@agent-native/core 0.20.0 → 0.20.2

package/dist/agent/engine/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/agent/engine/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,kBAAkB,EAEnB,MAAM,YAAY,CAAC;AASpB,MAAM,WAAW,gBAAgB;IAC/B,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,0BAA0B;IAC1B,YAAY,EAAE,kBAAkB,CAAC;IACjC,2BAA2B;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,6DAA6D;IAC7D,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,4CAA4C;IAC5C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,WAAW,CAAC;CACtD;AAID;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAajE;AAED,uEAAuE;AACvE,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,GACX,gBAAgB,GAAG,SAAS,CAE9B;AAED,yCAAyC;AACzC,wBAAgB,gBAAgB,IAAI,gBAAgB,EAAE,CAErD;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,IAAI,gBAAgB,GAAG,IAAI,CAuB7D;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CA8DpF;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAOvE;AAqBD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,OAAO,EACf,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAIT;AAED;;;;;;;GAOG;AACH,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,OAAO,EACf,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED,MAAM,WAAW,mBAAmB;IAClC,0EAA0E;IAC1E,YAAY,CAAC,EACT,MAAM,GACN,WAAW,GACX;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IACtD,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,WAAW,CAAC,CA8GtB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,WAAW,GAAG,MAAM,EAC5B,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAgC7B"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/agent/engine/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,kBAAkB,EAEnB,MAAM,YAAY,CAAC;AASpB,MAAM,WAAW,gBAAgB;IAC/B,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,0BAA0B;IAC1B,YAAY,EAAE,kBAAkB,CAAC;IACjC,2BAA2B;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,6DAA6D;IAC7D,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,4CAA4C;IAC5C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,WAAW,CAAC;CACtD;AAID;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAajE;AAED,uEAAuE;AACvE,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,GACX,gBAAgB,GAAG,SAAS,CAE9B;AAED,yCAAyC;AACzC,wBAAgB,gBAAgB,IAAI,gBAAgB,EAAE,CAErD;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,IAAI,gBAAgB,GAAG,IAAI,CAuB7D;AAUD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAyEpF;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAOvE;AAqBD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,OAAO,EACf,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAIT;AAED;;;;;;;GAOG;AACH,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,OAAO,EACf,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,OAAO,CAAC,CAiBlB;AAED,MAAM,WAAW,mBAAmB;IAClC,0EAA0E;IAC1E,YAAY,CAAC,EACT,MAAM,GACN,WAAW,GACX;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IACtD,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,WAAW,CAAC,CA8GtB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,WAAW,GAAG,MAAM,EAC5B,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAgC7B"}

package/dist/agent/engine/registry.js

@@ -68,6 +68,11 @@ export function detectEngineFromEnv() {
     }
     return null;
 }
+function shouldTraceEngineDetection() {
+    return /^(1|true)$/i.test(process.env.AGENT_NATIVE_DEBUG_AGENT_ENGINE_DETECT ??
+        process.env.AGENT_NATIVE_DEBUG_CREDENTIAL_RESOLVE ??
+        "");
+}
 /**
  * Detect a usable engine from the current request user's accessible
  * `app_secrets` rows. Mirrors `detectEngineFromEnv` but consults the
@@ -91,6 +96,7 @@ export function detectEngineFromEnv() {
  * chat engine picker must not disagree with that card.
