B,MAAM,8BAA8B,CAAC;AAiCtC,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAClC,MAAiC,EACjC,OAAyC;IAEzC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,+BAA+B,EAAE,MAAM,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,kCAAkC,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,gBAAgB,GAAG,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC5D,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3B,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAAE,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9C,IAAI,QAAQ,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,oBAAoB,CAC1B,cAAc,EACd,4CAA4C,CAC/C,CAAC;IACN,CAAC;IACD,MAAM,KAAK,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,YAAY,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,SAAS,CACvB,IAAI,UAAU,CACV,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CACjC,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CACzC,CACJ,CACJ,CAAC;IACF,MAAM,UAAU,GAAG;QACf,aAAa,EAAE,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,YAAY,EAAE,OAAO,CAAC,WAAW;QACjC,KAAK;QACL,cAAc,EAAE,SAAS;QACzB,qBAAqB,EAAE,MAAM;QAC7B,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;KACjE,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACrD,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IACD,OAAO;QACH,YAAY;QACZ,IAAI,EAAE,gBAAgB,CAAC,IAAI;QAC3B,MAAM;QACN,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,KAAK;QACL,GAAG,EAAE,gBAAgB,CAAC,QAAQ,EAAE;KACnC,CAAC;AACN,CAAC;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,MAAmB,EACnB,WAAyB,EACzB,OAAO,GAAwB,EAAE;IAEjC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC;IAChE,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;QAC3C,MAAM,IAAI,oBAAoB,CAC1B,gBAAgB,EAChB,yDAAyD,CAC5D,CAAC;IACN,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,oBAAoB,CAC1B,KAAK,EACL,UAAU,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,gCAAgC,CAC1E,CAAC;IACN,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,oBAAoB,CAC1B,kBAAkB,EAClB,4DAA4D,CAC/D,CAAC;IACN,CAAC;IACD,OAAO,MAAM,aAAa,CACtB,MAAM,CAAC,MAAM,CAAC,QAAQ,EACtB;QACI,UAAU,EAAE,oBAAoB;QAChC,IAAI;QACJ,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;QACjC,aAAa,EAAE,MAAM,CAAC,YAAY;KACrC,EACD;QACI,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;QAChC,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI;KAC/C,EACD,OAAO,CACV,CAAC;AACN,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,UAA2B,EAC3B,OAAO,GAAwB,EAAE;IAEjC,IAAI,UAAU,CAAC,YAAY,KAAK,IAAI,IAAI,UAAU,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QACrE,MAAM,IAAI,oBAAoB,CAC1B,qBAAqB,EACrB,kDAAkD,CACrD,CAAC;IACN,CAAC;IACD,OAAO,MAAM,aAAa,CACtB,UAAU,CAAC,UAAU,EACrB;QACI,UAAU,EAAE,eAAe;QAC3B,aAAa,EAAE,UAAU,CAAC,YAAY;QACtC,SAAS,EAAE,UAAU,CAAC,QAAQ;KACjC,EACD;QACI,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,UAAU,EAAE,UAAU,CAAC,UAAU;KACpC,EACD,OAAO,CACV,CAAC;AACN,CAAC;AAED,KAAK,UAAU,aAAa,CACxB,GAAW,EACX,IAA4B,EAC5B,QAIC,EACD,OAA4B;IAE5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjE,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACD,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACL,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,mCAAmC;aACtD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;YAC1C,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;SACjC,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI;YAAE,MAAM,KAAK,CAAC;QAClD,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,0CAA0C,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACD,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACL,IAAI,GAAG,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,KAAK,CAAC,wBAAwB,EAAE,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,oBAAoB,CAC1B,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,iBAAiB,IAAI,0CAA0C,CACvE,CAAC;QACN,CAAC;QACD,MAAM,IAAI,oBAAoB,CAC1B,kBAAkB,EAClB,+BAA+B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAC5D,CAAC;IACN,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,wBAAwB,EAAE,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,oBAAoB,CAC1B,kBAAkB,EAClB,wDAAwD,CAC3D,CAAC;IACN,CAAC;IACD,OAAO;QACH,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,SAAS,EAAE,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,KAAK;QACtF,YAAY,EAAE,IAAI,CAAC,aAAa,IAAI,QAAQ,CAAC,YAAY;QACzD,UAAU,EAAE,QAAQ,CAAC,UAAU;KAClC,CAAC;AACN,CAAC;AAED,yEAAyE;AACzE,SAAS,SAAS,CAAC,KAAa;IAC5B,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACD,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,oBAAoB,CAAC,cAAc,EAAE,6BAA6B,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,QAAQ,GACV,GAAG,CAAC,QAAQ,KAAK,WAAW;QAC5B,GAAG,CAAC,QAAQ,KAAK,OAAO;QACxB,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChD,IACI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,CAAC;QACtE,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,IAAI,KAAK,EAAE,EACjB,CAAC;QACC,MAAM,IAAI,oBAAoB,CAC1B,cAAc,EACd,4DAA4D,CAC/D,CAAC;IACN,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IAClC,OAAO,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB;IAChC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACtF,CAAC"}

