@vibesdotdev/auth 0.0.0-stage → 1.0.0-rc.3

package/dist/tui/auth-tui.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-tui.plugin.js","sourceRoot":"","sources":["../../src/tui/auth-tui.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AACtF,OAAO,iBAAiB,MAAM,8BAA8B,CAAC;AAC7D,OAAO,mBAAmB,MAAM,gCAAgC,CAAC;AAEjE,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,SAAS,EAAW,CAAC;AAC7C,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,WAAW,EAAW,CAAC;AAEjD,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAC;IAChD,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,kBAAkB;IACxB,WAAW,EAAE,uDAAuD;IACpE,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;IAC7B,KAAK,CAAC,UAAU,CAAC,OAAO;QACvB,MAAM,cAAc,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IACD,WAAW,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,kBAAkB,CAAC;YACxE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,kBAAkB;SACxE,CAAC,CAAC;IACH,OAAO,EAAE;QACR,MAAM,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC;QAC5H,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,iCAAkC,CAAC,CAAC;QAChF,MAAM,CAAC,eAAe,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC;KACrF;CACD,CAAC,CAAC;AAEH,eAAe,aAAa,CAAC"}

package/dist/tui/auth.tui-app.descriptor.d.ts

@@ -0,0 +1,4 @@
+import type { TuiAppDescriptor } from '@vibesdotdev/tui/schemas/tui-app';
+declare const descriptor: TuiAppDescriptor;
+export default descriptor;
+//# sourceMappingURL=auth.tui-app.descriptor.d.ts.map

package/dist/tui/auth.tui-app.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.tui-app.descriptor.d.ts","sourceRoot":"","sources":["../../src/tui/auth.tui-app.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEzE,QAAA,MAAM,UAAU,EAAE,gBAgBjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/tui/auth.tui-app.descriptor.js

@@ -0,0 +1,19 @@
+const descriptor = {
+    kind: 'tui/app',
+    id: 'auth.status',
+    title: 'Auth',
+    description: 'Who is signed in, and device login. Never tokens.',
+    icon: '⚿',
+    category: 'System',
+    audience: 'ops',
+    order: 6,
+    route: '/auth',
+    states: ['auth.identity'],
+    embeddable: false,
+    minSize: { width: 72, height: 20 },
+    surfaces: ['tui'],
+    hardware: ['consumer'],
+    enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=auth.tui-app.descriptor.js.map

package/dist/tui/auth.tui-app.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.tui-app.descriptor.js","sourceRoot":"","sources":["../../src/tui/auth.tui-app.descriptor.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAAqB;IACpC,IAAI,EAAE,SAAS;IACf,EAAE,EAAE,aAAa;IACjB,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,mDAAmD;IAChE,IAAI,EAAE,GAAG;IACT,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,CAAC,eAAe,CAAC;IACzB,UAAU,EAAE,KAAK;IACjB,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;IAClC,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/tui/auth.tui-app.impl.consumer.d.ts

@@ -0,0 +1,4 @@
+import type { TuiAppImplementation } from '@vibesdotdev/tui/kinds/tui-app';
+declare const impl: TuiAppImplementation;
+export default impl;
+//# sourceMappingURL=auth.tui-app.impl.consumer.d.ts.map

package/dist/tui/auth.tui-app.impl.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.tui-app.impl.consumer.d.ts","sourceRoot":"","sources":["../../src/tui/auth.tui-app.impl.consumer.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oBAAoB,EAAe,MAAM,gCAAgC,CAAC;AAgFxF,QAAA,MAAM,IAAI,EAAE,oBAEX,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/tui/auth.tui-app.impl.consumer.js

