agy-cli-usage 0.3.0 → 0.4.0

package/CHANGELOG.md

@@ -10,6 +10,21 @@
 
 * use plain v* tags in release-please ([#12](https://github.com/abruption/agy-cli-usage/issues/12)) ([74b648d](https://github.com/abruption/agy-cli-usage/commit/74b648df24967f71a43095a80e7340a6b5ac2e39)), closes [#9](https://github.com/abruption/agy-cli-usage/issues/9)
 
+## [0.4.0](https://github.com/abruption/agy-cli-usage/compare/v0.3.1...v0.4.0) (2026-06-24)
+
+
+### Features
+
+* ship as a compiled TypeScript build with bundled type declarations ([0e253ea](https://github.com/abruption/agy-cli-usage/commit/0e253ea353e99efe5bfd176f5b6775d76718b3a9))
+* ship compiled TypeScript build with type declarations ([#20](https://github.com/abruption/agy-cli-usage/issues/20)) ([0e253ea](https://github.com/abruption/agy-cli-usage/commit/0e253ea353e99efe5bfd176f5b6775d76718b3a9))
+
+## [0.3.1](https://github.com/abruption/agy-cli-usage/compare/v0.3.0...v0.3.1) (2026-06-24)
+
+
+### Bug Fixes
+
+* read agy token from Windows Credential Manager ([#14](https://github.com/abruption/agy-cli-usage/issues/14)) ([e5cb274](https://github.com/abruption/agy-cli-usage/commit/e5cb274c6a0a6aa1ddf6b491d417bfc81c04916a)), closes [#13](https://github.com/abruption/agy-cli-usage/issues/13)
+
 ## [0.2.0](https://github.com/abruption/agy-cli-usage/compare/v0.1.0...v0.2.0) (2026-06-24)
 
 ### Features

package/README.md

@@ -1,89 +1,124 @@
+<div align="center">
+
 # agy-cli-usage
 
+[![npm version](https://img.shields.io/npm/v/agy-cli-usage?color=cb3837&logo=npm)](https://www.npmjs.com/package/agy-cli-usage)
+[![npm downloads](https://img.shields.io/npm/dm/agy-cli-usage?color=cb3837&logo=npm)](https://www.npmjs.com/package/agy-cli-usage)
 [![CI](https://github.com/abruption/agy-cli-usage/actions/workflows/ci.yml/badge.svg)](https://github.com/abruption/agy-cli-usage/actions/workflows/ci.yml)
-[![npm](https://img.shields.io/npm/v/agy-cli-usage.svg)](https://www.npmjs.com/package/agy-cli-usage)
+[![TypeScript](https://img.shields.io/badge/TypeScript-strict-3178c6?logo=typescript&logoColor=white)](https://www.typescriptlang.org/)
+[![node](https://img.shields.io/node/v/agy-cli-usage?color=339933&logo=node.js)](https://www.npmjs.com/package/agy-cli-usage)
+[![license](https://img.shields.io/npm/l/agy-cli-usage?color=blue)](LICENSE)
 
-Headless usage/quota monitor for the Antigravity CLI (`agy`). `agy`의 인터랙티브 `/usage` 패널과 동일한 정보(모델 그룹별 주간·5시간 한도, 잔여율, 리프레시 시각)를 **headless로** 조회한다. IDE 불필요.
+**Headless usage & quota monitor for the Antigravity CLI (`agy`).**
 
-`agy -p "<prompt>"`(headless)는 `/usage` 같은 TUI 슬래시 커맨드를 렌더링하지 않으므로 자동화가 불가능하다. 이 도구는 `agy`가 내부적으로 호출하는 Cloud Code API를 직접 호출하거나, 불가능할 때 `agy`를 PTY로 구동해 패널을 파싱한다.
+`agy`의 `/usage` 패널(모델 그룹별 주간·5시간 한도, 잔여율, 리프레시 시각)을 **헤드리스로** 조회합니다 — IDE 불필요, macOS · Linux · Windows · 헤드리스 서버 지원.
 
-## 설치
+<sub>Inspired by <a href="https://github.com/skainguyen1412/antigravity-usage">skainguyen1412/antigravity-usage</a> — which targets the Antigravity <b>IDE</b>; this targets the <b>CLI</b> (<code>agy</code>).</sub>
 
-```bash
-# npm 레지스트리에서
-npm install -g agy-cli-usage
+</div>
+
+---
 
-# 또는 GitHub에서 직접
-npm install -g github:abruption/agy-cli-usage
-npx github:abruption/agy-cli-usage
+```text
+  Models & Quota
+  Account: you@gmail.com
 