package/dist/protocol/authentication.d.ts

@@ -1,21 +1,29 @@
 /** Authentication discovery: whether a request is signed in, and how a person signs in. */
 import { type Static } from "@sinclair/typebox";
 /**
- * A sign-in completed in the system browser.
+ * A sign-in completed with the OAuth authorization code flow and PKCE.
  *
- * The page signs the person in and redirects to the client's `redirectUri` with
- * `#token=<jwt>&state=<state>` in the fragment.
+ * The client talks to these endpoints directly. The daemon never receives the
+ * authorization code, the PKCE verifier, or a refresh token.
  */
-export declare const browserAuthenticationMethodSchema: import("@sinclair/typebox").TObject<{
-    type: import("@sinclair/typebox").TLiteral<"browser">;
+export declare const oauthAuthenticationMethodSchema: import("@sinclair/typebox").TObject<{
+    type: import("@sinclair/typebox").TLiteral<"oauth">;
     /** Stable method identity, such as `"jwt"`. */
     id: import("@sinclair/typebox").TString;
     /** Human-readable method name for display. */
     name: import("@sinclair/typebox").TString;
-    /** The page to open in the system browser. */
-    url: import("@sinclair/typebox").TString;
+    /** The authorization endpoint, opened in the system browser. */
+    authorizationUrl: import("@sinclair/typebox").TString;
+    /** Where the authorization code is exchanged for tokens. */
+    tokenUrl: import("@sinclair/typebox").TString;
+    /** Where a refresh token is exchanged; absent when refresh is unavailable. */
+    refreshUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    /** The public OAuth client identifier. */
+    clientId: import("@sinclair/typebox").TString;
+    /** The space-separated scope requested during authorization. */
+    scope: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
 }>;
-export type BrowserAuthenticationMethod = Static<typeof browserAuthenticationMethodSchema>;
+export type OAuthAuthenticationMethod = Static<typeof oauthAuthenticationMethodSchema>;
 /**
  * One way to sign in, discriminated by `type`.
  *
@@ -23,23 +31,23 @@ export type BrowserAuthenticationMethod = Static<typeof browserAuthenticationMet
  * not recognize.
  */
 export declare const authenticationMethodSchema: import("@sinclair/typebox").TObject<{
-    type: import("@sinclair/typebox").TLiteral<"browser">;
+    type: import("@sinclair/typebox").TLiteral<"oauth">;
     /** Stable method identity, such as `"jwt"`. */
     id: import("@sinclair/typebox").TString;
     /** Human-readable method name for display. */
     name: import("@sinclair/typebox").TString;
-    /** The page to open in the system browser. */
-    url: import("@sinclair/typebox").TString;
+    /** The authorization endpoint, opened in the system browser. */
+    authorizationUrl: import("@sinclair/typebox").TString;
+    /** Where the authorization code is exchanged for tokens. */
+    tokenUrl: import("@sinclair/typebox").TString;
+    /** Where a refresh token is exchanged; absent when refresh is unavailable. */
+    refreshUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    /** The public OAuth client identifier. */
+    clientId: import("@sinclair/typebox").TString;
+    /** The space-separated scope requested during authorization. */
+    scope: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
 }>;
 export type AuthenticationMethod = Static<typeof authenticationMethodSchema>;
-/** Query for `GET /v0/authentication`. */
-export declare const authenticationQuerySchema: import("@sinclair/typebox").TObject<{
-    /** Absolute URL without a fragment where the client receives the sign-in result. */
-    redirectUri: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
-    /** Client-generated value returned unchanged with the result; requires `redirectUri`. */
-    state: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
-}>;
-export type AuthenticationQuery = Static<typeof authenticationQuerySchema>;
 /** `GET /v0/authentication` */
 export declare const authenticationResponseSchema: import("@sinclair/typebox").TObject<{
     /** `true` only when the request carried a valid bearer token. */
@@ -48,27 +56,57 @@ export declare const authenticationResponseSchema: import("@sinclair/typebox").T
     userId: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
     /** Available sign-in methods in display order. */
     methods: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
-        type: import("@sinclair/typebox").TLiteral<"browser">;
+        type: import("@sinclair/typebox").TLiteral<"oauth">;
         /** Stable method identity, such as `"jwt"`. */
         id: import("@sinclair/typebox").TString;
         /** Human-readable method name for display. */
         name: import("@sinclair/typebox").TString;
-        /** The page to open in the system browser. */
-        url: import("@sinclair/typebox").TString;
+        /** The authorization endpoint, opened in the system browser. */
+        authorizationUrl: import("@sinclair/typebox").TString;
+        /** Where the authorization code is exchanged for tokens. */
+        tokenUrl: import("@sinclair/typebox").TString;
+        /** Where a refresh token is exchanged; absent when refresh is unavailable. */
+        refreshUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        /** The public OAuth client identifier. */
+        clientId: import("@sinclair/typebox").TString;
+        /** The space-separated scope requested during authorization. */
+        scope: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     }>>;
 }>;
 export type AuthenticationResponse = Static<typeof authenticationResponseSchema>;
 /** The additive `authentication` field of a `401` body. */
 export declare const authenticationChallengeSchema: import("@sinclair/typebox").TObject<{
     methods: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
-        type: import("@sinclair/typebox").TLiteral<"browser">;
+        type: import("@sinclair/typebox").TLiteral<"oauth">;
         /** Stable method identity, such as `"jwt"`. */
         id: import("@sinclair/typebox").TString;
         /** Human-readable method name for display. */
         name: import("@sinclair/typebox").TString;
-        /** The page to open in the system browser. */
-        url: import("@sinclair/typebox").TString;
+        /** The authorization endpoint, opened in the system browser. */
+        authorizationUrl: import("@sinclair/typebox").TString;
+        /** Where the authorization code is exchanged for tokens. */
+        tokenUrl: import("@sinclair/typebox").TString;
+        /** Where a refresh token is exchanged; absent when refresh is unavailable. */
+        refreshUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        /** The public OAuth client identifier. */
+        clientId: import("@sinclair/typebox").TString;
+        /** The space-separated scope requested during authorization. */
+        scope: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     }>>;
 }>;
 export type AuthenticationChallenge = Static<typeof authenticationChallengeSchema>;
+/** A successful OAuth token endpoint response (RFC 6749 section 5.1). */
+export declare const oauthTokenResponseSchema: import("@sinclair/typebox").TObject<{
+    access_token: import("@sinclair/typebox").TString;
+    token_type: import("@sinclair/typebox").TString;
+    expires_in: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
+    refresh_token: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+}>;
+export type OAuthTokenResponse = Static<typeof oauthTokenResponseSchema>;
+/** An OAuth error response (RFC 6749 section 5.2) or authorization error redirect. */
+export declare const oauthErrorResponseSchema: import("@sinclair/typebox").TObject<{
+    error: import("@sinclair/typebox").TString;
+    error_description: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+}>;
+export type OAuthErrorResponse = Static<typeof oauthErrorResponseSchema>;
 //# sourceMappingURL=authentication.d.ts.map