@@ -0,0 +1,46 @@
+import { jsx as _jsx, jsxs as _jsxs } from "@opentui/react/jsx-runtime";
+import { useCallback } from 'react';
+import { useTuiState, useTuiDispatch } from '@vibesdotdev/tui/state/hooks';
+import { VStack } from '@vibesdotdev/tui/components/layout';
+import { DSButton, DSText, Panel } from '@vibesdotdev/tui/components/content';
+import { PageHeader, PageLayout } from '@vibesdotdev/tui/components/page';
+import { useKeyboardLayer } from '@vibesdotdev/tui/input';
+import { useContributeScreenStatus } from '@vibesdotdev/tui/shell';
+import { authIdentityStateKey } from "./auth.tui-state.key.js";
+function AuthPage({ embedded }) {
+    const state = useTuiState(authIdentityStateKey);
+    const dispatch = useTuiDispatch(authIdentityStateKey);
+    const refresh = useCallback(() => {
+        void dispatch({ type: 'REFRESH' });
+    }, [dispatch]);
+    const signIn = useCallback(() => {
+        void dispatch({ type: 'SIGN_IN' });
+    }, [dispatch]);
+    const signOut = useCallback(() => {
+        void dispatch({ type: 'SIGN_OUT' });
+    }, [dispatch]);
+    useKeyboardLayer('zone', (key) => {
+        if (key.name === 'r' && !key.ctrl && !key.meta) {
+            refresh();
+            return true;
+        }
+        return false;
+    }, { deps: [refresh] });
+    useContributeScreenStatus('auth.status', {
+        facts: [
+            {
+                slot: 'context',
+                value: state?.signedIn ? (state.email ?? 'signed in') : 'signed out',
+                priority: 2,
+                tone: state?.error ? 'warning' : 'default'
+            }
+        ],
+        hints: [{ keys: 'r', label: 'refresh', priority: 2 }]
+    });
+    return (_jsxs(PageLayout, { children: [embedded ? undefined : (_jsx(PageHeader, { title: "Auth", description: "Device login and who-am-I. Tokens never appear here." })), _jsxs(VStack, { gap: 1, children: [state?.error ? (_jsx(Panel, { bordered: true, status: "warning", padding: "md", children: _jsx(DSText, { children: state.error }) })) : null, state?.notice ? _jsx(DSText, { variant: "muted", children: state.notice }) : null, state?.signedIn ? (_jsxs(Panel, { bordered: true, padding: "md", gap: "sm", children: [_jsx(DSText, { children: state.name ?? 'Signed in' }), _jsx(DSText, { variant: "muted", children: state.email ?? state.userId ?? 'identity present' }), _jsx(DSButton, { id: "auth-sign-out", label: "Sign out", onClick: signOut })] })) : (_jsxs(Panel, { bordered: true, padding: "md", gap: "sm", children: [_jsx(DSText, { children: "Not signed in." }), _jsx(DSButton, { id: "auth-sign-in", label: state?.loading ? 'Waiting…' : 'Device login', onClick: signIn, disabled: state?.loading })] }))] })] }));
+}
+const impl = {
+    component: (props) => _jsx(AuthPage, { ...props })
+};
+export default impl;
+//# sourceMappingURL=auth.tui-app.impl.consumer.js.map

