openlimiter 1.2.0 → 1.3.2

package/README.md

@@ -1,6 +1,6 @@
 # `openlimiter`
 
-A local command line meter for AI quota, usage, and reset times.
+A local terminal quota meter for AI coding subscriptions: bars in your terminal, an account free of charge, and an account that syncs the same bars to the hub and your phone.
 
 ## Install
 
@@ -8,13 +8,37 @@ A local command line meter for AI quota, usage, and reset times.
 npm install --global openlimiter
 ```
 
-## First command
+## First run
 
 ```bash
-openlimiter demo
+npx openlimiter
 ```
 
-The demo uses synthetic data and does not read a provider account.
+With nothing after it, or once installed, `openlimiter` on its own walks the same three steps every time: sign in (skippable), connect the agent CLIs already on this machine, then show bars in. It prints the bars once at the end.
+
+## Terminal bars
+
+Claude Code, Grok Build and the Antigravity CLI draw bars through their own status line. Codex draws its own built in items instead. Gemini CLI, OpenCode, Kimi and any other terminal read a shell prompt segment.
+
+```bash
+openlimiter terminal
+openlimiter terminal install claude
+openlimiter terminal status
+openlimiter terminal uninstall claude
+openlimiter terminal show codex
+openlimiter terminal hide codex
+```
+
+## Account and sync
+
+```bash
+openlimiter login       # device code sign in, approved at openlimiter.com/app/cli
+openlimiter whoami
+openlimiter sync        # uploads one round of cached bars to the hub
+openlimiter logout
+```
+
+Bars never require this. An account only syncs the current percentage on every window between your devices.
 
 ## Agent context hooks
 
@@ -27,25 +51,30 @@ openlimiter hooks status codex
 openlimiter hooks repair codex
 ```
 
-Installation preserves unrelated agent configuration, writes a recoverable backup, performs no network request, and refuses a version below the tested minimum or an unsafe configuration path. A newer version remains enabled and `hooks status` prints one warning line. Hook execution reads only the short lived local snapshot and the protected desktop trust bridge, then fails open with no context on any invalid or missing input.
+Installation preserves unrelated agent configuration, writes a recoverable backup, performs no network request, and refuses a version below the tested minimum or an unsafe configuration path. Hook execution reads only the short lived local snapshot and the protected desktop trust bridge, then fails open with no context on any invalid or missing input.
 
 Antigravity CLI injection is excluded because `agy 1.1.23` did not fire the IDE hook shapes in a real prompt fixture. Kimi Code CLI installation stays gated because `1.50.0` fired `UserPromptSubmit` but discarded successful hook stdout instead of adding it to model context.
 
-Grok Build does not currently expose a documented dynamic context surface. Its `UserPromptSubmit` hook discards successful stdout, so OpenLimiter does not install a Grok hook or claim injection support. Use the explicit command instead:
+Grok Build does not currently expose a documented dynamic context surface. Use the explicit command instead:
 
 ```bash
 openlimiter status --agent-context
 ```
 
-## Provider inputs
-
-| Provider | How data reaches OpenLimiter |
-|---|---|
-| Claude | Claude Code sends its native statusline JSON to standard input |
-| OpenRouter | You supply an explicit API response with `openlimiter ingest --provider openrouter` |
-| Codex | You supply an explicit payload with `openlimiter ingest --provider codex` |
-| Antigravity | You supply an explicit payload with `openlimiter ingest --provider antigravity` |
-| OpenCode | You supply an explicit payload with `openlimiter ingest --provider opencode` |
-| Manual | You create `manual.json` in the OpenLimiter state directory or use `openlimiter ingest --provider manual` |
+## How each provider connects
+
+| Provider | Connects by | Reads |
+|---|---|---|
+| Claude | Nothing to do | The Claude Code status line automatically; an opt in poll of Anthropic's usage endpoint (`providers.claude.poll`) covers the gap when Claude Code is closed |
+| Codex | Use the login already there, or sign in from inside OpenLimiter | The login the Codex CLI stored |
+| Gemini CLI | Read only, from the login already there | The login the Gemini CLI stored |
+| Antigravity | Read only, from the credential already there | The credential the Antigravity CLI stored |
+| Grok | Use the login already there | The login the Grok CLI stored |
+| Kimi | Use the login already there | The usage response the Kimi CLI defines |
+| OpenRouter | Real OAuth from the hub, or your own key | OpenRouter's documented key and usage report |
+| OpenCode | Import only | `openlimiter ingest --provider opencode` |
+| Manual | You write the numbers | `manual.json` in the OpenLimiter state directory, or `openlimiter ingest --provider manual` |
+
+`openlimiter refresh` is what reaches the network, at most once every fifteen minutes per provider: it reads the logins your provider tools already stored and asks each provider for its own usage. It stands down while the desktop app is running, and `statusline`, `snapshot` and `setup` all start it in the background on their own. OpenLimiter never asks for a vendor password, never impersonates a vendor tool, and never uploads a token.
 