-# 또는 소스에서
-git clone https://github.com/abruption/agy-cli-usage && cd agy-cli-usage
-npm install && npm link
+  GEMINI MODELS
+    Weekly Limit
+    [██████████████████████████████████████████████░░░░] 91.72%
+    92% remaining · Refreshes in 73h 23m
+    Five Hour Limit
+    [███████████████████████████████████████████████░░░] 94.63%
+    95% remaining · Refreshes in 2h 2m
+
+  CLAUDE AND GPT MODELS
+    Weekly Limit
+    [█████████████████████████████████████████████████░] 97.78%
+    98% remaining · Refreshes in 26h 17m
+    Five Hour Limit
+    [██████████████████████████████████████████████████] Quota available
 ```
 
-전역 명령은 `agy-cli-usage` (별칭 `agy-usage`)로 등록된다. Node.js >= 18 (전역 `fetch` 필요). 사전 조건: 같은 머신에서 `agy`에 로그인되어 있을 것.
+## 🚀 빠른 시작
 
-## 사용법
+```bash
+# 설치 없이 한 번 실행
+npx agy-cli-usage
+
+# 전역 설치 → 어디서나 `agy-cli-usage`
+npm install -g agy-cli-usage
+agy-cli-usage
+```
+
+> 사전 조건: 같은 머신에서 `agy`에 로그인되어 있을 것. Node.js >= 18.
+
+## ⚡ 사용법
 
 ```bash
-agy-usage                  # /usage 와 동일한 패널 출력 (1회성)
-agy-usage --json           # 머신 리더블 JSON
-agy-usage --watch 60       # 60초 간격 자동 갱신 (5분 캐시 경유)
-agy-usage --source api|pty|auto   # 데이터 소스 (기본 auto: API → 실패 시 PTY)
-agy-usage --channel daily|prod    # Cloud Code 호스트 (기본 auto: daily→prod 탐지)
-agy-usage --no-cache               # 5분 캐시 무시하고 강제 조회
+agy-cli-usage                  # /usage 와 동일한 패널 (1회성)
+agy-cli-usage --json           # 머신 리더블 JSON
+agy-cli-usage --watch 60       # 60초 간격 자동 갱신 (5분 캐시 경유)
+agy-cli-usage update [--check] # 자기 업데이트 (--check: 알림만)
+agy-cli-usage --version        # 버전 출력
 ```
 
-## 동작 방식
+| 플래그 | 설명 |
+|--------|------|
+| `--json` | 정규화 JSON 출력 (스크립트/대시보드 연동) |
+| `--watch [초]` | N초 간격 갱신 (기본 60) |
+| `--source <auto\|api\|pty>` | 데이터 소스 (기본 `auto`: API → 실패 시 PTY) |
+| `--channel <auto\|daily\|prod>` | Cloud Code 호스트 |
+| `--no-cache` / `--refresh` | 5분 캐시 무시하고 강제 조회 |
+
+## 🤔 왜 필요한가
 
-`agy`는 OAuth 토큰을 OS 키링(zalando/go-keyring 규약, service=`gemini`/account=`antigravity`)에 저장한다.
+`agy -p "<prompt>"`(headless)는 LLM 프롬프트 전용이라 `/usage` 같은 TUI 슬래시 커맨드를 렌더링하지 않습니다. 그래서 사용량을 자동화·폴링할 수 없습니다. 이 도구는 그 공백을 메웁니다.
 
-1. **직접 API (기본)** — 토큰을 읽고(만료 시 자동 refresh), `agy`와 동일하게:
-   - `POST https://<host>/v1internal:loadCodeAssist` → `cloudaicompanionProject` 획득
-   - `POST https://<host>/v1internal:retrieveUserQuotaSummary {project}` → 쿼타
-   - 호스트: `daily-cloudcode-pa.googleapis.com`(현재 CLI) 또는 `cloudcode-pa.googleapis.com`
-   - 토큰 소스: **키링 → 토큰 파일 → (실패 시) PTY** 순으로 자동 시도
-2. **PTY 폴백** — 위 토큰 소스를 모두 읽을 수 없거나 내부 API가 바뀌면, `agy`를 가상 터미널로 띄워 `/usage`를 보내고, `@xterm/headless`로 alt-screen을 재구성해 패널을 파싱한다.
+## 🔍 동작 방식
 
-### 크로스플랫폼 자격증명
+1. **직접 API (기본 · 빠름)** — OS에서 `agy`의 OAuth 토큰을 읽어, `agy`가 시작 시 호출하는 것과 동일한 Cloud Code 내부 API를 직접 호출합니다.
+   - `POST /v1internal:loadCodeAssist` → `cloudaicompanionProject` 획득
+   - `POST /v1internal:retrieveUserQuotaSummary {project}` → 쿼타
+   - 만료 시 OAuth refresh 자동 처리.
+2. **PTY 폴백 (안전망)** — 위 토큰을 못 읽거나 내부 API가 바뀌면, `agy`를 가상 터미널로 띄워 `/usage`를 보내고 `@xterm/headless`로 화면을 재구성해 파싱합니다.
 
-| OS | 토큰 소스 | 비고 |
-|----|-----------|------|
-| macOS | Keychain | `@napi-rs/keyring`, CLI 폴백 `security` |
-| Windows | Credential Manager | `@napi-rs/keyring` |
-| Linux (데스크톱) | Secret Service | `@napi-rs/keyring`, CLI 폴백 `secret-tool` |
-| Linux (헤드리스) | **토큰 파일** | 키링 부재 시 `~/.gemini/antigravity-cli/antigravity-oauth-token`(순수 JSON) 읽음 → **API 경로 동작**. `AGY_OAUTH_TOKEN_FILE`로 경로 override |
+## 🔐 크로스플랫폼 자격증명
 
-> 헤드리스 서버에서도 토큰 파일을 읽어 빠른 API 경로를 쓴다. 파일조차 없으면 `--source pty`로 우회(python3 필요).
+토큰은 `agy`가 저장한 위치에서 **읽기만** 합니다. 플랫폼별로 자동 처리:
 
-## HTTP 엔드포인트 (선택)
+| OS / 환경 | 저장 위치 | 읽는 방법 |
+|-----------|----------|----------|
+| macOS | Keychain | `@napi-rs/keyring` (폴백 `security`) |
+| Linux 데스크톱 | Secret Service | `@napi-rs/keyring` (폴백 `secret-tool`) |
+| **Windows** | Credential Manager | 내장 `powershell.exe`로 Win32 `CredRead` 호출 |
+| **헤드리스 Linux** | 토큰 파일 | `~/.gemini/antigravity-cli/antigravity-oauth-token` |
+
+읽기 체인: `키링 → OS CLI → Windows credman → 토큰 파일 → PTY`. `AGY_OAUTH_TOKEN_FILE`로 파일 경로 override.
+
+## 🔌 HTTP 엔드포인트 (선택)
 