package/dist/tui/auth.tui-app.impl.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.tui-app.impl.consumer.js","sourceRoot":"","sources":["../../src/tui/auth.tui-app.impl.consumer.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,WAAW,EAAkB,MAAM,OAAO,CAAC;AAEpD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,oCAAoC,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE/D,SAAS,QAAQ,CAAC,EAAE,QAAQ,EAAe;IAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,cAAc,CAAC,oBAAoB,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE;QAChC,KAAK,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACpC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IACf,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE;QAC/B,KAAK,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACpC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IACf,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE;QAChC,KAAK,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IACrC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEf,gBAAgB,CACf,MAAM,EACN,CAAC,GAAG,EAAE,EAAE;QACP,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAChD,OAAO,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC,EACD,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CACnB,CAAC;IAEF,yBAAyB,CAAC,aAAa,EAAE;QACxC,KAAK,EAAE;YACN;gBACC,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY;gBACpE,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;aAC1C;SACD;QACD,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;KACrD,CAAC,CAAC;IAEH,OAAO,CACN,MAAC,UAAU,eACT,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CACvB,KAAC,UAAU,IAAC,KAAK,EAAC,MAAM,EAAC,WAAW,EAAC,sDAAsD,GAAG,CAC9F,EACD,MAAC,MAAM,IAAC,GAAG,EAAE,CAAC,aACZ,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CACf,KAAC,KAAK,IAAC,QAAQ,QAAC,MAAM,EAAC,SAAS,EAAC,OAAO,EAAC,IAAI,YAC5C,KAAC,MAAM,cAAE,KAAK,CAAC,KAAK,GAAU,GACvB,CACR,CAAC,CAAC,CAAC,IAAI,EACP,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAC,MAAM,IAAC,OAAO,EAAC,OAAO,YAAE,KAAK,CAAC,MAAM,GAAU,CAAC,CAAC,CAAC,IAAI,EACtE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAClB,MAAC,KAAK,IAAC,QAAQ,QAAC,OAAO,EAAC,IAAI,EAAC,GAAG,EAAC,IAAI,aACpC,KAAC,MAAM,cAAE,KAAK,CAAC,IAAI,IAAI,WAAW,GAAU,EAC5C,KAAC,MAAM,IAAC,OAAO,EAAC,OAAO,YAAE,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,kBAAkB,GAAU,EACpF,KAAC,QAAQ,IAAC,EAAE,EAAC,eAAe,EAAC,KAAK,EAAC,UAAU,EAAC,OAAO,EAAE,OAAO,GAAI,IAC3D,CACR,CAAC,CAAC,CAAC,CACH,MAAC,KAAK,IAAC,QAAQ,QAAC,OAAO,EAAC,IAAI,EAAC,GAAG,EAAC,IAAI,aACpC,KAAC,MAAM,iCAAwB,EAC/B,KAAC,QAAQ,IACR,EAAE,EAAC,cAAc,EACjB,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,EACnD,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,KAAK,EAAE,OAAO,GACvB,IACK,CACR,IACO,IACG,CACb,CAAC;AACH,CAAC;AAED,MAAM,IAAI,GAAyB;IAClC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAC,QAAQ,OAAK,KAAK,GAAI;CAC7C,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/tui/auth.tui-state.descriptor.d.ts

@@ -0,0 +1,7 @@
+import type { TuiStateDescriptor } from '@vibesdotdev/tui/schemas/tui-state';
+import type { AuthIdentityState } from './auth.tui-state.key.ts';
+export type { AuthIdentityState } from './auth.tui-state.key.ts';
+export declare const defaultAuthIdentityState: AuthIdentityState;
+declare const descriptor: TuiStateDescriptor;
+export default descriptor;
+//# sourceMappingURL=auth.tui-state.descriptor.d.ts.map

package/dist/tui/auth.tui-state.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.tui-state.descriptor.d.ts","sourceRoot":"","sources":["../../src/tui/auth.tui-state.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,eAAO,MAAM,wBAAwB,EAAE,iBAStC,CAAC;AAEF,QAAA,MAAM,UAAU,EAAE,kBAQjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/tui/auth.tui-state.descriptor.js

@@ -0,0 +1,21 @@
+export const defaultAuthIdentityState = {
+    signedIn: false,
+    email: null,
+    name: null,
+    userId: null,
+    loaded: false,
+    loading: false,
+    error: null,
+    notice: null
+};
+const descriptor = {
+    kind: 'tui/state',
+    id: 'auth.identity',
+    capabilityId: 'auth.status',
+    defaultValue: defaultAuthIdentityState,
+    refreshInterval: 0,
+    persist: false,
+    enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=auth.tui-state.descriptor.js.map

package/dist/tui/auth.tui-state.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.tui-state.descriptor.js","sourceRoot":"","sources":["../../src/tui/auth.tui-state.descriptor.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,wBAAwB,GAAsB;IAC1D,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,IAAI;IACX,IAAI,EAAE,IAAI;IACV,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,KAAK;IACb,OAAO,EAAE,KAAK;IACd,KAAK,EAAE,IAAI;IACX,MAAM,EAAE,IAAI;CACZ,CAAC;AAEF,MAAM,UAAU,GAAuB;IACtC,IAAI,EAAE,WAAW;IACjB,EAAE,EAAE,eAAe;IACnB,YAAY,EAAE,aAAa;IAC3B,YAAY,EAAE,wBAAwB;IACtC,eAAe,EAAE,CAAC;IAClB,OAAO,EAAE,KAAK;IACd,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/tui/auth.tui-state.impl.consumer.d.ts

