pi-plus-sdk 0.1.3 → 0.1.4

package/README.md

@@ -37,6 +37,14 @@ await session.prompt("Review this repository");
   `materializeProfile/removeProfileDir/profileDirFor/AGENT_DIR/
   syncProfilePackagesToSource` for the per-profile agent dirs. Hosts get the
   exact contract the `pipi` CLI dispatches instead of reimplementing it.
+- Provider login ships as a library (`src/auth.ts`): `loginProvider(providerId, { agentDir?, interaction?, signal?, method? })`
+  runs pi's model-runtime login flow (OAuth login page / API-key setup — the same
+  flow `pipi profile add <name> -p <provider>` triggers) and persists the credential
+  to `<agentDir>/auth.json`; `createTerminalAuthInteraction()` provides the readline
+  terminal UI for CLI use, and hosts pass their own `AuthInteraction` to drive the
+  prompts from a custom UI. pi-plus disables the TUI `/login` (the `interactive-mode`
+  and `slash-commands` core redirects are baked in here too), so this is the login
+  entry for the whole product.
 - `createPlusAgentSession()` extends the upstream `createAgentSession` (re-exported,
   with the whole upstream SDK surface) and always binds extensions once — do not call
   `session.bindExtensions()` yourself. Pass `ui` dialog handlers to get working

package/api.d.ts

@@ -76,9 +76,6 @@ export interface AgentSettingsData {
 
 export declare const THINKING_LEVELS: string[];
 
-/** Marker stored in `profiles.json` `default` meaning "no profile, run plain pi". */
-export declare const BUILT_IN_DEFAULT: "__builtin__";
-
 /** Source agent dir (PI_CODING_AGENT_DIR or ~/.pi/agent): profiles without an applied profile. */
 export declare const AGENT_DIR: string;
 
@@ -95,3 +92,75 @@ export declare function profileDirFor(name: string): string;
 export declare function materializeProfile(name: string, profile: Profile): string;
 export declare function removeProfileDir(name: string): void;
 export declare function syncProfilePackagesToSource(profileDir: string): boolean;
+
+/**
+ * Provider login: pi-plus's programmatic provider login bundled into api.js
+ * (packages/plus/src/auth/login.ts) — pi's interactive /login equivalent,
+ * which pi-plus disables in the TUI. The credential is persisted to
+ * <agentDir>/auth.json, the same store pi reads at launch. The auth
+ * vocabulary is declared inline because pi-ai is not a dependency of this
+ * package — keep it in sync with packages/ai/src/auth/types.ts.
+ */
+export type AuthType = "api_key" | "oauth";
+
+export interface ApiKeyCredential {
+	type: "api_key";
+	key?: string;
+	env?: Record<string, string>;
+}
+
+export interface OAuthCredential {
+	type: "oauth";
+	refresh: string;
+	access: string;
+	expires: number;
+	[key: string]: unknown;
+}
+
+export type Credential = ApiKeyCredential | OAuthCredential;
+
+export interface AuthInfoLink {
+	url: string;
+	label?: string;
+}
+
+export type AuthPrompt = { signal?: AbortSignal } & (
+	| { type: "text"; message: string; placeholder?: string }
+	| { type: "secret"; message: string; placeholder?: string }
+	| { type: "select"; message: string; options: readonly { id: string; label: string; description?: string }[] }
+	| { type: "manual_code"; message: string; placeholder?: string }
+);
+
+export type AuthEvent =
+	| { type: "info"; message: string; links?: readonly AuthInfoLink[] }
+	| { type: "auth_url"; url: string; instructions?: string }
+	| {
+			type: "device_code";
+			userCode: string;
+			verificationUri: string;
+			intervalSeconds?: number;
+			expiresInSeconds?: number;
+	  }
+	| { type: "progress"; message: string };
+
+export interface AuthInteraction {
+	signal?: AbortSignal;
+	prompt(prompt: AuthPrompt): Promise<string>;
+	notify(event: AuthEvent): void;
+}
+
+export interface LoginProviderOptions {
+	/** Agent dir whose auth.json stores the credential. Defaults to the active agent dir. */
+	agentDir?: string;
+	/** Flow UI callbacks. Defaults to a terminal interaction (stdin prompts + browser). */
+	interaction?: AuthInteraction;
+	/** Cancels the flow. */
+	signal?: AbortSignal;
+	/** Force a login method; defaults to oauth when the provider offers it, then api_key. */
+	method?: AuthType;
+}
+
+export declare function loginProvider(providerId: string, options?: LoginProviderOptions): Promise<Credential>;
+
+/** Readline-based AuthInteraction for terminal use (prompts on stdin, auth URLs opened in the browser). */
+export declare function createTerminalAuthInteraction(): AuthInteraction;