muonroi-cli 1.8.3 → 1.8.5

package/dist/src/utils/visible-retry.d.ts

@@ -17,4 +17,15 @@ export interface VisibleRetryOpts {
     /** Hook called before each delay; default writes to stderr. */
     onRetry?: (attempt: number, totalAttempts: number, delayMs: number, error: Error) => void;
 }
+/**
+ * Optional UI sink for retry progress. The TUI registers one via
+ * {@link setRetryReporter}; without it (headless/CLI, tests) retries fall back
+ * to stderr. This exists because a raw `process.stderr.write` under OpenTUI's
+ * raw-mode alt-screen paints over wherever the cursor sits — the retry line was
+ * bleeding into the composer input frame (user-reported). Routing through a
+ * toast keeps it in the proper surface.
+ */
+type RetryReporter = (message: string, level: "warn" | "info") => void;
+export declare function setRetryReporter(fn: RetryReporter | null): void;
 export declare function withVisibleRetry<T>(fn: () => Promise<T>, opts?: VisibleRetryOpts): Promise<T>;
+export {};

package/dist/src/utils/visible-retry.js

@@ -6,9 +6,18 @@ function isRetryableError(err) {
     const msg = (e?.message ?? "").toLowerCase();
     return msg.includes("rate limit") || msg.includes("too many requests") || msg.includes("timeout");
 }
+let retryReporter = null;
+export function setRetryReporter(fn) {
+    retryReporter = fn;
+}
 function defaultOnRetry(attempt, total, delayMs, error) {
     const reason = error.statusCode === 429 ? "rate-limited (429)" : error.message.slice(0, 80);
-    process.stderr.write(`[retry] ${reason} — waiting ${Math.round(delayMs / 1000)}s before attempt ${attempt + 1}/${total}\n`);
+    const message = `[retry] ${reason} — waiting ${Math.round(delayMs / 1000)}s before attempt ${attempt + 1}/${total}`;
+    if (retryReporter) {
+        retryReporter(message, "warn");
+        return;
+    }
+    process.stderr.write(`${message}\n`);
 }
 export async function withVisibleRetry(fn, opts = {}) {
     const delays = opts.delaysMs ?? [2000, 4000, 8000, 16000, 32000];

package/dist/src/verify/entrypoint.d.ts

@@ -27,4 +27,4 @@ export declare function getVerifyCliError(options: {
     hasPrompt?: boolean;
     hasMessageArgs?: boolean;
 }): string | null;
-export { defaultShellInit, inferVerifyProjectProfile, inferVerifySmokeUrl, normalizeVerifyRecipe, type VerifyProjectProfile, } from "./recipes.js";
+export { defaultShellInit, inferVerifyProjectProfile, inferVerifySmokeUrl, normalizeVerifyRecipe, shouldTrustDeterministicRecipe, type VerifyProjectProfile, } from "./recipes.js";

package/dist/src/verify/entrypoint.js

@@ -382,5 +382,5 @@ export function getVerifyCliError(options) {
     }
     return null;
 }
-export { defaultShellInit, inferVerifyProjectProfile, inferVerifySmokeUrl, normalizeVerifyRecipe, } from "./recipes.js";
+export { defaultShellInit, inferVerifyProjectProfile, inferVerifySmokeUrl, normalizeVerifyRecipe, shouldTrustDeterministicRecipe, } from "./recipes.js";
 //# sourceMappingURL=entrypoint.js.map