  */
 export async function detectEngineFromUserSecrets() {
+    const traceLookup = shouldTraceEngineDetection();
     let email;
     let orgId;
     try {
@@ -99,11 +105,15 @@ export async function detectEngineFromUserSecrets() {
         orgId = getRequestOrgId();
     }
     catch {
-        console.log(`[engine-detect] result=null reason=no-request-context email=(unknown) orgId=(unknown)`);
+        if (traceLookup) {
+            console.log(`[engine-detect] result=null reason=no-request-context email=(unknown) orgId=(unknown)`);
+        }
         return null;
     }
     if (!email) {
-        console.log(`[engine-detect] result=null reason=no-email email=(empty) orgId=${orgId ?? "(none)"}`);
+        if (traceLookup) {
+            console.log(`[engine-detect] result=null reason=no-email email=(empty) orgId=${orgId ?? "(none)"}`);
+        }
         return null;
     }
     const hasAllKeys = async (entry) => {
@@ -126,7 +136,9 @@ export async function detectEngineFromUserSecrets() {
             if (entry.name === "builder")
                 continue;
             if (await hasAllKeys(entry)) {
-                console.log(`[engine-detect] result=${entry.name} email=${email} orgId=${orgId ?? "(none)"} byo=true`);
+                if (traceLookup) {
+                    console.log(`[engine-detect] result=${entry.name} email=${email} orgId=${orgId ?? "(none)"} byo=true`);
+                }
                 return entry;
             }
         }
@@ -134,11 +146,15 @@ export async function detectEngineFromUserSecrets() {
     }
     for (const entry of _registry.values()) {
         if (await hasAllKeys(entry)) {
-            console.log(`[engine-detect] result=${entry.name} email=${email} orgId=${orgId ?? "(none)"}`);
+            if (traceLookup) {
+                console.log(`[engine-detect] result=${entry.name} email=${email} orgId=${orgId ?? "(none)"}`);
+            }
             return entry;
         }
     }
-    console.log(`[engine-detect] result=null reason=no-engine-keys-found email=${email} orgId=${orgId ?? "(none)"}`);
+    if (traceLookup) {
+        console.log(`[engine-detect] result=null reason=no-engine-keys-found email=${email} orgId=${orgId ?? "(none)"}`);
+    }
     return null;
 }
 /**

package/dist/agent/engine/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/agent/engine/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,wCAAwC,EAAE,MAAM,0BAA0B,CAAC;AACpF,OAAO,EACL,wCAAwC,EACxC,uBAAuB,EACvB,aAAa,GACd,MAAM,qCAAqC,CAAC;AAuB7C,MAAM,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;AAEtD;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAuB;IACzD,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,+DAA+D;QAC/D,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACpC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QACD,OAAO,CAAC,IAAI,CACV,0BAA0B,KAAK,CAAC,IAAI,oCAAoC,CACzE,CAAC;QACF,OAAO;IACT,CAAC;IACD,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,mBAAmB,CACjC,IAAY;IAEZ,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,gBAAgB;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAClC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,EAAE,CAC9C,CAAC;IAEF,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,SAAS;YACvC,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACjD,IAAI,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrE,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,oEAAoE;IACtE,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjD,IAAI,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAC/C,IAAI,KAAyB,CAAC;IAC9B,IAAI,KAAgC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,EAAE,mBAAmB,EAAE,eAAe,EAAE,GAC5C,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAClD,KAAK,GAAG,mBAAmB,EAAE,CAAC;QAC9B,KAAK,GAAG,eAAe,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CACT,uFAAuF,CACxF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CACT,mEAAmE,KAAK,IAAI,QAAQ,EAAE,CACvF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,EAAE,KAAuB,EAAoB,EAAE;QACrE,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACrD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAClC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,EAAE,CAC9C,CAAC;IAEF,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