 ```bash
 PORT=3007 node server.js     # GET /quota → 정규화 JSON (5분 캐시), GET /healthz
 ```
 
-외부 대시보드/스크립트에서 `GET /quota`로 소비하거나, `agy-usage --json`을 subprocess로 호출한다.
+외부 대시보드/스크립트에서 `GET /quota`로 소비하거나 `agy-cli-usage --json`을 subprocess로 호출하세요.
 
-## 개발 / 릴리스
+## 🛠️ 개발 / 릴리스
 
 ```bash
 npm test          # node --test (자격증명·네트워크 불필요, 순수 로직)
 npm run check     # 구문 검사
 ```
 
-- **CI** (`.github/workflows/ci.yml`): push/PR마다 ubuntu(Node 18/20/22) + macOS/Windows(Node 22)에서 테스트.
-- **Release** ([release-please](https://github.com/googleapis/release-please), `.github/workflows/release-please.yml`): Conventional Commits 기반 **완전 자동화**. `NPM_TOKEN` 시크릿 필요.
-
-릴리스 절차 — 수동 버전 범프 없음:
+- **CI**: push/PR마다 ubuntu(Node 18/20/22) + macOS/Windows(Node 22)에서 테스트.
+- **Release**: [release-please](https://github.com/googleapis/release-please) — Conventional Commits 기반 완전 자동화. main에 머지된 커밋으로 release-please가 **Release PR**(버전 범프 + CHANGELOG)을 유지하고, 그 PR을 머지하면 태그·GitHub Release·`npm publish --provenance`가 자동 실행됩니다.
 
-1. `feat:`/`fix:` 등 Conventional Commits를 main에 머지하면, release-please가 **Release PR**(버전 범프 + CHANGELOG 갱신)을 자동 생성·유지.
-2. 그 **Release PR을 머지**하면 → GitHub Release + 태그 생성 → 같은 워크플로가 `npm publish --provenance` 실행.
+## ⚠️ 주의
 
-> 즉 "Release PR 머지" 한 번이 전체 배포다.
+- `v1internal:retrieveUserQuotaSummary`는 **비공개 내부 엔드포인트**입니다. 스키마/호스트가 예고 없이 바뀔 수 있으며, 그때의 안전망이 PTY 폴백입니다. 본인 계정의 사용량 조회 용도로만 사용하세요.
+- 자격증명은 OS 저장소에서 **읽기만** 하며, refresh 토큰을 되쓰지 않아 `agy` 세션과 충돌하지 않습니다.
+- 코드에 포함된 OAuth client_id/secret은 `agy` 바이너리에 들어 있는 **installed-app(public) 값**으로, [Google 문서](https://developers.google.com/identity/protocols/oauth2)상 기밀이 아닙니다. 사용자 식별은 각자의 키링 토큰으로 이뤄집니다.
 
-## 주의
+## 📄 License
 
-- `v1internal:retrieveUserQuotaSummary`는 **비공개 내부 엔드포인트**다. 스키마/호스트가 예고 없이 바뀔 수 있으며, 그때를 위한 안전망이 PTY 폴백이다.
-- 본인 계정의 키링 토큰만 읽으며(읽기 전용), refresh 토큰을 키링에 되쓰지 않는다.
-- OAuth client_secret은 데스크톱(공개) 클라이언트 값이라 비밀이 아니다.
+[MIT](LICENSE) © abruption

package/dist/src/api.d.ts

@@ -0,0 +1,12 @@
+import type { FetchResult } from './types.js';
+declare class ApiError extends Error {
+    status: number;
+    constructor(message: string, status: number);
+}
+export interface FetchOptions {
+    host?: string;
+    channel?: 'daily' | 'prod';
+}
+/** Fetch the raw quota summary from the Cloud Code API. */
+export declare function fetchQuotaSummary(accessToken: string, opts?: FetchOptions): Promise<FetchResult>;
+export { ApiError };

package/dist/src/api.js

@@ -0,0 +1,84 @@
+// Direct client for the Antigravity / Gemini Code Assist "Cloud Code" internal API.
+//
+// Reproduces exactly what `agy` does on startup to populate its /usage panel:
+//   1. POST /v1internal:loadCodeAssist  {metadata:{ideType:"ANTIGRAVITY"}}
+//        -> { cloudaicompanionProject, currentTier, ... }
+//   2. POST /v1internal:retrieveUserQuotaSummary  {project:<cloudaicompanionProject>}
+//        -> { groups:[...], description }
+//
+// Captured from live agy traffic (mitmproxy). The internal endpoint is undocumented;
+// the PTY fallback exists for when it changes.
+const UA = `antigravity-usage-monitor/0.1 ${process.platform}/${process.arch}`;
+// Antigravity ships against the "daily" Cloud Code host; stable builds use the
+// plain host. Try daily first (matches current CLI), fall back to prod.
+const HOSTS = ['daily-cloudcode-pa.googleapis.com', 'cloudcode-pa.googleapis.com'];
+class ApiError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.status = status;
+    }
+}
+function extractEmail(uri) {
+    const m = uri?.match(/[?&]Email=([^&]+)/);
+    if (!m)
+        return null;
+    try {
+        return decodeURIComponent(m[1]);
+    }
+    catch {
+        return m[1];
+    }
+}
+async function postInternal(host, accessToken, method, body) {
+    const res = await fetch(`https://${host}/v1internal:${method}`, {
+        method: 'POST',
+        headers: {
+            Authorization: `Bearer ${accessToken}`,
+            'Content-Type': 'application/json',
+            'User-Agent': UA,