package/dist/src/verify/recipes.d.ts

@@ -20,3 +20,16 @@ export declare function normalizeVerifyAppKind(value: string): VerifyAppKind;
 export declare function normalizeVerifyRecipe(value: unknown): VerifyRecipe | null;
 export declare function inferVerifySmokeUrl(settings?: SandboxSettings): string | null;
 export declare function inferVerifyProjectProfile(cwd: string, baseSettings?: SandboxSettings, recipeOverride?: VerifyRecipe | null): VerifyProjectProfile;
+/**
+ * Decides whether a deterministically-inferred recipe is trustworthy enough to
+ * hand to the sprint-1 verify gate INSTEAD of a null (which trips CB-3's
+ * "Recovery options" halt). It is trusted ONLY when the profiler recognized the
+ * ecosystem (`appKind !== "unknown"`) AND found at least one real test command —
+ * i.e. there is something concrete to verify against.
+ *
+ * This is the exact boundary `Orchestrator.detectVerifyRecipe` applies to its
+ * `inferVerifyProjectProfile(cwd)` fallback. Exported so the gate seam is
+ * covered by one unit test over the REAL predicate rather than a copy that can
+ * silently drift from production.
+ */
+export declare function shouldTrustDeterministicRecipe(recipe: Pick<VerifyRecipe, "appKind" | "testCommands">): boolean;

package/dist/src/verify/recipes.js

@@ -525,4 +525,19 @@ export function inferVerifyProjectProfile(cwd, baseSettings = {}, recipeOverride
         recipe: recipeWithRuntime,
     };
 }
+/**
+ * Decides whether a deterministically-inferred recipe is trustworthy enough to
+ * hand to the sprint-1 verify gate INSTEAD of a null (which trips CB-3's
+ * "Recovery options" halt). It is trusted ONLY when the profiler recognized the
+ * ecosystem (`appKind !== "unknown"`) AND found at least one real test command —
+ * i.e. there is something concrete to verify against.
+ *
+ * This is the exact boundary `Orchestrator.detectVerifyRecipe` applies to its
+ * `inferVerifyProjectProfile(cwd)` fallback. Exported so the gate seam is
+ * covered by one unit test over the REAL predicate rather than a copy that can
+ * silently drift from production.
+ */
+export function shouldTrustDeterministicRecipe(recipe) {
+    return recipe.appKind !== "unknown" && recipe.testCommands.length > 0;
+}
 //# sourceMappingURL=recipes.js.map