,SAAS;YACvC,IAAI,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CACT,0BAA0B,KAAK,CAAC,IAAI,UAAU,KAAK,UAAU,KAAK,IAAI,QAAQ,WAAW,CAC1F,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,oEAAoE;IACtE,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;QACvC,IAAI,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CACT,0BAA0B,KAAK,CAAC,IAAI,UAAU,KAAK,UAAU,KAAK,IAAI,QAAQ,EAAE,CACjF,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CACT,iEAAiE,KAAK,UAAU,KAAK,IAAI,QAAQ,EAAE,CACpG,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAAC,MAAe;IAC5D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,CAAC,GAAG,MAET,CAAC;IACF,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC5D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAC9B,MAA2C;IAE3C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC;IAC3D,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,kBAAkB,CACzB,MAA0B,EAC1B,KAA+B;IAE/B,OAAO;QACL,MAAM;QACN,gBAAgB,EAAE,wCAAwC,EAAE;QAC5D,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;KACjB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAe,EACf,KAAuB;IAEvB,IAAI,8BAA8B,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,MAAe,EACf,KAAuB;IAEvB,IAAI,8BAA8B,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,IAAI,MAAM,aAAa,CAAC,GAAG,CAAC;gBAAE,SAAS;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;QACD,IACE,CAAC,wCAAwC,EAAE;YAC3C,CAAC,uBAAuB,CAAC,GAAG,CAAC,EAC7B,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAgBD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAA2B;IAE3B,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IAE9D,uCAAuC;IACvC,IACE,YAAY;QACZ,OAAO,YAAY,KAAK,QAAQ;QAChC,QAAQ,IAAI,YAAY,EACxB,CAAC;QACD,OAAO,YAA2B,CAAC;IACrC,CAAC;IAED,oCAAoC;IACpC,IACE,YAAY;QACZ,OAAO,YAAY,KAAK,QAAQ;QAChC,MAAM,IAAI,YAAY,EACtB,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,YAGtC,CAAC;QACF,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YACR,MAAM,IAAI,KAAK,CACb,mCAAmC,IAAI,kBAAkB,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5F,CAAC;QACJ,OAAO,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,uCAAuC;IACvC,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK;YACR,MAAM,IAAI,KAAK,CACb,mCAAmC,YAAY,kBAAkB,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpG,CAAC;QACJ,OAAO,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,6CAA6C;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAC3C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,wCAAwC,CAAC,KAAK,CAAC,CAAC;IACzE,IAAI,UAAU,EAAE,MAAM,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,KAAK,IAAI,CAAC,MAAM,8BAA8B,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,IAAI,MAAM,GAEC,IAAI,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,UAAU,CAAC,cAAc,CAAC,CAAkB,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;IAED,qEAAqE;IACrE,qEAAqE;IACrE,gEAAgE;IAChE,kEAAkE;IAClE,MAAM,gBAAgB,GAAG,MAAM,2BAA2B,EAAE,CAAC;IAC7D,IAAI,gBAAgB,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,gBAAgB,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,uEAAuE;IACvE,yEAAyE;IACzE,2EAA2E;IAC3E,uEAAuE;IACvE,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,KAAK,IAAI,CAAC,MAAM,8BAA8B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACnE,OAAO,KAAK,CAAC,MAAM,CAAC;gBAClB,GAAG,kBAAkB,CACnB,MAAM,EACN,uBAAuB,CACrB,MAAM,CAAC,MAA6C,CACrD,CACF;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO,gBAAgB,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,uEAAuE;IACvE,gDAAgD;IAChD,MAAM,QAAQ,GAAG,wCAAwC,EAAE;QACzD,CAAC,CAAC,mBAAmB,EAAE;QACvB,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IAEjE,wBAAwB;IACxB,MAAM,cAAc,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IACD,OAAO,cAAc,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAA4B,EAC5B,UAA8B,EAAE;IAEhC,MAAM,UAAU,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,wCAAwC,CAC/D,OAAO,CAAC,KAAK,CACd,CAAC;QACF,IACE,UAAU,EAAE,MAAM,KAAK,UAAU;YACjC,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ;YACpC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAC3B,CAAC;YACD,OAAO,UAAU,CAAC,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;IAClE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,CAAC;QAChD,IACE,MAAM;YACN,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;YACjC,MAAM,CAAC,MAAM,KAAK,UAAU;YAC5B,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAChC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EACvB,CAAC;YACD,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["/**\n * Agent Engine Registry.