package/dist/protocol/authentication.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authentication.d.ts","sourceRoot":"","sources":["../../sources/protocol/authentication.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAE3F,OAAO,EAAE,KAAK,MAAM,EAAQ,MAAM,mBAAmB,CAAC;AAItD;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC;;IAE1C,+CAA+C;;IAE/C,8CAA8C;;IAE9C,8CAA8C;;EAEhD,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,MAAM,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE3F;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B;;IAfnC,+CAA+C;;IAE/C,8CAA8C;;IAE9C,8CAA8C;;EAWuC,CAAC;AAC1F,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE7E,0CAA0C;AAC1C,eAAO,MAAM,yBAAyB;IAClC,oFAAoF;;IAEpF,yFAAyF;;EAE3F,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE3E,+BAA+B;AAC/B,eAAO,MAAM,4BAA4B;IACrC,iEAAiE;;IAEjE,sFAAsF;;IAEtF,kDAAkD;;;QAjClD,+CAA+C;;QAE/C,8CAA8C;;QAE9C,8CAA8C;;;EA+BhD,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAEjF,2DAA2D;AAC3D,eAAO,MAAM,6BAA6B;;;QAvCtC,+CAA+C;;QAE/C,8CAA8C;;QAE9C,8CAA8C;;;EAqChD,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,OAAO,6BAA6B,CAAC,CAAC"}
+{"version":3,"file":"authentication.d.ts","sourceRoot":"","sources":["../../sources/protocol/authentication.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAE3F,OAAO,EAAE,KAAK,MAAM,EAAQ,MAAM,mBAAmB,CAAC;AAMtD;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B;;IAExC,+CAA+C;;IAE/C,8CAA8C;;IAE9C,gEAAgE;;IAEhE,4DAA4D;;IAE5D,8EAA8E;;IAE9E,0CAA0C;;IAE1C,gEAAgE;;EAElE,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,MAAM,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAEvF;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B;;IAvBnC,+CAA+C;;IAE/C,8CAA8C;;IAE9C,gEAAgE;;IAEhE,4DAA4D;;IAE5D,8EAA8E;;IAE9E,0CAA0C;;IAE1C,gEAAgE;;EAWmB,CAAC;AACxF,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE7E,+BAA+B;AAC/B,eAAO,MAAM,4BAA4B;IACrC,iEAAiE;;IAEjE,sFAAsF;;IAEtF,kDAAkD;;;QAhClD,+CAA+C;;QAE/C,8CAA8C;;QAE9C,gEAAgE;;QAEhE,4DAA4D;;QAE5D,8EAA8E;;QAE9E,0CAA0C;;QAE1C,gEAAgE;;;EAsBlE,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAEjF,2DAA2D;AAC3D,eAAO,MAAM,6BAA6B;;;QAtCtC,+CAA+C;;QAE/C,8CAA8C;;QAE9C,gEAAgE;;QAEhE,4DAA4D;;QAE5D,8EAA8E;;QAE9E,0CAA0C;;QAE1C,gEAAgE;;;EA4BlE,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEnF,yEAAyE;AACzE,eAAO,MAAM,wBAAwB;;;;;EAKnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEzE,sFAAsF;AACtF,eAAO,MAAM,wBAAwB;;;EAGnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,wBAAwB,CAAC,CAAC"}

package/dist/protocol/authentication.js

@@ -1,20 +1,29 @@
 /** Authentication discovery: whether a request is signed in, and how a person signs in. */
 import { Type } from "@sinclair/typebox";
 import { Nullable } from "./common.js";
+const urlSchema = Type.String({ minLength: 1, maxLength: 2048 });
 /**
- * A sign-in completed in the system browser.
+ * A sign-in completed with the OAuth authorization code flow and PKCE.
  *
- * The page signs the person in and redirects to the client's `redirectUri` with
- * `#token=<jwt>&state=<state>` in the fragment.
+ * The client talks to these endpoints directly. The daemon never receives the
+ * authorization code, the PKCE verifier, or a refresh token.
  */
-export const browserAuthenticationMethodSchema = Type.Object({
-    type: Type.Literal("browser"),
+export const oauthAuthenticationMethodSchema = Type.Object({
+    type: Type.Literal("oauth"),
     /** Stable method identity, such as `"jwt"`. */
     id: Type.String({ minLength: 1 }),
     /** Human-readable method name for display. */
     name: Type.String({ minLength: 1, maxLength: 64 }),
-    /** The page to open in the system browser. */
-    url: Type.String({ minLength: 1 }),
+    /** The authorization endpoint, opened in the system browser. */
+    authorizationUrl: urlSchema,
+    /** Where the authorization code is exchanged for tokens. */
+    tokenUrl: urlSchema,
+    /** Where a refresh token is exchanged; absent when refresh is unavailable. */
+    refreshUrl: Type.Optional(urlSchema),
+    /** The public OAuth client identifier. */
+    clientId: Type.String({ minLength: 1, maxLength: 256 }),
+    /** The space-separated scope requested during authorization. */
+    scope: Type.Optional(Type.String({ minLength: 1, maxLength: 1024 })),
 });
 /**
  * One way to sign in, discriminated by `type`.
@@ -22,14 +31,7 @@ export const browserAuthenticationMethodSchema = Type.Object({
  * The set grows with the product; clients ignore methods whose `type` they do
  * not recognize.
  */
-export const authenticationMethodSchema = Type.Union([browserAuthenticationMethodSchema]);
-/** Query for `GET /v0/authentication`. */
-export const authenticationQuerySchema = Type.Object({
-    /** Absolute URL without a fragment where the client receives the sign-in result. */
-    redirectUri: Type.Optional(Type.String({ minLength: 1, maxLength: 2048 })),
-    /** Client-generated value returned unchanged with the result; requires `redirectUri`. */
-    state: Type.Optional(Type.String({ minLength: 1, maxLength: 512 })),
-});
+export const authenticationMethodSchema = Type.Union([oauthAuthenticationMethodSchema]);
 /** `GET /v0/authentication` */
 export const authenticationResponseSchema = Type.Object({
     /** `true` only when the request carried a valid bearer token. */
@@ -43,4 +45,16 @@ export const authenticationResponseSchema = Type.Object({
 export const authenticationChallengeSchema = Type.Object({
     methods: Type.Array(authenticationMethodSchema),
 });
+/** A successful OAuth token endpoint response (RFC 6749 section 5.1). */
+export const oauthTokenResponseSchema = Type.Object({
+    access_token: Type.String({ minLength: 1, maxLength: 16_384 }),
+    token_type: Type.String({ pattern: "^[Bb][Ee][Aa][Rr][Ee][Rr]$" }),
+    expires_in: Type.Optional(Type.Number({ minimum: 0 })),
+    refresh_token: Type.Optional(Type.String({ minLength: 1, maxLength: 16_384 })),
+});
+/** An OAuth error response (RFC 6749 section 5.2) or authorization error redirect. */
+export const oauthErrorResponseSchema = Type.Object({
+    error: Type.String({ minLength: 1, maxLength: 256 }),
+    error_description: Type.Optional(Type.String({ maxLength: 2048 })),
+});
 //# sourceMappingURL=authentication.js.map