package/package.json

@@ -1,132 +1,135 @@
-{
-  "name": "muonroi-cli",
-  "workspaces": [
-    "packages/*"
-  ],
-  "version": "1.8.3",
-  "description": "BYOK AI coding agent with multi-model council debate, role-based routing, and auto-compact.",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/muonroi/muonroi-cli.git"
-  },
-  "homepage": "https://github.com/muonroi/muonroi-cli#readme",
-  "bugs": {
-    "url": "https://github.com/muonroi/muonroi-cli/issues"
-  },
-  "type": "module",
-  "main": "dist/src/index.js",
-  "exports": {
-    ".": {
-      "import": "./dist/src/index.js",
-      "types": "./dist/src/index.d.ts"
-    }
-  },
-  "bin": {
-    "muonroi-cli": "dist/src/index.js",
-    "mu": "dist/src/index.js"
-  },
-  "scripts": {
-    "dev": "node scripts/sync-version.cjs && bun run src/index.ts",
-    "build": "node scripts/sync-version.cjs && tsc && node scripts/fix-extensions.cjs && node -e \"require('fs').cpSync('src/models/catalog.json', 'dist/src/models/catalog.json', { recursive: true })\"",
-    "build:binary": "bun build --compile --outfile ./dist/muonroi-cli-standalone ./src/index.ts",
-    "start": "bun run dist/index.js",
-    "typecheck": "tsc --noEmit",
-    "test": "bunx vitest run",
-    "test:watch": "bunx vitest",
-    "test:harness": "bunx vitest -c vitest.harness.config.ts run tests/harness/",
-    "test:core": "bunx vitest run packages/agent-harness-core/__tests__/",
-    "test:harness-react": "bunx vitest -c packages/agent-harness-react/vitest.config.ts run",
-    "test:harness-angular": "bunx vitest -c vitest.harness-angular.config.ts run tests/harness-angular/",
-    "test:angular": "bunx vitest -c packages/agent-harness-angular/vitest.config.ts run",
-    "build:core": "cd packages/agent-harness-core && bun run build",
-    "lint": "biome check src/",
-    "format": "biome format src/",
-    "format:fix": "biome format --write src/",
-    "lint:fix": "biome check --fix src/",
-    "lint:semantic": "bun scripts/check-semantic-wrap.ts",
-    "lint:harness-skips": "bun run scripts/check-harness-skips.ts",
-    "lint:harness-skips:strict": "bun run scripts/check-harness-skips.ts --strict",
-    "pre-commit": "lint-staged",
-    "prepare": "husky",
-    "postinstall": "node scripts/postinstall.cjs || exit 0",
-    "ee:ingest-bb": "bun run scripts/ingest-bb-to-ee.mts",
-    "clean:meta": "git clean -fdX -- .scratch chat-export-*.txt .ee-ingest-state.json .brain-*.tmp 2>/dev/null || echo 'clean:meta: no matching untracked ignored files or git unavailable'"
-  },
-  "lint-staged": {
-    "*.{ts,tsx,js,mjs,cjs,json}": "biome check --write --no-errors-on-unmatched --max-diagnostics=200"
-  },
-  "files": [
-    "dist/",
-    "!dist/**/*.exe",
-    "!dist/**/*.map",
-    "!dist/**/__tests__/**",
-    "!dist/**/__test-helpers__/**",
-    "!dist/**/__test-stubs__/**",
-    "!dist/**/*.test.js",
-    "!dist/**/*.test.d.ts",
-    "!dist/**/*.spec.js",
-    "!dist/**/*.spec.d.ts",
-    "scripts/postinstall.cjs"
-  ],
-  "keywords": [
-    "cli",
-    "agent",
-    "ai",
-    "coding",
-    "terminal",
-    "opentui"
-  ],
-  "author": "muonroi",
-  "license": "MIT",
-  "dependencies": {
-    "@ai-sdk/anthropic": "3.0.72",
-    "@ai-sdk/google": "3.0.65",
-    "@ai-sdk/mcp": "1.0.37",
-    "@ai-sdk/openai": "3.0.54",
-    "@ai-sdk/openai-compatible": "2.0.42",
-    "@ai-sdk/provider": "3.0.9",
-    "@ai-sdk/provider-utils": "4.0.24",
-    "@modelcontextprotocol/sdk": "1.29.0",
-    "@npmcli/arborist": "^9.4.3",
-    "@opentui/core": "0.1.107",
-    "@opentui/react": "0.1.107",
-    "@qdrant/js-client-rest": "1.17.0",
-    "ai": "6.0.169",
-    "better-sqlite3": "^12.10.0",
-    "commander": "^12.1.0",
-    "diff": "^8.0.3",
-    "fast-xml-parser": "^4.4.1",
-    "gpt-tokenizer": "^3.4.0",
-    "keytar": "7.9.0",
-    "ollama-ai-provider-v2": "1.5.5",
-    "proper-lockfile": "^4.1.2",
-    "react": "19.2.5",
-    "ripgrep": "^0.3.1",
-    "semver": "^7.7.4",
-    "tree-sitter-python": "^0.25.0",
-    "tree-sitter-typescript": "^0.23.2",
-    "vscode-jsonrpc": "8.2.1",
-    "vscode-languageserver-types": "3.17.5",
-    "web-tree-sitter": "0.26.8",
-    "zod": "^4.3.6"
-  },
-  "devDependencies": {
-    "@biomejs/biome": "2.4.13",
-    "@types/better-sqlite3": "^7.6.13",
-    "@types/diff": "^8.0.0",
-    "@types/node": "^22.19.15",
-    "@types/npmcli__arborist": "^6.3.3",
-    "@types/proper-lockfile": "^4.1.4",
-    "@types/react": "^19.2.14",
-    "@types/semver": "^7.7.1",
-    "ajv": "^8.20.0",
-    "husky": "9.1.7",
-    "lint-staged": "16.4.0",
-    "typescript": "5.9.3",
-    "vitest": "4.1.5"
-  },
-  "engines": {
-    "node": ">=20.0.0"
-  },
-  "preferGlobal": true
-}
+{
+  "name": "muonroi-cli",
+  "workspaces": [
+    "packages/*"
+  ],
+  "version": "1.8.5",
+  "description": "BYOK AI coding agent with multi-model council debate, role-based routing, and auto-compact.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/muonroi/muonroi-cli.git"