@@ -0,0 +1,5 @@
+import type { TuiStateImplementation } from '@vibesdotdev/tui/kinds/tui-state';
+import { type AuthIdentityState } from './auth.tui-state.key.ts';
+declare const impl: TuiStateImplementation<AuthIdentityState>;
+export default impl;
+//# sourceMappingURL=auth.tui-state.impl.consumer.d.ts.map

package/dist/tui/auth.tui-state.impl.consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.tui-state.impl.consumer.d.ts","sourceRoot":"","sources":["../../src/tui/auth.tui-state.impl.consumer.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAGX,sBAAsB,EACtB,MAAM,kCAAkC,CAAC;AAO1C,OAAO,EAAwB,KAAK,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAyBvF,QAAA,MAAM,IAAI,EAAE,sBAAsB,CAAC,iBAAiB,CAuEnD,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/tui/auth.tui-state.impl.consumer.js

@@ -0,0 +1,122 @@
+import { tryGetVibesClient } from '@vibesdotdev/kernel/client';
+import { getLogger } from '@vibesdotdev/logging';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { getCredentials, clearCredentials } from '@vibesdotdev/auth/features/services/credential-store';
+import { buildAuthConsumerContext } from '@vibesdotdev/auth/client/consumer-context';
+import { activateDeviceSession } from '@vibesdotdev/auth/client/device-login';
+import { failureMessage } from "../api/failure-message.js";
+import { attempt, failureLabel } from "../features/utils/attempt.js";
+import { defaultAuthIdentityState } from "./auth.tui-state.descriptor.js";
+import { authIdentityStateKey } from "./auth.tui-state.key.js";
+/** The failure as the TUI shows it: fixed text chosen by its code, with its class and reason logged. */
+function shownError(runtime, what, failure) {
+    getLogger('auth.tui-state', runtime).warn(`${what} failed`, { failure: failureLabel(failure) });
+    return failureMessage(failure, `${what} failed.`);
+}
+async function readIdentity(runtime) {
+    const credentials = await getCredentials(runtime);
+    if (!credentials) {
+        return { ...defaultAuthIdentityState, loaded: true };
+    }
+    return {
+        signedIn: true,
+        email: credentials.email ?? null,
+        name: credentials.name ?? null,
+        userId: credentials.userId ?? null,
+        loaded: true,
+        loading: false,
+        error: null,
+        notice: null
+    };
+}
+const impl = {
+    key: authIdentityStateKey,
+    async init(ctx) {
+        const runtime = ctx.runtime;
+        const owner = tryGetVibesClient('auth.tui-actions', runtime);
+        if (!owner)
+            throw new CapabilityError('Auth TUI is not active.', 'UNAVAILABLE', { reason: 'auth-tui-inactive' });
+        let active = () => false;
+        const refresh = async () => {
+            if (!active())
+                return;
+            const read = await attempt(() => readIdentity(runtime));
+            if (!active())
+                return;
+            if (read.ok) {
+                const next = read.value;
+                ctx.setState(() => next);
+            }
+            else {
+                const error = shownError(runtime, 'Reading the signed-in identity', read.failure);
+                ctx.setState((prev) => ({ ...prev, loaded: true, error }));
+            }
+        };
+        const signIn = async () => {
+            if (!active())
+                return;
+            ctx.setState((prev) => ({ ...prev, loading: true, error: null, notice: 'Starting device login…' }));
+            const signedIn = await attempt(async () => {
+                const context = await buildAuthConsumerContext(runtime);
+                const result = await activateDeviceSession(context);
+                if (!active())
+                    return;
+                const identity = result.success ? await readIdentity(runtime) : { ...defaultAuthIdentityState, loaded: true };
+                if (!active())
+                    return;
+                ctx.setState(() => ({
+                    ...identity,
+                    notice: result.message,
+                    error: result.success ? null : result.message
+                }));
+            });
+            if (!signedIn.ok) {
+                if (!active())
+                    return;
+                const error = shownError(runtime, 'Device sign-in', signedIn.failure);
+                ctx.setState((prev) => ({ ...prev, loading: false, loaded: true, error }));
+            }
+        };
+        const signOut = async () => {
+            if (!active())
+                return;
+            const cleared = await attempt(() => clearCredentials(runtime));
+            if (!active())
+                return;
+            if (cleared.ok) {
+                ctx.setState(() => ({ ...defaultAuthIdentityState, loaded: true, notice: 'Signed out.' }));
+            }
+            else {
+                const error = shownError(runtime, 'Signing out', cleared.failure);
+                ctx.setState((prev) => ({ ...prev, error }));
+            }
+        };
+        active = owner.attach(ctx, { refresh, signIn, signOut });
+        const initial = await attempt(() => readIdentity(runtime));
+        if (!active())
+            return { ...defaultAuthIdentityState };
+        if (initial.ok)
+            return initial.value;
+        return {
+            ...defaultAuthIdentityState,
+            loaded: true,
+            error: shownError(runtime, 'Reading the signed-in identity', initial.failure)
+        };
+    },
+    reduce(state, action, ctx) {
+        const ops = ctx ? tryGetVibesClient('auth.tui-actions', ctx.runtime)?.get(ctx) : undefined;
+        if (action.type === 'REFRESH')
+            void ops?.refresh();
+        if (action.type === 'SIGN_IN')
+            void ops?.signIn();
+        if (action.type === 'SIGN_OUT')
+            void ops?.signOut();
+        return state;
+    },
+    dispose(ctx) {
+        if (ctx)
+            tryGetVibesClient('auth.tui-actions', ctx.runtime)?.remove(ctx);
+    }
+};
+export default impl;
+//# sourceMappingURL=auth.tui-state.impl.consumer.js.map