 Read the [documentation](https://openlimiter.com/docs) or browse the [repository](https://github.com/lucaswebsystems/openlimiter).

package/dist/bin.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createInterface } from "node:readline/promises";
 import { HOOK_INPUT_MAX_BYTES } from "@openlimiter/adapters";
-import { runCli } from "./cli.js";
+import { runCli, runtimeDependencies } from "./cli.js";
 import { readStandardInputBuffer, readStandardInputText } from "./ingest.js";
 import { decodeWrappedStatuslineCommand, runStatuslineWrapper } from "./statusline-wrapper.js";
 async function promptForSecret() {
@@ -18,10 +18,36 @@ async function promptForSecret() {
         interfaceHandle.close();
     }
 }
+async function promptChoice(question) {
+    if (!process.stdin.isTTY || !process.stdout.isTTY)
+        return "";
+    const interfaceHandle = createInterface({
+        input: process.stdin,
+        output: process.stdout
+    });
+    try {
+        return await interfaceHandle.question(question);
+    }
+    finally {
+        interfaceHandle.close();
+    }
+}
+/**
+ * Everything that reaches the world, built once and used by BOTH entry paths.
+ *
+ * The wrapped status line is the configuration most people end up with, because
+ * it is what the installer writes for anyone who already had a status line of
+ * their own. It used to call the command line tool with only a standard input
+ * reader, so it rendered bars from the cache and never started the refresh that
+ * keeps them true: the one path that most needed acquisition was the one path
+ * that had none.
+ */
+const runtime = runtimeDependencies();
 const argumentsList = process.argv.slice(2);
-const wrapperRequested = argumentsList[0] === "statusline" && argumentsList[1] === "--wrap";
+const wrapIndex = argumentsList.indexOf("--wrap");
+const wrapperRequested = argumentsList[0] === "statusline" && wrapIndex !== -1;
 const wrapped = wrapperRequested
-    ? decodeWrappedStatuslineCommand(argumentsList[2] ?? "")
+    ? decodeWrappedStatuslineCommand(argumentsList[wrapIndex + 1] ?? "")
     : null;
 if (wrapperRequested && wrapped === null) {
     /* A damaged wrapper command must fail invisibly, never fall through to the
@@ -29,10 +55,15 @@ if (wrapperRequested && wrapped === null) {
     process.exitCode = 0;
 }
 else if (wrapped !== null) {
+    const hostIndex = argumentsList.indexOf("--host");
+    const hostArgs = hostIndex !== -1 && argumentsList[hostIndex + 1]
+        ? ["--host", argumentsList[hostIndex + 1]]
+        : [];
     const payload = await readStandardInputBuffer();
     const result = await runStatuslineWrapper(payload, wrapped, {
         ingest: async (buffer) => {
-            await runCli(["statusline"], {
+            await runCli(["statusline", ...hostArgs], {
+                ...runtime,
                 readStandardInput: async () => buffer.toString("utf8")
             });
         }
@@ -44,12 +75,30 @@ else if (wrapped !== null) {
     process.exitCode = result.exitCode;
 }
 else {
+    /*
+     * Ctrl C is wired to an abort signal only for the commands that poll for
+     * somebody else's action: signing in, and the first run wizard's sign in
+     * step. Every other command keeps Node's ordinary SIGINT behaviour, which
+     * this listener would otherwise silently replace by existing at all.
+     */
+    const pollsForApproval = argumentsList[0] === "login" ||
+        argumentsList[0] === "setup" ||
+        argumentsList.length === 0;
+    const controller = pollsForApproval ? new AbortController() : null;
+    const onInterrupt = () => controller?.abort();
+    if (controller !== null)
+        process.on("SIGINT", onInterrupt);
     const result = await runCli(argumentsList, {
+        ...runtime,
         promptForSecret,
+        promptChoice,
+        ...(controller === null ? {} : { interruptSignal: controller.signal }),
         readStandardInput: (signal) => argumentsList[0] === "hook"
             ? readStandardInputText(process.stdin, HOOK_INPUT_MAX_BYTES, undefined, signal)
             : readStandardInputText()
     });
+    if (controller !== null)
+        process.off("SIGINT", onInterrupt);
     if (result.stdout !== "")
         process.stdout.write(result.stdout + "\n");
     if (result.stderr !== "")