+  },
+  "homepage": "https://github.com/muonroi/muonroi-cli#readme",
+  "bugs": {
+    "url": "https://github.com/muonroi/muonroi-cli/issues"
+  },
+  "type": "module",
+  "main": "dist/src/index.js",
+  "exports": {
+    ".": {
+      "import": "./dist/src/index.js",
+      "types": "./dist/src/index.d.ts"
+    }
+  },
+  "bin": {
+    "muonroi-cli": "dist/src/index.js",
+    "mu": "dist/src/index.js"
+  },
+  "scripts": {
+    "dev": "node scripts/sync-version.cjs && bun run src/index.ts",
+    "build": "node scripts/sync-version.cjs && tsc && node scripts/fix-extensions.cjs && node -e \"require('fs').cpSync('src/models/catalog.json', 'dist/src/models/catalog.json', { recursive: true })\"",
+    "build:binary": "bun build --compile --outfile ./dist/muonroi-cli-standalone ./src/index.ts",
+    "start": "bun run dist/index.js",
+    "typecheck": "tsc --noEmit",
+    "ci:local": "rm -rf /tmp/flow /tmp/gsd-* /tmp/muonroi-* /tmp/sprint-runner-* 2>/dev/null; bun install --frozen-lockfile && bun --filter @muonroi/agent-harness-core build && bunx tsc --noEmit && bunx vitest run && DBUS_SESSION_BUS_ADDRESS=unix:path=/dev/null GNOME_KEYRING_CONTROL= bunx vitest -c vitest.harness.config.ts run tests/harness/",
+    "test": "bunx vitest run",
+    "test:watch": "bunx vitest",
+    "test:harness": "bunx vitest -c vitest.harness.config.ts run tests/harness/",
+    "test:core": "bunx vitest run packages/agent-harness-core/__tests__/",
+    "test:harness-react": "bunx vitest -c packages/agent-harness-react/vitest.config.ts run",
+    "test:harness-angular": "bunx vitest -c vitest.harness-angular.config.ts run tests/harness-angular/",
+    "test:angular": "bunx vitest -c packages/agent-harness-angular/vitest.config.ts run",
+    "build:core": "cd packages/agent-harness-core && bun run build",
+    "lint": "biome check src/",
+    "format": "biome format src/",
+    "format:fix": "biome format --write src/",
+    "lint:fix": "biome check --fix src/",
+    "lint:semantic": "bun scripts/check-semantic-wrap.ts",
+    "lint:semantic:strict": "bun scripts/check-semantic-wrap.ts --strict",
+    "lint:harness-skips": "bun run scripts/check-harness-skips.ts",
+    "lint:harness-skips:strict": "bun run scripts/check-harness-skips.ts --strict",
+    "pre-commit": "lint-staged",
+    "prepare": "husky",
+    "postinstall": "node scripts/postinstall.cjs || exit 0",
+    "ee:ingest-bb": "bun run scripts/ingest-bb-to-ee.mts",
+    "clean:meta": "git clean -fdX -- .scratch chat-export-*.txt .ee-ingest-state.json .brain-*.tmp 2>/dev/null || echo 'clean:meta: no matching untracked ignored files or git unavailable'"
+  },
+  "lint-staged": {
+    "*.{ts,tsx,js,mjs,cjs,json}": "biome check --write --no-errors-on-unmatched --max-diagnostics=200"
+  },
+  "files": [
+    "dist/",
+    "!dist/**/*.exe",
+    "!dist/**/*.map",
+    "!dist/**/__tests__/**",
+    "!dist/**/__test-helpers__/**",
+    "!dist/**/__test-stubs__/**",
+    "!dist/**/*.test.js",
+    "!dist/**/*.test.d.ts",
+    "!dist/**/*.spec.js",
+    "!dist/**/*.spec.d.ts",
+    "scripts/postinstall.cjs"
+  ],
+  "keywords": [
+    "cli",
+    "agent",
+    "ai",
+    "coding",
+    "terminal",
+    "opentui"
+  ],
+  "author": "muonroi",
+  "license": "MIT",
+  "dependencies": {
+    "@ai-sdk/anthropic": "3.0.72",
+    "@ai-sdk/mcp": "1.0.37",
+    "@ai-sdk/openai": "3.0.54",
+    "@ai-sdk/openai-compatible": "2.0.42",
+    "@ai-sdk/provider": "3.0.9",
+    "@ai-sdk/provider-utils": "4.0.24",
+    "@modelcontextprotocol/sdk": "1.29.0",
+    "@npmcli/arborist": "^9.4.3",
+    "@opentui/core": "0.1.107",
+    "@opentui/react": "0.1.107",
+    "@qdrant/js-client-rest": "1.17.0",
+    "ai": "6.0.169",
+    "better-sqlite3": "^12.10.0",
+    "commander": "^12.1.0",
+    "diff": "^8.0.3",
+    "fast-xml-parser": "^4.4.1",
+    "gpt-tokenizer": "^3.4.0",
+    "keytar": "7.9.0",
+    "ollama-ai-provider-v2": "1.5.5",
+    "proper-lockfile": "^4.1.2",
+    "react": "19.2.5",
+    "ripgrep": "^0.3.1",
+    "semver": "^7.7.4",
+    "tree-sitter-python": "^0.25.0",
+    "tree-sitter-typescript": "^0.23.2",
+    "turndown": "^7.2.4",
+    "vscode-jsonrpc": "8.2.1",
+    "vscode-languageserver-types": "3.17.5",
+    "web-tree-sitter": "0.26.8",
+    "zod": "^4.3.6"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "2.4.13",
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/diff": "^8.0.0",
+    "@types/node": "^22.19.15",
+    "@types/npmcli__arborist": "^6.3.3",
+    "@types/proper-lockfile": "^4.1.4",
+    "@types/react": "^19.2.14",
+    "@types/semver": "^7.7.1",
+    "@types/turndown": "^5.0.6",
+    "ajv": "^8.20.0",
+    "husky": "9.1.7",
+    "lint-staged": "16.4.0",
+    "typescript": "5.9.3",
+    "vitest": "4.1.5"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "preferGlobal": true
+}