package/dist/tui/auth.tui-state.impl.consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.tui-state.impl.consumer.js","sourceRoot":"","sources":["../../src/tui/auth.tui-state.impl.consumer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAyC,MAAM,qBAAqB,CAAC;AAM7F,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,sDAAsD,CAAC;AACxG,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAA0B,MAAM,yBAAyB,CAAC;AAEvF,wGAAwG;AACxG,SAAS,UAAU,CAAC,OAAqB,EAAE,IAAY,EAAE,OAAsB;IAC9E,SAAS,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,SAAS,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChG,OAAO,cAAc,CAAC,OAAO,EAAE,GAAG,IAAI,UAAU,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAqB;IAChD,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,OAAO,EAAE,GAAG,wBAAwB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACtD,CAAC;IACD,OAAO;QACN,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,WAAW,CAAC,KAAK,IAAI,IAAI;QAChC,IAAI,EAAE,WAAW,CAAC,IAAI,IAAI,IAAI;QAC9B,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,IAAI;QAClC,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,IAAI;KACZ,CAAC;AACH,CAAC;AAED,MAAM,IAAI,GAA8C;IACvD,GAAG,EAAE,oBAAoB;IACzB,KAAK,CAAC,IAAI,CAAC,GAAuC;QACjD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC5B,MAAM,KAAK,GAAG,iBAAiB,CAAuB,kBAAkB,EAAE,OAAO,CAAC,CAAC;QACnF,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,eAAe,CAAC,yBAAyB,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACjH,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC;QACzB,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;YACzC,IAAI,CAAC,MAAM,EAAE;gBAAE,OAAO;YACtB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,EAAE;gBAAE,OAAO;YACtB,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;gBACxB,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACP,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,gCAAgC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBAClF,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5D,CAAC;QACF,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,IAAmB,EAAE;YACxC,IAAI,CAAC,MAAM,EAAE;gBAAE,OAAO;YACtB,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC;YACpG,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,IAAI,EAAE;gBACzC,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;gBACxD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;gBACpD,IAAI,CAAC,MAAM,EAAE;oBAAE,OAAO;gBACtB,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,wBAAwB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;gBAC9G,IAAI,CAAC,MAAM,EAAE;oBAAE,OAAO;gBACtB,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;oBACnB,GAAG,QAAQ;oBACX,MAAM,EAAE,MAAM,CAAC,OAAO;oBACtB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO;iBAC7C,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,IAAI,CAAC,MAAM,EAAE;oBAAE,OAAO;gBACtB,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACtE,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5E,CAAC;QACF,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;YACzC,IAAI,CAAC,MAAM,EAAE;gBAAE,OAAO;YACtB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/D,IAAI,CAAC,MAAM,EAAE;gBAAE,OAAO;YACtB,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,wBAAwB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;YAC5F,CAAC;iBAAM,CAAC;gBACP,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;gBAClE,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAC9C,CAAC;QACF,CAAC,CAAC;QACF,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,GAAG,wBAAwB,EAAE,CAAC;QACtD,IAAI,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC,KAAK,CAAC;QACrC,OAAO;YACN,GAAG,wBAAwB;YAC3B,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,gCAAgC,EAAE,OAAO,CAAC,OAAO,CAAC;SAC7E,CAAC;IACH,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,MAAsB,EAAE,GAAwC;QAC7E,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAuB,kBAAkB,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjH,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,KAAK,GAAG,EAAE,OAAO,EAAE,CAAC;QACnD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,KAAK,GAAG,EAAE,MAAM,EAAE,CAAC;QAClD,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;YAAE,KAAK,GAAG,EAAE,OAAO,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,CAAC,GAAwC;QAC/C,IAAI,GAAG;YAAE,iBAAiB,CAAuB,kBAAkB,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAChG,CAAC;CACD,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/dist/tui/auth.tui-state.key.d.ts