package/dist/bin.js.map

@@ -1 +1 @@
-{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EACL,8BAA8B,EAC9B,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AAEjC,KAAK,UAAU,eAAe;IAC5B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAC7D,MAAM,eAAe,GAAG,eAAe,CAAC;QACtC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,eAAe,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAC5D,CAAC;YAAS,CAAC;QACT,eAAe,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC5C,MAAM,gBAAgB,GACpB,aAAa,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,aAAa,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;AACrE,MAAM,OAAO,GAAG,gBAAgB;IAC9B,CAAC,CAAC,8BAA8B,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,CAAC,CAAC,IAAI,CAAC;AAET,IAAI,gBAAgB,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;IACzC;0EACsE;IACtE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC;KAAM,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,MAAM,uBAAuB,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE;QAC1D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACvB,MAAM,MAAM,CAAC,CAAC,YAAY,CAAC,EAAE;gBAC3B,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;aACvD,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClE,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;AACrC,CAAC;KAAM,CAAC;IACN,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,EAAE;QACzC,eAAe;QACf,iBAAiB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,MAAM;YACxD,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,CAAC;YAC/E,CAAC,CAAC,qBAAqB,EAAE;KAC5B,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACrE,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;AACrC,CAAC"}
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EACL,8BAA8B,EAC9B,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AAEjC,KAAK,UAAU,eAAe;IAC5B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAC7D,MAAM,eAAe,GAAG,eAAe,CAAC;QACtC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,eAAe,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAC5D,CAAC;YAAS,CAAC;QACT,eAAe,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAgB;IAC1C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAC7D,MAAM,eAAe,GAAG,eAAe,CAAC;QACtC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,eAAe,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;AAEtC,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC5C,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAClD,MAAM,gBAAgB,GAAG,aAAa,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,SAAS,KAAK,CAAC,CAAC,CAAC;AAC/E,MAAM,OAAO,GAAG,gBAAgB;IAC9B,CAAC,CAAC,8BAA8B,CAAC,aAAa,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACpE,CAAC,CAAC,IAAI,CAAC;AAET,IAAI,gBAAgB,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;IACzC;0EACsE;IACtE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC;KAAM,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,SAAS,KAAK,CAAC,CAAC,IAAI,aAAa,CAAC,SAAS,GAAG,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,SAAS,GAAG,CAAC,CAAE,CAAC;QAC3C,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,OAAO,GAAG,MAAM,uBAAuB,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE;QAC1D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACvB,MAAM,MAAM,CAAC,CAAC,YAAY,EAAE,GAAG,QAAQ,CAAC,EAAE;gBACxC,GAAG,OAAO;gBACV,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;aACvD,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClE,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;AACrC,CAAC;KAAM,CAAC;IACN;;;;;OAKG;IACH,MAAM,gBAAgB,GAAG,aAAa,CAAC,CAAC,CAAC,KAAK,OAAO;QACnD,aAAa,CAAC,CAAC,CAAC,KAAK,OAAO;QAC5B,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC;IAC7B,MAAM,UAAU,GAAG,gBAAgB,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,MAAM,WAAW,GAAG,GAAS,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;IACpD,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,EAAE;QACzC,GAAG,OAAO;QACV,eAAe;QACf,YAAY;QACZ,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;QACtE,iBAAiB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,MAAM;YACxD,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,oBAAoB,EAAE,SAAS,EAAE,MAAM,CAAC;YAC/E,CAAC,CAAC,qBAAqB,EAAE;KAC5B,CAAC,CAAC;IACH,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACrE,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;AACrC,CAAC"}