package/dist/src/providers/auth/gcloud.d.ts

@@ -1,28 +0,0 @@
-/**
- * src/providers/auth/gcloud.ts
- *
- * Reads and refreshes tokens from Google Cloud SDK credentials
- * (~/.config/gcloud/application_default_credentials.json).
- *
- * The gcloud ADC token uses GCP's official OAuth client with cloud-platform
- * scopes, which IS accepted by generativelanguage.googleapis.com (unlike the
- * Agy OAuth token whose scope is restricted to cloudcode-pa).
- *
- * Usage:
- *   1. User runs `gcloud auth application-default login` once.
- *   2. This file reads the resulting credentials file, extracts the token,
- *      and returns it as an OAuthTokens-compatible object.
- *   3. The token auto-refreshes when expired (using the refresh_token inside
- *      the credentials file).
- */
-import type { OAuthTokens } from "./types.js";
-/**
- * Try to load a token from gcloud ADC.
- * Returns null if gcloud is not installed or no credentials exist.
- */
-export declare function loadGcloudToken(): Promise<OAuthTokens | null>;
-/**
- * Obtain auth headers from a gcloud-derived OAuthTokens.
- * Compatible with ProviderOAuth.authHeaders() signature.
- */
-export declare function gcloudAuthHeaders(tokens: OAuthTokens): Record<string, string>;