package/dist/protocol/authentication.js.map

@@ -1 +1 @@
-{"version":3,"file":"authentication.js","sourceRoot":"","sources":["../../sources/protocol/authentication.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAE3F,OAAO,EAAe,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,CAAC,MAAM,CAAC;IACzD,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;IAC7B,+CAA+C;IAC/C,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACjC,8CAA8C;IAC9C,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAClD,8CAA8C;IAC9C,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;CACrC,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC;AAG1F,0CAA0C;AAC1C,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC,MAAM,CAAC;IACjD,oFAAoF;IACpF,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,yFAAyF;IACzF,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;CACtE,CAAC,CAAC;AAGH,+BAA+B;AAC/B,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC,MAAM,CAAC;IACpD,iEAAiE;IACjE,aAAa,EAAE,IAAI,CAAC,OAAO,EAAE;IAC7B,sFAAsF;IACtF,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC/B,kDAAkD;IAClD,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC;CAClD,CAAC,CAAC;AAGH,2DAA2D;AAC3D,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC,MAAM,CAAC;IACrD,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC;CAClD,CAAC,CAAC"}
+{"version":3,"file":"authentication.js","sourceRoot":"","sources":["../../sources/protocol/authentication.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAE3F,OAAO,EAAe,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,CAAC,MAAM,CAAC;IACvD,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IAC3B,+CAA+C;IAC/C,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACjC,8CAA8C;IAC9C,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAClD,gEAAgE;IAChE,gBAAgB,EAAE,SAAS;IAC3B,4DAA4D;IAC5D,QAAQ,EAAE,SAAS;IACnB,8EAA8E;IAC9E,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;IACpC,0CAA0C;IAC1C,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IACvD,gEAAgE;IAChE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;CACvE,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC;AAGxF,+BAA+B;AAC/B,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC,MAAM,CAAC;IACpD,iEAAiE;IACjE,aAAa,EAAE,IAAI,CAAC,OAAO,EAAE;IAC7B,sFAAsF;IACtF,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC/B,kDAAkD;IAClD,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC;CAClD,CAAC,CAAC;AAGH,2DAA2D;AAC3D,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC,MAAM,CAAC;IACrD,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC;CAClD,CAAC,CAAC;AAGH,yEAAyE;AACzE,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC,MAAM,CAAC;IAChD,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAC9D,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;IAClE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACtD,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;CACjF,CAAC,CAAC;AAGH,sFAAsF;AACtF,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC,MAAM,CAAC;IAChD,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IACpD,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;CACrE,CAAC,CAAC"}

package/dist/protocol/bootstrap.d.ts

@@ -116,6 +116,10 @@ export declare const desktopBootstrapResponseSchema: import("@sinclair/typebox")
             defaultEffort: import("@sinclair/typebox").TString;
             efforts: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
             name: import("@sinclair/typebox").TString;
+            serviceTierOptions: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+                id: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+                label: import("@sinclair/typebox").TString;
+            }>>>;
             serviceTiers: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
         }>>;
         network: import("@sinclair/typebox").TObject<{
@@ -154,6 +158,10 @@ export declare const desktopBootstrapResponseSchema: import("@sinclair/typebox")
                 enabled: import("@sinclair/typebox").TBoolean;
                 id: import("@sinclair/typebox").TString;
                 name: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                serviceTierOptions: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+                    id: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+                    label: import("@sinclair/typebox").TString;
+                }>>>;
                 serviceTiers: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
             }>>;
             type: import("@sinclair/typebox").TString;