\n *\n * Mirrors the CLI_REGISTRY pattern (packages/core/src/terminal/cli-registry.ts)\n * but is open — anyone can register a custom engine via registerAgentEngine()\n * from a server plugin at startup.\n *\n * Built-in engines (anthropic, ai-sdk) are auto-registered by builtin.ts.\n */\n\nimport type {\n  AgentEngine,\n  EngineCapabilities,\n  EngineStreamOptions,\n} from \"./types.js\";\nimport { getSetting } from \"../../settings/store.js\";\nimport { getAgentAppModelDefaultForCurrentRequest } from \"../app-model-defaults.js\";\nimport {\n  canUseDeployCredentialFallbackForRequest,\n  readDeployCredentialEnv,\n  resolveSecret,\n} from \"../../server/credential-provider.js\";\n\nexport interface AgentEngineEntry {\n  /** Unique name, e.g. \"anthropic\", \"ai-sdk:anthropic\", \"ai-sdk:openai\" */\n  name: string;\n  /** Human-readable label for UI */\n  label: string;\n  /** Short description for engine picker */\n  description: string;\n  /** npm package hint displayed in UI when package is missing */\n  installPackage?: string;\n  /** Engine capabilities */\n  capabilities: EngineCapabilities;\n  /** Default model string */\n  defaultModel: string;\n  /** All supported models (shown in model picker) */\n  supportedModels: readonly string[];\n  /** Environment variables required for this engine to work */\n  requiredEnvVars: string[];\n  /** Create an engine instance from config */\n  create(config: Record<string, unknown>): AgentEngine;\n}\n\nconst _registry = new Map<string, AgentEngineEntry>();\n\n/**\n * Register a custom agent engine. Called at server startup (e.g., from a\n * server plugin or builtin.ts). Throws if name is already registered.\n */\nexport function registerAgentEngine(entry: AgentEngineEntry): void {\n  if (_registry.has(entry.name)) {\n    // Allow re-registration in tests / hot-reload — just overwrite\n    if (process.env.NODE_ENV === \"test\") {\n      _registry.set(entry.name, entry);\n      return;\n    }\n    console.warn(\n      `[agent-engine] Engine \"${entry.name}\" is already registered. Skipping.`,\n    );\n    return;\n  }\n  _registry.set(entry.name, entry);\n}\n\n/** Get a registered engine entry by name, or undefined if not found */\nexport function getAgentEngineEntry(\n  name: string,\n): AgentEngineEntry | undefined {\n  return _registry.get(name);\n}\n\n/** List all registered engine entries */\nexport function listAgentEngines(): AgentEngineEntry[] {\n  return Array.from(_registry.values());\n}\n\n/**\n * First registered engine whose requiredEnvVars are all set. Registration\n * order controls priority — the Builder gateway is registered first so it\n * wins when the Builder private key is present.\n *\n * Escape hatch: AGENT_ENGINE_PREFER_BYO_KEY=true skips the Builder engine\n * on the first pass, so an explicit provider key (ANTHROPIC_API_KEY etc.)\n * is picked instead. Builder is still used as the fallback when no other\n * provider key is set.\n */\nexport function detectEngineFromEnv(): AgentEngineEntry | null {\n  const preferByo = /^(1|true)$/i.test(\n    process.env.AGENT_ENGINE_PREFER_BYO_KEY ?? \"\",\n  );\n\n  if (preferByo) {\n    for (const entry of _registry.values()) {\n      if (entry.name === \"builder\") continue;\n      if (entry.requiredEnvVars.length === 0) continue;\n      if (entry.requiredEnvVars.every((v) => !!readDeployCredentialEnv(v))) {\n        return entry;\n      }\n    }\n    // No BYO key matched — fall through to include Builder as fallback.\n  }\n\n  for (const entry of _registry.values()) {\n    if (entry.requiredEnvVars.length === 0) continue;\n    if (entry.requiredEnvVars.every((v) => !!readDeployCredentialEnv(v))) {\n      return entry;\n    }\n  }\n  return null;\n}\n\n/**\n * Detect a usable engine from the current request user's accessible\n * `app_secrets` rows. Mirrors `detectEngineFromEnv` but consults the\n * encrypted secret store instead of `process.env`, including org-scoped\n * credentials shared with the active organization.