package/dist/cli.d.ts

@@ -1,7 +1,9 @@
-import { type ProviderFailure, type Snapshot } from "@openlimiter/core";
+import { type AntigravityProbeOptions, type AntigravityProbeResult, type AcquisitionSpec, type AcquisitionTransport, type CredentialCommandRunner, type DetachedSpawn, type ProviderFailure, type Snapshot } from "@openlimiter/core";
 import { type AgentId, type AgentInstallation, type HostedContextTrust, type HostedTrustLoadOptions } from "@openlimiter/adapters";
+import { type ProvidersConfig } from "./config.js";
 import { type CredentialStore } from "./credentials.js";
-import { type QuotaServerHandle } from "./serve.js";
+import { type HubTransport } from "./hub.js";
+import { type DeviceLoginRunner } from "./codex-device-login.js";
 export interface CliDependencies {
     environment: Readonly<Record<string, string | undefined>>;
     stateDirectory?: string;
@@ -20,11 +22,9 @@ export interface CliDependencies {
     /**
      * Whether output may carry terminal colour.
      *
-     * Two surfaces depend on it. The QR symbol the serve command prints has to
-     * state its own black and white, because a dark themed terminal would
-     * otherwise invert it and no camera would read it. The meter bars and the
-     * failure lines use it to choose between escape codes and plain ASCII, so a
-     * capture redirected into a file carries no control characters at all.
+     * The meter bars and the failure lines use it to choose between escape
+     * codes and plain ASCII, so a capture redirected into a file carries no
+     * control characters at all.
      */
     colorOutput: boolean;
     homeDirectory: string;
@@ -44,12 +44,92 @@ export interface CliDependencies {
      */
     hostedTrustWindowsSecurity?: HostedTrustLoadOptions["windowsSecurity"];
     /**
-     * Called once the serve command is listening.
+     * How acquisition requests leave this machine.
      *
-     * The serve command never returns on its own, so this is the seam a test or
-     * a parent process uses to reach the handle and close it again.
+     * Injected everywhere, so a test proves the whole path against recorded
+     * responses and never opens a socket. The library default is the runtime's
+     * own fetch behind the closed endpoint table in the core package.
      */
-    onListening?: (handle: QuotaServerHandle) => void;
+    acquisitionTransport: AcquisitionTransport;
+    /**
+     * How a refresh is started behind a render.
+     *
+     * The child outlives this process on purpose: a status line has to return in
+     * milliseconds and a round of provider requests does not fit in that.
+     */
+    spawnDetached: DetachedSpawn;
+    /**
+     * How the Windows Credential Manager is asked for one entry.
+     *
+     * Only Antigravity needs it, and only on Windows. Absent means the file
+     * fallback is the only path, which is what every other platform uses.
+     */
+    windowsCredentialRunner?: CredentialCommandRunner;
+    /**
+     * Probe running Antigravity instances on loopback ports.
+     *
+     * Reaches nothing by default in tests. The real executable injects the real
+     * loopback probe.
+     */
+    probeAntigravity?: (options?: AntigravityProbeOptions) => Promise<AntigravityProbeResult>;
+    /**
+     * Turn a pid the Antigravity probe found listening into the executable path
+     * it checks against the trusted install roots.
+     *
+     * Reaches nothing by default in tests, exactly like `probeAntigravity`
+     * above: an unresolved pid is a pid the probe skips, never one it trusts on
+     * a bare process name. The real executable injects `resolveAgyExecutablePath`.
+     */
+    resolveExecutablePath?: (pid: string) => Promise<string | null>;
+    /**
+     * Interactive prompt choice helper.
+     */
+    promptChoice?: (question: string) => Promise<string>;
+    /**
+     * How a hub request leaves this machine.
+     *
+     * Injected everywhere, exactly like `acquisitionTransport`, so a test proves