package/dist/protocol/bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../sources/protocol/bootstrap.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAE7E,OAAO,EAAE,KAAK,MAAM,EAAQ,MAAM,mBAAmB,CAAC;AAEtD,OAAO,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG/F,OAAO,EAAE,KAAK,WAAW,EAAqB,MAAM,aAAa,CAAC;AAGlE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAGxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGrD;;;;;;GAMG;AACH,MAAM,WAAW,sBACb,SAAQ,kBAAkB,EAAE,iBAAiB,EAAE,aAAa,EAAE,kBAAkB;IAChF,gFAAgF;IAChF,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,0FAA0F;IAC1F,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAChC,mFAAmF;IACnF,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B;IACvC,6EAA6E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAG7E;;;OAGG;;IAEH,oFAAoF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAEpF,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAIjF,8CAA8C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAE9C,0EAA0E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAE5E,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAAC,OAAO,8BAA8B,CAAC,CAAC"}
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../sources/protocol/bootstrap.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAE7E,OAAO,EAAE,KAAK,MAAM,EAAQ,MAAM,mBAAmB,CAAC;AAEtD,OAAO,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG/F,OAAO,EAAE,KAAK,WAAW,EAAqB,MAAM,aAAa,CAAC;AAGlE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAGxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGrD;;;;;;GAMG;AACH,MAAM,WAAW,sBACb,SAAQ,kBAAkB,EAAE,iBAAiB,EAAE,aAAa,EAAE,kBAAkB;IAChF,gFAAgF;IAChF,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,0FAA0F;IAC1F,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAChC,mFAAmF;IACnF,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B;IACvC,6EAA6E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAG7E;;;OAGG;;IAEH,oFAAoF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAEpF,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAIjF,8CAA8C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAE9C,0EAA0E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAE5E,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAAC,OAAO,8BAA8B,CAAC,CAAC"}

package/dist/protocol/daemon.d.ts

@@ -178,6 +178,12 @@ export declare const presenceConfigSchema: import("@sinclair/typebox").TObject<{
     }>>;
 }>;
 export type PresenceConfig = Static<typeof presenceConfigSchema>;
+/** One daemon-owned speed choice. A null ID clears the service tier. */
+export declare const serviceTierOptionSchema: import("@sinclair/typebox").TObject<{
+    id: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+    label: import("@sinclair/typebox").TString;
+}>;
+export type ServiceTierOption = Static<typeof serviceTierOptionSchema>;
 /** Everything a client needs to present a model, defined once. */
 export declare const modelDefinitionSchema: import("@sinclair/typebox").TObject<{
     /**
@@ -191,6 +197,11 @@ export declare const modelDefinitionSchema: import("@sinclair/typebox").TObject<
     defaultEffort: import("@sinclair/typebox").TString;
     efforts: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
     name: import("@sinclair/typebox").TString;
+    /** Complete ordered speed menu, including the default choice; absent from older daemons. */
+    serviceTierOptions: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        id: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+        label: import("@sinclair/typebox").TString;
+    }>>>;
     /** Empty when the model has no service tiers. */
     serviceTiers: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
 }>;
@@ -207,6 +218,11 @@ export declare const providerModelReferenceSchema: import("@sinclair/typebox").T
     enabled: import("@sinclair/typebox").TBoolean;
     id: import("@sinclair/typebox").TString;
     name: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    /** Replaces the shared speed menu with this account/model's eligible choices. */
+    serviceTierOptions: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        id: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+        label: import("@sinclair/typebox").TString;
+    }>>>;
     serviceTiers: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
 }>;
 export type ProviderModelReference = Static<typeof providerModelReferenceSchema>;
@@ -219,6 +235,11 @@ export declare const providerConfigSchema: import("@sinclair/typebox").TObject<{
         enabled: import("@sinclair/typebox").TBoolean;
         id: import("@sinclair/typebox").TString;
         name: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        /** Replaces the shared speed menu with this account/model's eligible choices. */
+        serviceTierOptions: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            id: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+            label: import("@sinclair/typebox").TString;
+        }>>>;
         serviceTiers: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
     }>>;
     /** The canonical provider key: `"claude"`, `"codex"`, `"grok"`, … */
@@ -294,6 +315,11 @@ export declare const daemonConfigSchema: import("@sinclair/typebox").TObject<{
         defaultEffort: import("@sinclair/typebox").TString;
         efforts: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
         name: import("@sinclair/typebox").TString;
+        /** Complete ordered speed menu, including the default choice; absent from older daemons. */
+        serviceTierOptions: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            id: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+            label: import("@sinclair/typebox").TString;
+        }>>>;
         /** Empty when the model has no service tiers. */
         serviceTiers: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
     }>>;
@@ -336,6 +362,11 @@ export declare const daemonConfigSchema: import("@sinclair/typebox").TObject<{
             enabled: import("@sinclair/typebox").TBoolean;
             id: import("@sinclair/typebox").TString;
             name: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            /** Replaces the shared speed menu with this account/model's eligible choices. */
+            serviceTierOptions: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+                id: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+                label: import("@sinclair/typebox").TString;
+            }>>>;
             serviceTiers: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
         }>>;
         /** The canonical provider key: `"claude"`, `"codex"`, `"grok"`, … */
@@ -407,6 +438,11 @@ export declare const configResponseSchema: import("@sinclair/typebox").TObject<{
             defaultEffort: import("@sinclair/typebox").TString;
             efforts: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
             name: import("@sinclair/typebox").TString;
+            /** Complete ordered speed menu, including the default choice; absent from older daemons. */
+            serviceTierOptions: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+                id: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+                label: import("@sinclair/typebox").TString;
+            }>>>;
             /** Empty when the model has no service tiers. */
             serviceTiers: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
         }>>;
@@ -449,6 +485,11 @@ export declare const configResponseSchema: import("@sinclair/typebox").TObject<{
                 enabled: import("@sinclair/typebox").TBoolean;
                 id: import("@sinclair/typebox").TString;
                 name: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                /** Replaces the shared speed menu with this account/model's eligible choices. */
+                serviceTierOptions: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+                    id: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+                    label: import("@sinclair/typebox").TString;
+                }>>>;
                 serviceTiers: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
             }>>;
             /** The canonical provider key: `"claude"`, `"codex"`, `"grok"`, … */