\n *\n * Required because the Builder OAuth callback (and the settings UI's\n * \"paste your own key\" flow) writes credentials to app_secrets, not env.\n * Without this check, a user who connected Builder would see status\n * \"configured\" but the next chat turn would fall through to the default\n * Anthropic engine and hit `missing_api_key` — exactly Brent's symptom\n * on the docs site (Loom 2026-04-28: \"It doesn't seem to realize I'm\n * connected once I do a chat\").\n *\n * Includes the local dev session (`local@localhost`): the Builder\n * OAuth flow writes credentials scoped to that email when run from\n * `pnpm dev`, so detection has to consult those rows or the dev user\n * sees the same \"Connect your AI\" card after they've already connected\n * (Sami, 2026-04-30). Org-scoped Builder credentials must also count here:\n * `/builder/status` resolves them via the same request org context, and the\n * chat engine picker must not disagree with that card.\n */\nexport async function detectEngineFromUserSecrets(): Promise<AgentEngineEntry | null> {\n  let email: string | undefined;\n  let orgId: string | null | undefined;\n  try {\n    const { getRequestUserEmail, getRequestOrgId } =\n      await import(\"../../server/request-context.js\");\n    email = getRequestUserEmail();\n    orgId = getRequestOrgId();\n  } catch {\n    console.log(\n      `[engine-detect] result=null reason=no-request-context email=(unknown) orgId=(unknown)`,\n    );\n    return null;\n  }\n  if (!email) {\n    console.log(\n      `[engine-detect] result=null reason=no-email email=(empty) orgId=${orgId ?? \"(none)\"}`,\n    );\n    return null;\n  }\n\n  const hasAllKeys = async (entry: AgentEngineEntry): Promise<boolean> => {\n    if (entry.requiredEnvVars.length === 0) return false;\n    for (const key of entry.requiredEnvVars) {\n      try {\n        if (!(await resolveSecret(key))) return false;\n      } catch {\n        return false;\n      }\n    }\n    return true;\n  };\n\n  const preferByo = /^(1|true)$/i.test(\n    process.env.AGENT_ENGINE_PREFER_BYO_KEY ?? \"\",\n  );\n\n  if (preferByo) {\n    for (const entry of _registry.values()) {\n      if (entry.name === \"builder\") continue;\n      if (await hasAllKeys(entry)) {\n        console.log(\n          `[engine-detect] result=${entry.name} email=${email} orgId=${orgId ?? \"(none)\"} byo=true`,\n        );\n        return entry;\n      }\n    }\n    // No BYO key matched — fall through to include Builder as fallback.\n  }\n\n  for (const entry of _registry.values()) {\n    if (await hasAllKeys(entry)) {\n      console.log(\n        `[engine-detect] result=${entry.name} email=${email} orgId=${orgId ?? \"(none)\"}`,\n      );\n      return entry;\n    }\n  }\n  console.log(\n    `[engine-detect] result=null reason=no-engine-keys-found email=${email} orgId=${orgId ?? \"(none)\"}`,\n  );\n  return null;\n}\n\n/**\n * Legacy inline API keys on the global `agent-engine` settings row are\n * intentionally ignored. That row is deployment-wide, so treating\n * `{ apiKey }` or `{ config: { apiKey } }` as configured would let one\n * user's pasted key power every other user. Per-user keys live in\n * `app_secrets` and are resolved separately.\n */\nexport function isAgentEngineSettingConfigured(stored: unknown): boolean {\n  if (!stored || typeof stored !== \"object\") return false;\n  const s = stored as {\n    engine?: unknown;\n  };\n  if (typeof s.engine !== \"string\" || !s.engine) return false;\n  return false;\n}\n\nfunction stripInlineApiKeyConfig(\n  config: Record<string, unknown> | undefined,\n): Record<string, unknown> {\n  if (!config) return {};\n  const { apiKey: _discardedApiKey, ...safeConfig } = config;\n  return safeConfig;\n}\n\nfunction engineCreateConfig(\n  apiKey: string | undefined,\n  extra?: Record<string, unknown>,\n): Record<string, unknown> {\n  return {\n    apiKey,\n    allowEnvFallback: canUseDeployCredentialFallbackForRequest(),\n    ...(extra ?? {}),\n  };\n}\n\n/**\n * True when the stored `agent-engine` row points at a registered engine\n * AND an API key for it is reachable via the engine's required env vars.\n * Inline keys on the global settings row are ignored; see\n * `isAgentEngineSettingConfigured`.