+        },
+        body: JSON.stringify(body),
+    });
+    if (!res.ok) {
+        throw new ApiError(`${method} -> HTTP ${res.status}: ${(await res.text()).slice(0, 300)}`, res.status);
+    }
+    return (await res.json());
+}
+/** Fetch the raw quota summary from the Cloud Code API. */
+export async function fetchQuotaSummary(accessToken, opts = {}) {
+    const candidates = opts.host
+        ? [opts.host]
+        : opts.channel === 'prod'
+            ? ['cloudcode-pa.googleapis.com']
+            : opts.channel === 'daily'
+                ? ['daily-cloudcode-pa.googleapis.com']
+                : HOSTS;
+    let lastErr;
+    for (const host of candidates) {
+        try {
+            const lca = await postInternal(host, accessToken, 'loadCodeAssist', {
+                metadata: { ideType: 'ANTIGRAVITY' },
+            });
+            const project = lca.cloudaicompanionProject;
+            if (!project)
+                throw new ApiError('loadCodeAssist returned no cloudaicompanionProject', 0);
+            const raw = await postInternal(host, accessToken, 'retrieveUserQuotaSummary', { project });
+            return {
+                raw,
+                host,
+                tier: lca.currentTier?.id ?? null,
+                account: extractEmail(lca.currentTier?.upgradeSubscriptionUri),
+            };
+        }
+        catch (err) {
+            lastErr = err;
+            // 404 / wrong-host -> try next candidate; auth errors -> stop early.
+            if (err instanceof ApiError && (err.status === 401 || err.status === 403))
+                throw err;
+        }
+    }
+    throw lastErr ?? new ApiError('No Cloud Code host responded', 0);
+}
+export { ApiError };
+//# sourceMappingURL=api.js.map

package/dist/src/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/api.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,0DAA0D;AAC1D,sFAAsF;AACtF,0CAA0C;AAC1C,EAAE;AACF,qFAAqF;AACrF,+CAA+C;AAI/C,MAAM,EAAE,GAAG,iCAAiC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;AAE/E,+EAA+E;AAC/E,wEAAwE;AACxE,MAAM,KAAK,GAAG,CAAC,mCAAmC,EAAE,6BAA6B,CAAC,CAAC;AAEnF,MAAM,QAAS,SAAQ,KAAK;IAC1B,MAAM,CAAS;IACf,YAAY,OAAe,EAAE,MAAc;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAYD,SAAS,YAAY,CAAC,GAAuB;IAC3C,MAAM,CAAC,GAAG,GAAG,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAC1C,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAI,IAAY,EAAE,WAAmB,EAAE,MAAc,EAAE,IAAa;IAC7F,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,WAAW,IAAI,eAAe,MAAM,EAAE,EAAE;QAC9D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,WAAW,EAAE;YACtC,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,EAAE;SACjB;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,QAAQ,CAAC,GAAG,MAAM,YAAY,GAAG,CAAC,MAAM,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;AACjC,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,WAAmB,EAAE,OAAqB,EAAE;IAClF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI;QAC1B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACb,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM;YACvB,CAAC,CAAC,CAAC,6BAA6B,CAAC;YACjC,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO;gBACxB,CAAC,CAAC,CAAC,mCAAmC,CAAC;gBACvC,CAAC,CAAC,KAAK,CAAC;IAEd,IAAI,OAAgB,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,YAAY,CAAyB,IAAI,EAAE,WAAW,EAAE,gBAAgB,EAAE;gBAC1F,QAAQ,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE;aACrC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,uBAAuB,CAAC;YAC5C,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,QAAQ,CAAC,oDAAoD,EAAE,CAAC,CAAC,CAAC;YAE1F,MAAM,GAAG,GAAG,MAAM,YAAY,CAAmB,IAAI,EAAE,WAAW,EAAE,0BAA0B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7G,OAAO;gBACL,GAAG;gBACH,IAAI;gBACJ,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,IAAI,IAAI;gBACjC,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,sBAAsB,CAAC;aAC/D,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,GAAG,CAAC;YACd,qEAAqE;YACrE,IAAI,GAAG,YAAY,QAAQ,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;QACvF,CAAC;IACH,CAAC;IACD,MAAM,OAAO,IAAI,IAAI,QAAQ,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,OAAO,EAAE,QAAQ,EAAE,CAAC"}