package/dist/protocol/daemon.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../../sources/protocol/daemon.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,OAAO,EAAE,KAAK,MAAM,EAAQ,MAAM,mBAAmB,CAAC;AAUtD;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAE/C,wEAAwE;AACxE,eAAO,MAAM,gCAAgC,KAAK,CAAC;AAEnD,wEAAwE;AACxE,eAAO,MAAM,sBAAsB;;EAAuC,CAAC;AAC3E,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAErE,uCAAuC;AACvC,eAAO,MAAM,mBAAmB;IAC5B,+DAA+D;;IAE/D,kEAAkE;;EAEpE,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAE/D,0DAA0D;AAC1D,eAAO,MAAM,uBAAuB;IAChC,6BAA6B;;IAE7B,qEAAqE;;EAOvE,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEvE,2EAA2E;AAC3E,eAAO,MAAM,qBAAqB;IAC9B,yCAAyC;;IAEzC,oEAAoE;;IAEpE,gEAAgE;;QAlBhE,6BAA6B;;QAE7B,qEAAqE;;;IAkBrE,sEAAsE;;EAExE,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEnE,uBAAuB;AACvB,eAAO,MAAM,oBAAoB;IAC7B,kEAAkE;;IAElE,uDAAuD;;IAEvD,6EAA6E;;IAE7E,qFAAqF;;QAnBrF,yCAAyC;;QAEzC,oEAAoE;;QAEpE,gEAAgE;;YAlBhE,6BAA6B;;YAE7B,qEAAqE;;;QAkBrE,sEAAsE;;;IAetE,4EAA4E;;;;QA5C5E,+DAA+D;;QAE/D,kEAAkE;;;IA8ClE,6EAA6E;;EAE/E,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEjE,mDAAmD;AACnD,eAAO,MAAM,oBAAoB;;;;;EAK/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEjE,oDAAoD;AACpD,eAAO,MAAM,oBAAoB;;;;EAI/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEjE,+DAA+D;AAC/D,eAAO,MAAM,qBAAqB;;;EAGhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEnE,kCAAkC;AAClC,eAAO,MAAM,mBAAmB;;;;;;EAM9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAE/D,wEAAwE;AACxE,eAAO,MAAM,cAAc,qCAIzB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC;AAErD,wEAAwE;AACxE,eAAO,MAAM,gBAAgB;;EAA4D,CAAC;AAC1F,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEzD,mFAAmF;AACnF,eAAO,MAAM,gBAAgB;;IAEzB,iCAAiC;;;;EAEnC,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEzD,iFAAiF;AACjF,eAAO,MAAM,qBAAqB;;EAGjC,CAAC;AACF,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEnE,4CAA4C;AAC5C,eAAO,MAAM,eAAe;;;;;;;EAO1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,eAAe,CAAC,CAAC;AAEvD,2DAA2D;AAC3D,eAAO,MAAM,uBAAuB;IAChC,uEAAuE;;EAEzE,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEvE,+CAA+C;AAC/C,eAAO,MAAM,mBAAmB;IAC5B,0EAA0E;;;IAG1E,8DAA8D;;;EAGhE,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAE/D,iEAAiE;AACjE,eAAO,MAAM,oBAAoB;;;;QAV7B,0EAA0E;;;QAG1E,8DAA8D;;;;EAWhE,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEjE,kEAAkE;AAClE,eAAO,MAAM,qBAAqB;IAC9B;;;;OAIG;;IAEH,4FAA4F;;;;;IAK5F,iDAAiD;;EAEnD,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEnE;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B;;;;;;;EAOvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAEjF,kEAAkE;AAClE,eAAO,MAAM,oBAAoB;;;;;;;;;;IAG7B,qEAAqE;;EAEvE,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEjE,4CAA4C;AAC5C,eAAO,MAAM,oBAAoB;;;;;;;EAO/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEjE,kCAAkC;AAClC,eAAO,MAAM,iBAAiB;;;;;;;;EAQ5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE3D,yCAAyC;AACzC,eAAO,MAAM,qBAAqB;;;;;IAK9B,6CAA6C;;EAE/C,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEnE,uEAAuE;AACvE,eAAO,MAAM,kBAAkB;IAC3B,wEAAwE;;;QAhIxE,iCAAiC;;;;;;;;;;;;;;;;;;;;IAqIjC,uDAAuD;;QAlFvD;;;;WAIG;;QAEH,4FAA4F;;;;;QAK5F,iDAAiD;;;;;;;;;;;;;;;;;;;QArCjD,uEAAuE;;;;;;;YAOvE,0EAA0E;;;YAG1E,8DAA8D;;;;;;;;;;;;;;;QAoD9D,qEAAqE;;;;;;;;;;;;;;;;;;;;;;;;;QAkCrE,6CAA6C;;;EAsB/C,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE7D,uBAAuB;AACvB,eAAO,MAAM,oBAAoB;;QAnB7B,wEAAwE;;;YAhIxE,iCAAiC;;;;;;;;;;;;;;;;;;;;QAqIjC,uDAAuD;;YAlFvD;;;;eAIG;;YAEH,4FAA4F;;;;;YAK5F,iDAAiD;;;;;;;;;;;;;;;;;;;YArCjD,uEAAuE;;;;;;;gBAOvE,0EAA0E;;;gBAG1E,8DAA8D;;;;;;;;;;;;;;;YAoD9D,qEAAqE;;;;;;;;;;;;;;;;;;;;;;;;;YAkCrE,6CAA6C;;;;EA0B8B,CAAC;AAChF,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEjE;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAWd,+EAA+E;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQ9F,CAAC;AACF,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE3D,8DAA8D;AAC9D,eAAO,MAAM,8BAA8B,yLAIzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAErF,8DAA8D;AAC9D,eAAO,MAAM,wBAAwB,uLAInC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEzE,uEAAuE;AACvE,eAAO,MAAM,wBAAwB;;;;;IAKjC,qEAAqE;;EAEvE,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEzE,gCAAgC;AAChC,eAAO,MAAM,0BAA0B;;;;;;;QANnC,qEAAqE;;;EASvE,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE7E,uDAAuD;AACvD,eAAO,MAAM,+BAA+B,sMAI1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,MAAM,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAEvF,8CAA8C;AAC9C,eAAO,MAAM,iCAAiC;;EAE5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,MAAM,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE3F,wDAAwD;AACxD,eAAO,MAAM,kCAAkC;;IAE3C,6FAA6F;;IAE7F,qEAAqE;;;;;EAKvE,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,MAAM,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE7F,8CAA8C;AAC9C,eAAO,MAAM,0BAA0B;;EAA+C,CAAC;AACvF,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE7E,0CAA0C;AAC1C,eAAO,MAAM,4BAA4B;;EAAyC,CAAC;AACnF,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAEjF,uBAAuB;AACvB,eAAO,MAAM,mBAAmB;IAC5B,4EAA4E;;IAE5E,oFAAoF;;EAEtF,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAE/D,0BAA0B;AAC1B,eAAO,MAAM,sBAAsB;IAC/B,6EAA6E;;;EAG/E,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAErE,iCAAiC;AACjC,eAAO,MAAM,8BAA8B;IACvC,yDAAyD;;EAE3D,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAErF,mCAAmC;AACnC,eAAO,MAAM,8BAA8B;IACvC,6CAA6C;;EAE/C,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAErF,2BAA2B;AAC3B,eAAO,MAAM,qBAAqB;IAC9B,uEAAuE;;;QAGnE,8BAA8B;;;;QAE9B,mCAAmC;;;;QAEnC,qDAAqD;;;;;;EAM3D,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEnE,qCAAqC;AACrC,eAAO,MAAM,iCAAiC;;EAA6C,CAAC;AAC5F,MAAM,MAAM,2BAA2B,GAAG,MAAM,CAAC,OAAO,iCAAiC,CAAC,CAAC"}