package/dist/src/providers/auth/gcloud.js

@@ -1,102 +0,0 @@
-/**
- * src/providers/auth/gcloud.ts
- *
- * Reads and refreshes tokens from Google Cloud SDK credentials
- * (~/.config/gcloud/application_default_credentials.json).
- *
- * The gcloud ADC token uses GCP's official OAuth client with cloud-platform
- * scopes, which IS accepted by generativelanguage.googleapis.com (unlike the
- * Agy OAuth token whose scope is restricted to cloudcode-pa).
- *
- * Usage:
- *   1. User runs `gcloud auth application-default login` once.
- *   2. This file reads the resulting credentials file, extracts the token,
- *      and returns it as an OAuthTokens-compatible object.
- *   3. The token auto-refreshes when expired (using the refresh_token inside
- *      the credentials file).
- */
-import { readFile } from "node:fs/promises";
-import { homedir } from "node:os";
-import { join } from "node:path";
-import { OAuthRefreshError } from "./types.js";
-// ---------------------------------------------------------------------------
-// Paths
-// ---------------------------------------------------------------------------
-const GCLOUD_ADC_PATH = join(homedir(), ".config", "gcloud", "application_default_credentials.json");
-// ---------------------------------------------------------------------------
-// Loader
-// ---------------------------------------------------------------------------
-/**
- * Load gcloud Application Default Credentials file.
- */
-async function loadADC() {
-    try {
-        const raw = await readFile(GCLOUD_ADC_PATH, "utf8");
-        const creds = JSON.parse(raw);
-        if (creds.type !== "authorized_user") {
-            // service-account keys have a different shape; skip
-            return null;
-        }
-        return creds;
-    }
-    catch {
-        return null;
-    }
-}
-// ---------------------------------------------------------------------------
-// Token exchange
-// ---------------------------------------------------------------------------
-/**
- * Exchange a gcloud refresh_token for a fresh access_token.
- * Google's OAuth token endpoint accepts gcloud ADC credentials.
- */
-async function exchangeRefreshToken(clientId, clientSecret, refreshToken) {
-    const body = new URLSearchParams({
-        client_id: clientId,
-        client_secret: clientSecret,
-        refresh_token: refreshToken,
-        grant_type: "refresh_token",
-    });
-    let res;
-    try {
-        res = await fetch("https://oauth2.googleapis.com/token", {
-            method: "POST",
-            headers: { "Content-Type": "application/x-www-form-urlencoded" },
-            body,
-        });
-    }
-    catch (err) {
-        throw new OAuthRefreshError("google", `gcloud ADC refresh network error: ${err.message}`);
-    }
-    if (!res.ok) {
-        const text = await res.text().catch(() => "");
-        throw new OAuthRefreshError("google", `gcloud ADC refresh failed (${res.status}): ${text}`);
-    }
-    const data = (await res.json());
-    return {
-        accessToken: data.access_token,
-        refreshToken,
-        expiresAt: Date.now() + data.expires_in * 1000,
-    };
-}
-// ---------------------------------------------------------------------------
-// Public API
-// ---------------------------------------------------------------------------
-/**
- * Try to load a token from gcloud ADC.
- * Returns null if gcloud is not installed or no credentials exist.
- */
-export async function loadGcloudToken() {
-    const creds = await loadADC();
-    if (!creds)
-        return null;
-    return exchangeRefreshToken(creds.client_id, creds.client_secret, creds.refresh_token);
-}
-/**
- * Obtain auth headers from a gcloud-derived OAuthTokens.
- * Compatible with ProviderOAuth.authHeaders() signature.
- */
-export function gcloudAuthHeaders(tokens) {
-    return { Authorization: `Bearer ${tokens.accessToken}` };
-}
-//# sourceMappingURL=gcloud.js.map