\n */\nexport function isStoredEngineUsable(\n  stored: unknown,\n  entry: AgentEngineEntry,\n): boolean {\n  if (isAgentEngineSettingConfigured(stored)) return true;\n  if (entry.requiredEnvVars.length === 0) return true;\n  return entry.requiredEnvVars.every((v) => !!readDeployCredentialEnv(v));\n}\n\n/**\n * Request-aware version of `isStoredEngineUsable`.\n *\n * The settings row stores the selected engine/model, while credentials may\n * live in per-user/org `app_secrets`. The sync helper intentionally only sees\n * deploy env vars; this async helper is what request-time routes should use\n * when deciding whether a stored engine can actually run for the current user.\n */\nexport async function isStoredEngineUsableForRequest(\n  stored: unknown,\n  entry: AgentEngineEntry,\n): Promise<boolean> {\n  if (isAgentEngineSettingConfigured(stored)) return true;\n  if (entry.requiredEnvVars.length === 0) return true;\n  for (const key of entry.requiredEnvVars) {\n    try {\n      if (await resolveSecret(key)) continue;\n    } catch {\n      // Fall through to the deployment-level check below.\n    }\n    if (\n      !canUseDeployCredentialFallbackForRequest() ||\n      !readDeployCredentialEnv(key)\n    ) {\n      return false;\n    }\n  }\n  return true;\n}\n\nexport interface ResolveEngineConfig {\n  /** Explicit engine name or instance from createAgentChatPlugin options */\n  engineOption?:\n    | string\n    | AgentEngine\n    | { name: string; config: Record<string, unknown> };\n  /** API key (used as config for the resolved engine) */\n  apiKey?: string;\n  /** Model override (used as part of engine config) */\n  model?: string;\n  /** App/template id used for org-scoped per-app model defaults. */\n  appId?: string;\n}\n\n/**\n * Resolve an AgentEngine from options → explicit env → app default →\n * request credentials → settings → env → default.\n *\n * Resolution order:\n * 1. Explicit `engineOption` from plugin options (string name, instance, or {name, config})\n * 2. Env var AGENT_ENGINE\n * 3. Org/user app-template default, when usable\n * 4. Current request's app_secrets; Builder wins by default when connected\n * 5. Settings store key \"agent-engine\" → { engine: string }, when usable\n * 6. Auto-detect deployment env credentials\n * 7. Default \"anthropic\" (requires ANTHROPIC_API_KEY)\n */\nexport async function resolveEngine(\n  config: ResolveEngineConfig,\n): Promise<AgentEngine> {\n  const { engineOption, apiKey, model: _model, appId } = config;\n\n  // 1. Explicit instance passed directly\n  if (\n    engineOption &&\n    typeof engineOption === \"object\" &&\n    \"stream\" in engineOption\n  ) {\n    return engineOption as AgentEngine;\n  }\n\n  // 2. Explicit {name, config} object\n  if (\n    engineOption &&\n    typeof engineOption === \"object\" &&\n    \"name\" in engineOption\n  ) {\n    const { name, config: engineConfig } = engineOption as {\n      name: string;\n      config: Record<string, unknown>;\n    };\n    const entry = _registry.get(name);\n    if (!entry)\n      throw new Error(\n        `[agent-engine] Unknown engine: \"${name}\". Registered: ${[..._registry.keys()].join(\", \")}`,\n      );\n    return entry.create(engineCreateConfig(apiKey, engineConfig));\n  }\n\n  // 3. Explicit string name from options\n  if (typeof engineOption === \"string\") {\n    const entry = _registry.get(engineOption);\n    if (!entry)\n      throw new Error(\n        `[agent-engine] Unknown engine: \"${engineOption}\". Registered: ${[..._registry.keys()].join(\", \")}`,\n      );\n    return entry.create(engineCreateConfig(apiKey));\n  }\n\n  // 4. Env var — explicit engine name override\n  const envEngine = process.env.AGENT_ENGINE;\n  if (envEngine) {\n    const entry = _registry.get(envEngine);\n    if (entry) return entry.create(engineCreateConfig(apiKey));\n  }\n\n  const appDefault = await getAgentAppModelDefaultForCurrentRequest(appId);\n  if (appDefault?.engine) {\n    const entry = _registry.get(appDefault.engine);\n    if (entry && (await isStoredEngineUsableForRequest(appDefault, entry))) {\n      return entry.create(engineCreateConfig(apiKey));\n    }\n  }\n\n  let stored:\n    | (Record<string, unknown> & { engine?: unknown; config?: unknown })\n    | null = null;\n  try {\n    stored = (await getSetting(\"agent-engine\")) as typeof stored;\n  } catch {\n    // Settings not available — fall through\n  }\n\n  // 5. Auto-detect from the current user's per-user `app_secrets` rows\n  // (Builder OAuth callback + \"paste your own key\" settings flow write\n  // here, not env). Comes before env-detection so a user-specific\n  // Builder connection wins over a stale deploy-level/provider key.