+{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../../sources/protocol/daemon.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,OAAO,EAAE,KAAK,MAAM,EAAQ,MAAM,mBAAmB,CAAC;AAUtD;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAE/C,wEAAwE;AACxE,eAAO,MAAM,gCAAgC,KAAK,CAAC;AAEnD,wEAAwE;AACxE,eAAO,MAAM,sBAAsB;;EAAuC,CAAC;AAC3E,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAErE,uCAAuC;AACvC,eAAO,MAAM,mBAAmB;IAC5B,+DAA+D;;IAE/D,kEAAkE;;EAEpE,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAE/D,0DAA0D;AAC1D,eAAO,MAAM,uBAAuB;IAChC,6BAA6B;;IAE7B,qEAAqE;;EAOvE,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEvE,2EAA2E;AAC3E,eAAO,MAAM,qBAAqB;IAC9B,yCAAyC;;IAEzC,oEAAoE;;IAEpE,gEAAgE;;QAlBhE,6BAA6B;;QAE7B,qEAAqE;;;IAkBrE,sEAAsE;;EAExE,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEnE,uBAAuB;AACvB,eAAO,MAAM,oBAAoB;IAC7B,kEAAkE;;IAElE,uDAAuD;;IAEvD,6EAA6E;;IAE7E,qFAAqF;;QAnBrF,yCAAyC;;QAEzC,oEAAoE;;QAEpE,gEAAgE;;YAlBhE,6BAA6B;;YAE7B,qEAAqE;;;QAkBrE,sEAAsE;;;IAetE,4EAA4E;;;;QA5C5E,+DAA+D;;QAE/D,kEAAkE;;;IA8ClE,6EAA6E;;EAE/E,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEjE,mDAAmD;AACnD,eAAO,MAAM,oBAAoB;;;;;EAK/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEjE,oDAAoD;AACpD,eAAO,MAAM,oBAAoB;;;;EAI/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEjE,+DAA+D;AAC/D,eAAO,MAAM,qBAAqB;;;EAGhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEnE,kCAAkC;AAClC,eAAO,MAAM,mBAAmB;;;;;;EAM9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAE/D,wEAAwE;AACxE,eAAO,MAAM,cAAc,qCAIzB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,cAAc,CAAC,CAAC;AAErD,wEAAwE;AACxE,eAAO,MAAM,gBAAgB;;EAA4D,CAAC;AAC1F,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEzD,mFAAmF;AACnF,eAAO,MAAM,gBAAgB;;IAEzB,iCAAiC;;;;EAEnC,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEzD,iFAAiF;AACjF,eAAO,MAAM,qBAAqB;;EAGjC,CAAC;AACF,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEnE,4CAA4C;AAC5C,eAAO,MAAM,eAAe;;;;;;;EAO1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,eAAe,CAAC,CAAC;AAEvD,2DAA2D;AAC3D,eAAO,MAAM,uBAAuB;IAChC,uEAAuE;;EAEzE,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEvE,+CAA+C;AAC/C,eAAO,MAAM,mBAAmB;IAC5B,0EAA0E;;;IAG1E,8DAA8D;;;EAGhE,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAE/D,iEAAiE;AACjE,eAAO,MAAM,oBAAoB;;;;QAV7B,0EAA0E;;;QAG1E,8DAA8D;;;;EAWhE,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEjE,wEAAwE;AACxE,eAAO,MAAM,uBAAuB;;;EAGlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEvE,kEAAkE;AAClE,eAAO,MAAM,qBAAqB;IAC9B;;;;OAIG;;IAEH,4FAA4F;;;;;IAK5F,4FAA4F;;;;;IAE5F,iDAAiD;;EAEnD,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEnE;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B;;;;;;IAMrC,iFAAiF;;;;;;EAGnF,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAEjF,kEAAkE;AAClE,eAAO,MAAM,oBAAoB;;;;;;;;QAP7B,iFAAiF;;;;;;;IAUjF,qEAAqE;;EAEvE,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEjE,4CAA4C;AAC5C,eAAO,MAAM,oBAAoB;;;;;;;EAO/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEjE,kCAAkC;AAClC,eAAO,MAAM,iBAAiB;;;;;;;;EAQ5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE3D,yCAAyC;AACzC,eAAO,MAAM,qBAAqB;;;;;IAK9B,6CAA6C;;EAE/C,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEnE,uEAAuE;AACvE,eAAO,MAAM,kBAAkB;IAC3B,wEAAwE;;;QA3IxE,iCAAiC;;;;;;;;;;;;;;;;;;;;IAgJjC,uDAAuD;;QAtFvD;;;;WAIG;;QAEH,4FAA4F;;;;;QAK5F,4FAA4F;;;;;QAE5F,iDAAiD;;;;;;;;;;;;;;;;;;;QA9CjD,uEAAuE;;;;;;;YAOvE,0EAA0E;;;YAG1E,8DAA8D;;;;;;;;;;;;;YAqD9D,iFAAiF;;;;;;;QAUjF,qEAAqE;;;;;;;;;;;;;;;;;;;;;;;;;QAkCrE,6CAA6C;;;EAsB/C,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE7D,uBAAuB;AACvB,eAAO,MAAM,oBAAoB;;QAnB7B,wEAAwE;;;YA3IxE,iCAAiC;;;;;;;;;;;;;;;;;;;;QAgJjC,uDAAuD;;YAtFvD;;;;eAIG;;YAEH,4FAA4F;;;;;YAK5F,4FAA4F;;;;;YAE5F,iDAAiD;;;;;;;;;;;;;;;;;;;YA9CjD,uEAAuE;;;;;;;gBAOvE,0EAA0E;;;gBAG1E,8DAA8D;;;;;;;;;;;;;gBAqD9D,iFAAiF;;;;;;;YAUjF,qEAAqE;;;;;;;;;;;;;;;;;;;;;;;;;YAkCrE,6CAA6C;;;;EA0B8B,CAAC;AAChF,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEjE;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAWd,+EAA+E;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQ9F,CAAC;AACF,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE3D,8DAA8D;AAC9D,eAAO,MAAM,8BAA8B,yLAIzC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAErF,8DAA8D;AAC9D,eAAO,MAAM,wBAAwB,uLAInC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEzE,uEAAuE;AACvE,eAAO,MAAM,wBAAwB;;;;;IAKjC,qEAAqE;;EAEvE,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEzE,gCAAgC;AAChC,eAAO,MAAM,0BAA0B;;;;;;;QANnC,qEAAqE;;;EASvE,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE7E,uDAAuD;AACvD,eAAO,MAAM,+BAA+B,sMAI1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,MAAM,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAEvF,8CAA8C;AAC9C,eAAO,MAAM,iCAAiC;;EAE5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,MAAM,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE3F,wDAAwD;AACxD,eAAO,MAAM,kCAAkC;;IAE3C,6FAA6F;;IAE7F,qEAAqE;;;;;EAKvE,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,MAAM,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE7F,8CAA8C;AAC9C,eAAO,MAAM,0BAA0B;;EAA+C,CAAC;AACvF,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE7E,0CAA0C;AAC1C,eAAO,MAAM,4BAA4B;;EAAyC,CAAC;AACnF,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAEjF,uBAAuB;AACvB,eAAO,MAAM,mBAAmB;IAC5B,4EAA4E;;IAE5E,oFAAoF;;EAEtF,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAE/D,0BAA0B;AAC1B,eAAO,MAAM,sBAAsB;IAC/B,6EAA6E;;;EAG/E,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAErE,iCAAiC;AACjC,eAAO,MAAM,8BAA8B;IACvC,yDAAyD;;EAE3D,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAErF,mCAAmC;AACnC,eAAO,MAAM,8BAA8B;IACvC,6CAA6C;;EAE/C,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAErF,2BAA2B;AAC3B,eAAO,MAAM,qBAAqB;IAC9B,uEAAuE;;;QAGnE,8BAA8B;;;;QAE9B,mCAAmC;;;;QAEnC,qDAAqD;;;;;;EAM3D,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEnE,qCAAqC;AACrC,eAAO,MAAM,iCAAiC;;EAA6C,CAAC;AAC5F,MAAM,MAAM,2BAA2B,GAAG,MAAM,CAAC,OAAO,iCAAiC,CAAC,CAAC"}