@@ -0,0 +1,27 @@
+/**
+ * The `auth.identity` tui/state key: the signed-in identity the auth TUI
+ * shows, with the schema every value written to it must meet.
+ */
+import * as z from 'zod/v4';
+export declare const AuthIdentityStateSchema: z.ZodObject<{
+    signedIn: z.ZodBoolean;
+    email: z.ZodNullable<z.ZodString>;
+    name: z.ZodNullable<z.ZodString>;
+    userId: z.ZodNullable<z.ZodString>;
+    loaded: z.ZodBoolean;
+    loading: z.ZodBoolean;
+    error: z.ZodNullable<z.ZodString>;
+    notice: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type AuthIdentityState = z.infer<typeof AuthIdentityStateSchema>;
+export declare const authIdentityStateKey: import("@vibesdotdev/tui/kinds/tui-state").TuiStateKey<{
+    signedIn: boolean;
+    email: string | null;
+    name: string | null;
+    userId: string | null;
+    loaded: boolean;
+    loading: boolean;
+    error: string | null;
+    notice: string | null;
+}>;
+//# sourceMappingURL=auth.tui-state.key.d.ts.map

package/dist/tui/auth.tui-state.key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.tui-state.key.d.ts","sourceRoot":"","sources":["../../src/tui/auth.tui-state.key.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,eAAO,MAAM,uBAAuB;;;;;;;;;iBASlC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,oBAAoB;;;;;;;;;EAA8D,CAAC"}

package/dist/tui/auth.tui-state.key.js

@@ -0,0 +1,18 @@
+/**
+ * The `auth.identity` tui/state key: the signed-in identity the auth TUI
+ * shows, with the schema every value written to it must meet.
+ */
+import * as z from 'zod/v4';
+import { defineTuiStateKey } from '@vibesdotdev/tui/kinds/tui-state';
+export const AuthIdentityStateSchema = z.object({
+    signedIn: z.boolean(),
+    email: z.string().nullable(),
+    name: z.string().nullable(),
+    userId: z.string().nullable(),
+    loaded: z.boolean(),
+    loading: z.boolean(),
+    error: z.string().nullable(),
+    notice: z.string().nullable()
+});
+export const authIdentityStateKey = defineTuiStateKey('auth.identity', AuthIdentityStateSchema);
+//# sourceMappingURL=auth.tui-state.key.js.map

package/dist/tui/auth.tui-state.key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.tui-state.key.js","sourceRoot":"","sources":["../../src/tui/auth.tui-state.key.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAErE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,oBAAoB,GAAG,iBAAiB,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC"}

package/dist/tui/index.d.ts

@@ -0,0 +1,2 @@
+export { default } from './auth-tui.plugin.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/tui/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tui/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/tui/index.js

@@ -0,0 +1,2 @@
+export { default } from "./auth-tui.plugin.js";
+//# sourceMappingURL=index.js.map

package/dist/tui/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tui/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC"}