package/dist/src/credentials.d.ts

@@ -0,0 +1,22 @@
+declare class CredentialError extends Error {
+}
+interface Cred {
+    accessToken: string;
+    refreshToken: string | null;
+    expiry: Date | null;
+    authMethod: string | null;
+}
+export declare function decodeSecret(raw: string): Cred;
+export interface AccessToken {
+    accessToken: string;
+    authMethod: string | null;
+}
+/**
+ * Returns a valid access token for the Cloud Code API, refreshing if needed.
+ * Throws CredentialError if no credential can be read from any keyring backend
+ * (the caller should then consider the PTY fallback).
+ */
+export declare function getAccessToken(): Promise<AccessToken>;
+/** Whether a keyring-based credential is readable at all (no refresh attempted). */
+export declare function hasCredential(): Promise<boolean>;
+export { CredentialError };

package/dist/src/credentials.js

@@ -0,0 +1,233 @@
+// Cross-platform reader for the Antigravity CLI (`agy`) OAuth credential.
+//
+// `agy` stores its token in the OS keyring using the zalando/go-keyring
+// convention: service="gemini", account="antigravity". Long/binary values are
+// stored with a `go-keyring-base64:` prefix followed by base64(JSON). The
+// decoded JSON looks like:
+//   { "token": { "access_token", "token_type", "refresh_token", "expiry" },
+//     "auth_method": "consumer" }
+//
+// Read backends, tried in order:
+//   1. @napi-rs/keyring native module  (macOS / Linux Secret Service)
+//   2. OS CLI fallback                  (`security` on macOS, `secret-tool` on Linux)
+//   3. Windows Credential Manager       (CredRead via powershell.exe — go-keyring's
+//                                        target format differs from keyring-rs's)
+//   4. File fallback                    (headless Linux: agy can't reach a keyring
+//                                        and writes the token to a plain-JSON file)
+// If every backend fails, the caller falls back to the PTY path which drives
+// `agy` itself.
+import { execFileSync } from 'node:child_process';
+import { readFileSync, existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+// OAuth client for the Antigravity CLI. This is an installed/desktop ("public")
+// OAuth client: per Google's own docs the client secret of an installed app is
+// "obviously not treated as a secret" — it ships inside the agy binary and is
+// identical for every user (the per-user identity is the keyring token, not
+// this). Verified: the same client_id appears in agy's browser consent URL
+// regardless of account, and the flow uses PKCE (code_challenge/S256), the
+// mechanism that secures public clients precisely because the secret is public.
+// Same pattern as Google's open-source gemini-cli.
+const OAUTH_CLIENT_ID = '1071006060591-tmhssin2h21lcre235vtolojh4g403ep.apps.googleusercontent.com';
+const OAUTH_CLIENT_SECRET = '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';
+const TOKEN_URL = 'https://oauth2.googleapis.com/token';
+const KEYRING_SERVICE = 'gemini';
+const KEYRING_ACCOUNT = 'antigravity';
+const B64_PREFIX = 'go-keyring-base64:';
+class CredentialError extends Error {
+}
+// --- raw keyring read --------------------------------------------------------
+async function readViaNapiEsm() {
+    try {
+        const { Entry } = await import('@napi-rs/keyring');
+        if (!Entry)
+            return null;
+        return new Entry(KEYRING_SERVICE, KEYRING_ACCOUNT).getPassword() ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+function readViaCli() {
+    try {
+        if (process.platform === 'darwin') {
+            return execFileSync('security', ['find-generic-password', '-s', KEYRING_SERVICE, '-a', KEYRING_ACCOUNT, '-w'], { encoding: 'utf8' }).trim();
+        }
+        if (process.platform === 'linux') {