+     * the whole sign in and sync path against recorded responses and never opens
+     * a socket. The library default throws, and the real executable injects the
+     * runtime's own fetch behind the closed endpoint table in `hub.ts`.
+     */
+    hubTransport: HubTransport;
+    /**
+     * Open a URL in the person's browser. Used only when `--open` is passed to
+     * `login`, since the code and address are always printed either way.
+     */
+    openBrowser: (url: string) => void;
+    /** An injectable delay, so a poll loop never makes a test wait in real time. */
+    sleep: (milliseconds: number) => Promise<void>;
+    /**
+     * Progress a long running command wants seen before it returns.
+     *
+     * `login`, `sync` and `setup` can run for minutes at a time, and a person
+     * watching a blank terminal for three minutes while a device code sits
+     * unprinted is the whole flow failing in a way no exit code explains. This
+     * is separate from the command's own `CliResult`, which still carries a
+     * final one line summary once the command actually finishes.
+     */
+    emit: (line: string) => void;
+    /** Set when Ctrl C should end a poll loop rather than the whole process. */
+    interruptSignal?: AbortSignal;
+    /**
+     * How an owner only ACL is applied to the session file on Windows.
+     *
+     * Best effort and independent of `windowsCredentialRunner`: this one writes
+     * an ACL rather than reading a credential, but the shape of "run this helper
+     * with these arguments" is the same, so the two share a type.
+     */
+    windowsAclRunner?: CredentialCommandRunner;
+    /**
+     * How the Codex device sign in child process is started, keyed by the
+     * executable this machine detected.
+     *
+     * The library default never spawns anything: it answers every login attempt
+     * with a closed `spawn` failure, so a test or another tool that calls
+     * `runCli` in process starts no child unless it asked for one.
+     */
+    codexDeviceLoginRunnerFactory: (executable: string) => DeviceLoginRunner;
 }
 export interface CliResult {
     exitCode: number;
@@ -61,10 +141,29 @@ export declare const EXIT_OK = 0;
 export declare const EXIT_FAILURE = 1;
 export declare const EXIT_USAGE = 2;
 export declare const EXIT_NO_DATA = 3;
+export declare function runtimeDependencies(): Pick<CliDependencies, "acquisitionTransport" | "spawnDetached" | "windowsCredentialRunner" | "probeAntigravity" | "resolveExecutablePath" | "hubTransport" | "openBrowser" | "emit" | "windowsAclRunner" | "codexDeviceLoginRunnerFactory">;
 export interface RefreshResult {
     snapshots: Snapshot[];
     /** Only genuine failures. A connector offered nothing is not one. */
     failures: readonly ProviderFailure[];
 }
+/**
+ * How a terminal with no desktop app gets fresh bars.
+ *
+ * Everything below is wiring, and only wiring. Credential discovery, the closed
+ * endpoint table, the cadence, the backoff and the lock all live in the core
+ * package, and the parsers all live in the connector package; this is the one
+ * place that knows both exist. That separation is why a test can prove a whole
+ * round without a socket and without a real login.
+ */
+/**
+ * The specifications this machine will run, wired to the real parsers.
+ *
+ * Claude is here whatever the switch says, because a row that is off still owes
+ * a person the sentence explaining why its bar is older than the rest. Every
+ * other provider is unconditional: a provider with no local login simply
+ * reports that it has none.
+ */
+export declare function acquisitionSpecs(providers: ProvidersConfig): AcquisitionSpec[];
 export declare function runCli(argumentsList: readonly string[], overrides?: Partial<CliDependencies>): Promise<CliResult>;