package/dist/src/providers/auth/gemini-oauth.d.ts

@@ -1,82 +0,0 @@
-/**
- * src/providers/auth/gemini-oauth.ts
- *
- * Agy (Antigravity) Google OAuth implementation.
- * Replaces the old abandoned public gemini-cli OAuth client.
- *
- * Uses client credentials extracted from the local agy.exe binary
- * (registered for agy's "oauth-personal" / Code Assist flow).
- *
- * Agy stores tokens in ~/.gemini/oauth_creds.json (legacy path).
- * We auto-import so existing agy logins continue to work.
- *
- * Override with MUONROI_GOOGLE_* env vars if needed.
- *
- * Note: Even though the provider ID is "google" (for model routing),
- * the OAuth registration and naming is now Agy.
- */
-import type { OAuthCallbackServer } from "../../mcp/oauth-callback.js";
-import type { FetchFn } from "./device-flow.js";
-import type { OAuthTokens, ProviderOAuth } from "./types.js";
-export type CallbackServerFn = (opts: {
-    onCode: (code: string, state: string) => void;
-    timeoutMs?: number;
-    host?: string;
-}) => Promise<OAuthCallbackServer>;
-export type OpenBrowserFn = (url: string) => void;
-export declare class AgyOAuthProvider implements ProviderOAuth {
-    readonly providerId: "google";
-    private clientId;
-    private clientSecret;
-    private readonly fetchFn;
-    private readonly callbackServerFn;
-    private readonly openBrowserFn;
-    private readonly mutex;
-    constructor(opts?: {
-        clientId?: string;
-        clientSecret?: string;
-        fetchFn?: FetchFn;
-        callbackServerFn?: CallbackServerFn;
-        openBrowserFn?: OpenBrowserFn;
-    });
-    login(opts?: {
-        onUserCode?: (code: string, url: string) => void;
-    }): Promise<OAuthTokens>;
-    refresh(tokens: OAuthTokens): Promise<OAuthTokens>;
-    revoke(tokens: OAuthTokens): Promise<void>;
-    authHeaders(tokens: OAuthTokens): Record<string, string>;
-    private _fetchUserEmail;
-}
-/** Back-compat for tests that still reference the old class name. */
-export { AgyOAuthProvider as GeminiOAuthProvider };
-/** Default Agy OAuth provider singleton (uses agy's Google client registration). */
-export declare const agyOAuth: AgyOAuthProvider;
-/** Back-compat alias (some code still references the old name). */
-export declare const geminiOAuth: AgyOAuthProvider;
-/**
- * Load stored OAuth tokens for the Google provider using Agy's registration.
- * - Auto-imports from ~/.gemini/oauth_creds.json (agy storage).
- * - Refreshes using the agy client/secret when near expiry.
- */
-export declare function loadAgyTokensWithRefresh(oauthProvider?: AgyOAuthProvider): Promise<OAuthTokens | null>;
-/** Back-compat alias for older call sites. */
-export declare const loadGeminiTokensWithRefresh: typeof loadAgyTokensWithRefresh;
-/**
- * Load a custom OAuth token using user-provided GCP OAuth client credentials.
- * Users register their own OAuth client in GCP Console → use these credentials
- * to obtain tokens with the `generativelanguage` scope (not restricted to
- * cloudcode-pa like the Agy client).
- *
- * Settings sources (in priority order):
- *   1. settings.json → providers → google → oauthClientId / oauthClientSecret
- *   2. MUONROI_GOOGLE_CLIENT_ID / MUONROI_GOOGLE_CLIENT_SECRET env vars
- *
- * Returns null when no custom client is configured.
- */
-export declare function loadCustomOAuthTokens(): Promise<OAuthTokens | null>;
-/**
- * Perform a full OAuth login with a custom client (Approach C).
- * Users run `keys login google` with their own GCP OAuth client configured
- * in settings → this opens the browser with the right scopes.
- */
-export declare function loginWithCustomClient(): Promise<OAuthTokens | null>;