+            return execFileSync('secret-tool', ['lookup', 'service', KEYRING_SERVICE, 'account', KEYRING_ACCOUNT], { encoding: 'utf8' }).trim();
+        }
+    }
+    catch {
+        return null;
+    }
+    return null;
+}
+// On Windows, agy stores the token in Credential Manager via Go's
+// zalando/go-keyring, whose target name is `service:account` ("gemini:antigravity").
+// @napi-rs/keyring (keyring-rs) uses a different target format and can't find it,
+// so we read the credential blob directly via the Win32 CredRead API through the
+// built-in powershell.exe (no extra dependency).
+const WIN_CRED_TARGET = `${KEYRING_SERVICE}:${KEYRING_ACCOUNT}`;
+const PS_READ_CRED = `$ErrorActionPreference='Stop'
+$sig=@'
+using System;
+using System.Runtime.InteropServices;
+public class CredApi {
+  [DllImport("advapi32.dll", SetLastError=true, CharSet=CharSet.Unicode)]
+  public static extern bool CredRead(string target, int type, int flags, out IntPtr cred);
+  [DllImport("advapi32.dll")] public static extern void CredFree(IntPtr cred);
+  [StructLayout(LayoutKind.Sequential)]
+  public struct CREDENTIAL {
+    public int Flags; public int Type; public IntPtr TargetName; public IntPtr Comment;
+    public System.Runtime.InteropServices.ComTypes.FILETIME LastWritten;
+    public int CredentialBlobSize; public IntPtr CredentialBlob; public int Persist;
+    public int AttributeCount; public IntPtr Attributes; public IntPtr TargetAlias; public IntPtr UserName;
+  }
+  public static byte[] Read(string target){
+    IntPtr p; if(!CredRead(target,1,0,out p)) return null;
+    try {
+      var c=(CREDENTIAL)Marshal.PtrToStructure(p,typeof(CREDENTIAL));
+      var b=new byte[c.CredentialBlobSize];
+      if(c.CredentialBlobSize>0) Marshal.Copy(c.CredentialBlob,b,0,c.CredentialBlobSize);
+      return b;
+    } finally { CredFree(p); }
+  }
+}
+'@
+Add-Type -TypeDefinition $sig | Out-Null
+$b=[CredApi]::Read('${WIN_CRED_TARGET}')
+if($b -eq $null){ exit 1 }
+[Console]::Out.Write([Convert]::ToBase64String($b))`;
+function readViaWindowsCredman() {
+    if (process.platform !== 'win32')
+        return null;
+    try {
+        const encoded = Buffer.from(PS_READ_CRED, 'utf16le').toString('base64');
+        const b64 = execFileSync('powershell.exe', ['-NoProfile', '-NonInteractive', '-EncodedCommand', encoded], { encoding: 'utf8' }).trim();
+        if (!b64)
+            return null;
+        const raw = Buffer.from(b64, 'base64');
+        // go-keyring writes the value as UTF-8; tolerate UTF-16LE just in case.
+        const utf8 = raw.toString('utf8');
+        const looksValid = (s) => s.startsWith(B64_PREFIX) || s.trimStart().startsWith('{');
+        if (looksValid(utf8))
+            return utf8;
+        const utf16 = raw.toString('utf16le');
+        if (looksValid(utf16))
+            return utf16;
+        return utf8;
+    }
+    catch {
+        return null;
+    }
+}
+// On headless Linux (no Secret Service) agy persists the token to a plain-JSON
+// file instead of the keyring. Same payload shape, no `go-keyring-base64:` prefix.
+function readViaFile() {
+    const candidates = [
+        process.env.AGY_OAUTH_TOKEN_FILE,
+        join(homedir(), '.gemini', 'antigravity-cli', 'antigravity-oauth-token'),
+    ].filter((p) => Boolean(p));
+    for (const path of candidates) {
+        try {
+            if (existsSync(path)) {
+                const content = readFileSync(path, 'utf8').trim();
+                if (content)
+                    return content;
+            }
+        }
+        catch {
+            // unreadable (perms) — try next candidate
+        }
+    }
+    return null;
+}
+async function readRawSecret() {
+    const fromNapi = await readViaNapiEsm();
+    if (fromNapi)
+        return fromNapi;
+    const fromCli = readViaCli();
+    if (fromCli)
+        return fromCli;
+    const fromWin = readViaWindowsCredman();
+    if (fromWin)
+        return fromWin;
