{
	"title": "ask",
	"extensions": ["ask"],
	"cols": 100,
	"rows": 24,
	"turns": [
		{
			"text": "Two ways to wire auth here; this is your call, not mine.",
			"tool": {
				"name": "ask_user_question",
				"arguments": {
					"questions": [
						{
							"id": "auth",
							"header": "Auth method",
							"question": "Which auth method should the CLI use?",
							"options": [
								{
									"label": "OAuth device flow (Recommended)",
									"description": "No secrets on disk; one browser round-trip on first run."
								},
								{
									"label": "Personal access token",
									"description": "Simplest to script; token must be stored and rotated."
								},
								{
									"label": "mTLS client cert",
									"description": "Strongest; needs cert distribution and renewal tooling."
								}
							]
						}
					]
				}
			},
			"usage": {
				"input": 1420,
				"output": 160
			}
		},
		{
			"text": "Going with the personal access token, and I will read it from the keyring as you noted. Wiring it now.",
			"usage": {
				"input": 1710,
				"output": 32
			}
		}
	],
	"steps": [
		{
			"expect": "demo-model",
			"hold": 6
		},
		{
			"type": "wire up auth for the cli",
			"key": "enter",
			"expect": "Which auth method",
			"hold": 10.0
		},
		{
			"key": "down",
			"expect": "Personal access token",
			"hold": 6
		},
		{
			"key": "tab",
			"expect": "esc back to options",
			"hold": 6
		},
		{
			"type": "read it from the OS keyring, never a dotfile",
			"hold": 6
		},
		{
			"key": "enter",
			"expect": "from the keyring as you noted",
			"hold": 12
		},
		{
			"key": "ctrl-c",
			"hold": 0.3
		},
		{
			"key": "ctrl-c"
		}
	]
}