@wrongstack/tui 0.277.1 → 0.280.0

package/dist/index.d.ts

@@ -124,6 +124,82 @@ type HistoryEntry = {
     detail?: string | undefined;
 };
 
+/** One saved API key / OAuth token, with the secret already masked. */
+interface AuthKeyRow {
+    label: string;
+    /** Pre-masked display form ("sk-a…f3k2" / "••••••") — never the secret. */
+    masked: string;
+    createdAt: string;
+    active: boolean;
+    authMethod?: 'api_key' | 'oauth' | 'session_token' | undefined;
+    expiresAt?: string | undefined;
+}
+/** One saved provider from ~/.wrongstack/config.json. */
+interface AuthProviderRow {
+    id: string;
+    type?: string | undefined;
+    family?: string | undefined;
+    baseUrl?: string | undefined;
+    models: string[];
+    envVars: string[];
+    keys: AuthKeyRow[];
+}
+/** One models.dev catalog entry offered by "Add provider (catalog)". */
+interface AuthCatalogRow {
+    id: string;
+    name: string;
+    family: string;
+    apiBase?: string | undefined;
+    envVars: string[];
+    /** Already present in the saved config (shown as ◉). */
+    saved: boolean;
+}
+/** One local-LLM preset (OmniRoute / Ollama / vLLM / LM Studio). */
+interface AuthLocalPresetRow {
+    id: string;
+    label: string;
+    defaultBaseUrl: string;
+    noAuth: boolean;
+    hint: string;
+}
+type AuthOAuthKind = 'chatgpt' | 'claude' | 'copilot';
+/**
+ * Bridge the CLI flows use to talk to the panel while a flow runs.
+ * `prompt` REJECTS when the user cancels (Esc) — flows treat a thrown
+ * prompt as user-cancel, which aborts before anything is saved.
+ */
+interface AuthFlowIo {
+    onLog(line: string): void;
+    prompt(question: string, opts: {
+        secret: boolean;
+    }): Promise<string>;
+    signal: AbortSignal;
+}
+interface AuthFlowResult {
+    ok: boolean;
+    message?: string | undefined;
+}
+/**
+ * Host callbacks the CLI provides. Simple mutations return an error
+ * string (or null on success); multi-step interactions run as "flows"
+ * that log and prompt through {@link AuthFlowIo}.
+ */
+interface AuthPanelHost {
+    listProviders(): Promise<AuthProviderRow[]>;
+    listCatalog(): Promise<AuthCatalogRow[]>;
+    localPresets(): AuthLocalPresetRow[];
+    setActiveKey(providerId: string, label: string): Promise<string | null>;
+    deleteKey(providerId: string, label: string): Promise<string | null>;
+    removeProvider(providerId: string): Promise<string | null>;
+    addKey(providerId: string, io: AuthFlowIo): Promise<AuthFlowResult>;
+    updateKey(providerId: string, label: string, io: AuthFlowIo): Promise<AuthFlowResult>;
+    editField(providerId: string, field: 'family' | 'baseUrl' | 'models', io: AuthFlowIo): Promise<AuthFlowResult>;
+    addCatalogProvider(catalogId: string, io: AuthFlowIo): Promise<AuthFlowResult>;
+    addCustomProvider(io: AuthFlowIo): Promise<AuthFlowResult>;
+    addLocal(presetId: string, io: AuthFlowIo): Promise<AuthFlowResult>;
+    oauthLogin(kind: AuthOAuthKind, io: AuthFlowIo): Promise<AuthFlowResult>;
+}
+
 interface ProviderOption {
     id: string;
     family: string;
@@ -146,6 +222,21 @@ type CacheTtl = (typeof CACHE_TTLS)[number];
 /** All possible statusline chip keys. */
 type StatuslineItem = 'version' | 'state' | 'model' | 'tokens' | 'cache' | 'queue' | 'processes' | 'hint' | 'index' | 'breaker' | 'todos' | 'plan' | 'tasks' | 'fleet' | 'fleet_agents' | 'git' | 'elapsed' | 'context' | 'cost' | 'working_dir' | 'project' | 'yolo' | 'autonomy' | 'eternal_stage' | 'goal' | 'mode' | 'auto_proceed' | 'sessions' | 'tools' | 'token_saving' | 'brain' | 'mailbox' | 'enhance' | 'debug_stream' | 'next_steps';
 
+interface PluginPickerItem {
+    name: string;
+    enabled: boolean;
+    risk: 'low' | 'medium' | 'high';
+    summary: string;
+    /**
+     * When false the row is locked: the picker renders a 🔒 marker and ignores
+     * Enter/←/→ on it. Core plugins (security, prompts, skills, sync, git, …)
+     * and the critical guard plugins (secret-scanner, branch-guard) set this
+     * to false so they stay visible in the menu but cannot be toggled off —
+     * matching the rationale in `PLUGIN_AUDIT_ENTRIES`.
+     */
+    lockable?: boolean | undefined;
+}
+
 /** Thin view over a SessionSummary for the resume picker. */
 interface ResumeSessionEntry {
     id: string;
@@ -259,6 +350,8 @@ interface RunTuiOptions {
     yolo?: boolean | undefined;
     /** Query live YOLO state from the permission policy. */
     getYolo?: (() => boolean) | undefined;
+    /** Set live YOLO state from TUI-owned controls such as ConfirmPrompt. */
+    onYolo?: ((enabled: boolean) => boolean) | undefined;
     /** Query the live autonomy mode. */
     getAutonomy?: (() => 'off' | 'suggest' | 'auto' | 'eternal' | 'eternal-parallel') | undefined;
     /**
@@ -501,6 +594,20 @@ interface RunTuiOptions {
      * error string on failure (so the TUI can display it as a hint).
      */
     saveSettings?: ((s: Settings) => string | null | Promise<string | null>) | undefined;
+    /** Load toggleable plugin rows for the interactive plugin picker. */
+    getPluginItems?: (() => PluginPickerItem[]) | undefined;
+    /** Toggle one plugin from the interactive picker and return refreshed rows. */
+    onPluginToggle?: ((name: string) => Promise<{
+        items: PluginPickerItem[];
+        message?: string | undefined;
+        error?: string | undefined;
+    }>) | undefined;
+    /**
+     * Host for the interactive `/auth` panel (provider/key management, OAuth
+     * sign-in, local-server add). The CLI builds this from its vault +
+     * models registry; when absent, `/auth` falls back to plain text.
+     */
+    authHost?: AuthPanelHost | undefined;
     /**
      * Predict likely next steps after a completed turn. The CLI wires this from
      * the session provider and the `/next` toggle; it returns [] when prediction
@@ -763,4 +870,4 @@ interface ParseNextStepsResult {
  */
 declare function parseNextSteps(content: string, strict?: boolean, requireHeading?: boolean): ParseNextStepsResult;
 
-export { type ParseNextStepsResult, type ParsedNextStep, type RunTuiOptions, type Settings, parseInline, parseNextSteps, replaySessionEvents, runTui };
+export { type AuthCatalogRow, type AuthFlowIo, type AuthFlowResult, type AuthKeyRow, type AuthLocalPresetRow, type AuthOAuthKind, type AuthPanelHost, type AuthProviderRow, type ParseNextStepsResult, type ParsedNextStep, type PluginPickerItem, type RunTuiOptions, type Settings, parseInline, parseNextSteps, replaySessionEvents, runTui };