package/dist/protocol/daemon.js

@@ -132,6 +132,11 @@ export const presenceConfigSchema = Type.Object({
     fallback: Type.String(),
     states: Type.Record(Type.String(), presenceStateSchema),
 });
+/** One daemon-owned speed choice. A null ID clears the service tier. */
+export const serviceTierOptionSchema = Type.Object({
+    id: Nullable(serviceTierSchema),
+    label: Type.String(),
+});
 /** Everything a client needs to present a model, defined once. */
 export const modelDefinitionSchema = Type.Object({
     /**
@@ -145,6 +150,8 @@ export const modelDefinitionSchema = Type.Object({
     defaultEffort: effortSchema,
     efforts: Type.Array(effortSchema),
     name: Type.String(),
+    /** Complete ordered speed menu, including the default choice; absent from older daemons. */
+    serviceTierOptions: Type.Optional(Type.Array(serviceTierOptionSchema)),
     /** Empty when the model has no service tiers. */
     serviceTiers: Type.Array(serviceTierSchema),
 });
@@ -160,6 +167,8 @@ export const providerModelReferenceSchema = Type.Object({
     enabled: Type.Boolean(),
     id: Type.String(),
     name: Type.Optional(Type.String()),
+    /** Replaces the shared speed menu with this account/model's eligible choices. */
+    serviceTierOptions: Type.Optional(Type.Array(serviceTierOptionSchema)),
     serviceTiers: Type.Optional(Type.Array(serviceTierSchema)),
 });
 /** One configured inference provider and the models it serves. */