+    const fromFile = readViaFile();
+    if (fromFile)
+        return fromFile;
+    return null;
+}
+// --- decode ------------------------------------------------------------------
+export function decodeSecret(raw) {
+    const payload = raw.startsWith(B64_PREFIX)
+        ? Buffer.from(raw.slice(B64_PREFIX.length), 'base64').toString('utf8')
+        : raw;
+    let parsed;
+    try {
+        parsed = JSON.parse(payload);
+    }
+    catch {
+        throw new CredentialError('Stored agy credential is not valid JSON');
+    }
+    const token = (parsed.token ?? parsed);
+    const accessToken = token.access_token;
+    if (typeof accessToken !== 'string' || !accessToken) {
+        throw new CredentialError('Stored agy credential has no access_token');
+    }
+    const expiry = token.expiry;
+    return {
+        accessToken,
+        refreshToken: typeof token.refresh_token === 'string' ? token.refresh_token : null,
+        expiry: typeof expiry === 'string' ? new Date(expiry) : null,
+        authMethod: typeof parsed.auth_method === 'string' ? parsed.auth_method : null,
+    };
+}
+// --- refresh -----------------------------------------------------------------
+function isExpired(cred, skewMs = 60_000) {
+    if (!cred.expiry)
+        return false;
+    return cred.expiry.getTime() - Date.now() < skewMs;
+}
+async function refreshAccessToken(refreshToken) {
+    const body = new URLSearchParams({
+        grant_type: 'refresh_token',
+        refresh_token: refreshToken,
+        client_id: OAUTH_CLIENT_ID,
+        client_secret: OAUTH_CLIENT_SECRET,
+    });
+    const res = await fetch(TOKEN_URL, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: body.toString(),
+    });
+    if (!res.ok) {
+        throw new CredentialError(`Token refresh failed: HTTP ${res.status} ${await res.text()}`);
+    }
+    const json = (await res.json());
+    return json.access_token;
+}
+/**
+ * Returns a valid access token for the Cloud Code API, refreshing if needed.
+ * Throws CredentialError if no credential can be read from any keyring backend
+ * (the caller should then consider the PTY fallback).
+ */
+export async function getAccessToken() {
+    const raw = await readRawSecret();
+    if (!raw) {
+        throw new CredentialError('Could not read agy credential from the OS keyring or token file. ' +
+            'Is agy logged in on this machine? (set AGY_OAUTH_TOKEN_FILE to override the path, ' +
+            'or use --source pty)');
+    }
+    const cred = decodeSecret(raw);
+    if (isExpired(cred) && cred.refreshToken) {
+        const fresh = await refreshAccessToken(cred.refreshToken);
+        return { accessToken: fresh, authMethod: cred.authMethod };
+    }
+    return { accessToken: cred.accessToken, authMethod: cred.authMethod };
+}
+/** Whether a keyring-based credential is readable at all (no refresh attempted). */
+export async function hasCredential() {
+    return (await readRawSecret()) != null;
+}
+export { CredentialError };
+//# sourceMappingURL=credentials.js.map

package/dist/src/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/credentials.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,EAAE;AACF,wEAAwE;AACxE,8EAA8E;AAC9E,0EAA0E;AAC1E,2BAA2B;AAC3B,4EAA4E;AAC5E,kCAAkC;AAClC,EAAE;AACF,iCAAiC;AACjC,sEAAsE;AACtE,sFAAsF;AACtF,oFAAoF;AACpF,kFAAkF;AAClF,mFAAmF;AACnF,oFAAoF;AACpF,6EAA6E;AAC7E,gBAAgB;AAEhB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,gFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AAC9E,4EAA4E;AAC5E,2EAA2E;AAC3E,2EAA2E;AAC3E,gFAAgF;AAChF,mDAAmD;AACnD,MAAM,eAAe,GAAG,2EAA2E,CAAC;AACpG,MAAM,mBAAmB,GAAG,qCAAqC,CAAC;AAClE,MAAM,SAAS,GAAG,qCAAqC,CAAC;AAExD,MAAM,eAAe,GAAG,QAAQ,CAAC;AACjC,MAAM,eAAe,GAAG,aAAa,CAAC;AACtC,MAAM,UAAU,GAAG,oBAAoB,CAAC;AAExC,MAAM,eAAgB,SAAQ,KAAK;CAAG;AAStC,gFAAgF;AAEhF,KAAK,UAAU,cAAc;IAC3B,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,OAAO,IAAI,KAAK,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,YAAY,CACjB,