 //# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAcL,KAAK,eAAe,EAEpB,KAAK,QAAQ,EACd,MAAM,mBAAmB,CAAC;AAoB3B,OAAO,EAWL,KAAK,OAAO,EACZ,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAG5B,MAAM,uBAAuB,CAAC;AA0B/B,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,YAAY,CAAC;AAYpB,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC1D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,eAAe,CAAC;IACjC,eAAe,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5C;;;;;;OAMG;IACH,iBAAiB,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACpE;;;;;;;;OAQG;IACH,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,0BAA0B,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACzF,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,uBAAuB,CAAC,EAAE,sBAAsB,CAAC,kBAAkB,CAAC,CAAC;IACrE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;OAMG;IACH,0BAA0B,CAAC,EAAE,sBAAsB,CAAC,iBAAiB,CAAC,CAAC;IACvE;;;;;OAKG;IACH,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,CAAC;CACnD;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qEAAqE;AACrE,eAAO,MAAM,OAAO,IAAI,CAAC;AACzB,eAAO,MAAM,YAAY,IAAI,CAAC;AAC9B,eAAO,MAAM,UAAU,IAAI,CAAC;AAC5B,eAAO,MAAM,YAAY,IAAI,CAAC;AA2E9B,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,qEAAqE;IACrE,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;CACtC;AAoxBD,wBAAsB,MAAM,CAC1B,aAAa,EAAE,SAAS,MAAM,EAAE,EAChC,SAAS,GAAE,OAAO,CAAC,eAAe,CAAM,GACvC,OAAO,CAAC,SAAS,CAAC,CAiDpB"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAoCL,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAI3B,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAGzB,KAAK,uBAAuB,EAE5B,KAAK,aAAa,EAGlB,KAAK,eAAe,EAEpB,KAAK,QAAQ,EACd,MAAM,mBAAmB,CAAC;AAsB3B,OAAO,EAWL,KAAK,OAAO,EACZ,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAG5B,MAAM,uBAAuB,CAAC;AAI/B,OAAO,EAgBL,KAAK,eAAe,EAGrB,MAAM,aAAa,CAAC;AAiBrB,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,kBAAkB,CAAC;AAsB1B,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,UAAU,CAAC;AAclB,OAAO,EAQL,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC1D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,eAAe,CAAC;IACjC,eAAe,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5C;;;;;;OAMG;IACH,iBAAiB,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACpE;;;;;;OAMG;IACH,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,0BAA0B,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACzF,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,uBAAuB,CAAC,EAAE,sBAAsB,CAAC,kBAAkB,CAAC,CAAC;IACrE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;;OAMG;IACH,0BAA0B,CAAC,EAAE,sBAAsB,CAAC,iBAAiB,CAAC,CAAC;IACvE;;;;;;OAMG;IACH,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C;;;;;OAKG;IACH,aAAa,EAAE,aAAa,CAAC;IAC7B;;;;;OAKG;IACH,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAClD;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,uBAAuB,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC1F;;;;;;;OAOG;IACH,qBAAqB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAChE;;OAEG;IACH,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD;;;;;;;OAOG;IACH,YAAY,EAAE,YAAY,CAAC;IAC3B;;;OAGG;IACH,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,gFAAgF;IAChF,KAAK,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C;;;;;;;;OAQG;IACH,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,4EAA4E;IAC5E,eAAe,CAAC,EAAE,WAAW,CAAC;IAC9B;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C;;;;;;;OAOG;IACH,6BAA6B,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,iBAAiB,CAAC;CAC1E;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qEAAqE;AACrE,eAAO,MAAM,OAAO,IAAI,CAAC;AACzB,eAAO,MAAM,YAAY,IAAI,CAAC;AAC9B,eAAO,MAAM,UAAU,IAAI,CAAC;AAC5B,eAAO,MAAM,YAAY,IAAI,CAAC;AAoG9B,wBAAgB,mBAAmB,IAAI,IAAI,CACzC,eAAe,EACb,sBAAsB,GACtB,eAAe,GACf,yBAAyB,GACzB,kBAAkB,GAClB,uBAAuB,GACvB,cAAc,GACd,aAAa,GACb,MAAM,GACN,kBAAkB,GAClB,+BAA+B,CAClC,CAiCA;AA0DD,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,qEAAqE;IACrE,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;CACtC;AAqED;;;;;;;;GAQG;AAEH;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,eAAe,GAAG,eAAe,EAAE,CAU9E;AA4oDD,wBAAsB,MAAM,CAC1B,aAAa,EAAE,SAAS,MAAM,EAAE,EAChC,SAAS,GAAE,OAAO,CAAC,eAAe,CAAM,GACvC,OAAO,CAAC,SAAS,CAAC,CA4DpB"}