UAAU,EACV,CAAC,uBAAuB,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,EAC7E,EAAE,QAAQ,EAAE,MAAM,EAAE,CACrB,CAAC,IAAI,EAAE,CAAC;QACX,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,OAAO,YAAY,CACjB,aAAa,EACb,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,eAAe,CAAC,EAClE,EAAE,QAAQ,EAAE,MAAM,EAAE,CACrB,CAAC,IAAI,EAAE,CAAC;QACX,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kEAAkE;AAClE,qFAAqF;AACrF,kFAAkF;AAClF,iFAAiF;AACjF,iDAAiD;AACjD,MAAM,eAAe,GAAG,GAAG,eAAe,IAAI,eAAe,EAAE,CAAC;AAEhE,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;sBA2BC,eAAe;;oDAEe,CAAC;AAErD,SAAS,qBAAqB;IAC5B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,YAAY,CACtB,gBAAgB,EAChB,CAAC,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,OAAO,CAAC,EAC7D,EAAE,QAAQ,EAAE,MAAM,EAAE,CACrB,CAAC,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACvC,wEAAwE;QACxE,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,UAAU,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrG,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACtC,IAAI,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,mFAAmF;AACnF,SAAS,WAAW;IAClB,MAAM,UAAU,GAAG;QACjB,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAChC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,yBAAyB,CAAC;KACzE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBAClD,IAAI,OAAO;oBAAE,OAAO,OAAO,CAAC;YAC9B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,aAAa;IAC1B,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAE,CAAC;IACxC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC;IACxC,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;QACxC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QACtE,CAAC,CAAC,GAAG,CAAC;IACR,IAAI,MAA2F,CAAC;IAChG,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,yCAAyC,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAA4B,CAAC;IAClE,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC;IACvC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,IAAI,eAAe,CAAC,2CAA2C,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,OAAO;QACL,WAAW;QACX,YAAY,EAAE,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;QAClF,MAAM,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;QAC5D,UAAU,EAAE,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;KAC/E,CAAC;AACJ,CAAC;AAED,gFAAgF;AAEhF,SAAS,SAAS,CAAC,IAAU,EAAE,MAAM,GAAG,MAAM;IAC5C,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/B,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,YAAoB;IACpD,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,UAAU,EAAE,eAAe;QAC3B,aAAa,EAAE,YAAY;QAC3B,SAAS,EAAE,eAAe;QAC1B,aAAa,EAAE,mBAAmB;KACnC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;QACjC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,eAAe,CAAC,8BAA8B,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA6B,CAAC;IAC5D,OAAO,IAAI,CAAC,YAAY,CAAC;AAC3B,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAC;IAClC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,eAAe,CACvB,mEAAmE;YACjE,oFAAoF;YACpF,sBAAsB,CACzB,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1D,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;AACxE,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,OAAO,CAAC,MAAM,aAAa,EAAE,CAAC,IAAI,IAAI,CAAC;AACzC,CAAC;AAED,OAAO,EAAE,eAAe,EAAE,CAAC"}

package/dist/src/main.d.ts

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+import type { Snapshot } from './types.js';
+export interface CliOptions {
+    json: boolean;
+    watch: number | null;
+    source: 'auto' | 'api' | 'pty';
+    channel: 'auto' | 'daily' | 'prod';
+    cache: boolean;
+    command: 'update' | null;
+    check: boolean;
+    version?: boolean;
+    help?: boolean;
+}
+/** Subset of options needed to produce a snapshot (also usable from server.ts). */
+export interface SnapshotOptions {
+    source: 'auto' | 'api' | 'pty';
+    channel: 'auto' | 'daily' | 'prod';
+    cache: boolean;
+}
+export declare function getSnapshot(opts: SnapshotOptions): Promise<Snapshot>;