\n  const detectedFromUser = await detectEngineFromUserSecrets();\n  if (detectedFromUser?.name === \"builder\") {\n    return detectedFromUser.create(engineCreateConfig(apiKey));\n  }\n\n  // 6. Settings store — only when the stored row's API key is reachable.\n  // This remains below Builder detection so \"Builder.io connected\" and the\n  // runtime agree on the default managed gateway path. Non-Builder user keys\n  // still honor the stored provider/model when Builder is not connected.\n  if (stored && typeof stored.engine === \"string\") {\n    const entry = _registry.get(stored.engine);\n    if (entry && (await isStoredEngineUsableForRequest(stored, entry))) {\n      return entry.create({\n        ...engineCreateConfig(\n          apiKey,\n          stripInlineApiKeyConfig(\n            stored.config as Record<string, unknown> | undefined,\n          ),\n        ),\n      });\n    }\n  }\n\n  if (detectedFromUser) {\n    return detectedFromUser.create(engineCreateConfig(apiKey));\n  }\n\n  // 8. Auto-detect from any provider env var — so just dropping a key in\n  // .env works without also setting AGENT_ENGINE.\n  const detected = canUseDeployCredentialFallbackForRequest()\n    ? detectEngineFromEnv()\n    : null;\n  if (detected) return detected.create(engineCreateConfig(apiKey));\n\n  // 9. Default: anthropic\n  const anthropicEntry = _registry.get(\"anthropic\");\n  if (!anthropicEntry) {\n    throw new Error(\n      \"[agent-engine] Default Anthropic engine is not registered. Did builtin.ts fail to load?\",\n    );\n  }\n  return anthropicEntry.create(engineCreateConfig(apiKey));\n}\n\n/**\n * Read the user-selected model for an engine from the `agent-engine` setting.\n *\n * The settings UI writes `{engine, model}` via the `manage-agent-engine` action=\"set\",\n * but `resolveEngine` only uses the stored engine (the model is a separate\n * per-request concern). Call this helper alongside `resolveEngine` to honor\n * the user's model choice without requiring a process restart.\n *\n * Returns the stored model only when the stored engine name matches `engine`\n * — otherwise returns `undefined` to avoid applying an Anthropic model string\n * to, say, an OpenRouter engine.\n */\nexport async function getStoredModelForEngine(\n  engine: AgentEngine | string,\n  options: { appId?: string } = {},\n): Promise<string | undefined> {\n  const engineName = typeof engine === \"string\" ? engine : engine.name;\n  try {\n    const appDefault = await getAgentAppModelDefaultForCurrentRequest(\n      options.appId,\n    );\n    if (\n      appDefault?.engine === engineName &&\n      typeof appDefault.model === \"string\" &&\n      appDefault.model.length > 0\n    ) {\n      return appDefault.model;\n    }\n  } catch {\n    // Settings/request context may not be available — fall through.\n  }\n\n  try {\n    const stored = await getSetting(\"agent-engine\");\n    if (\n      stored &&\n      typeof stored.engine === \"string\" &&\n      stored.engine === engineName &&\n      typeof stored.model === \"string\" &&\n      stored.model.length > 0\n    ) {\n      return stored.model;\n    }\n  } catch {\n    // Settings store not ready (fresh install, migration pending) — skip.\n  }\n  return undefined;\n}\n"]}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/agent/engine/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,wCAAwC,EAAE,MAAM,0BAA0B,CAAC;AACpF,OAAO,EACL,wCAAwC,EACxC,uBAAuB,EACvB,aAAa,GACd,MAAM,qCAAqC,CAAC;AAuB7C,MAAM,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;AAEtD;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAuB;IACzD,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,+DAA+D;QAC/D,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACpC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QACD,OAAO,CAAC,IAAI,CACV,0BAA0B,KAAK,CAAC,IAAI,oCAAoC,CACzE,CAAC;QACF,OAAO;IACT,CAAC;IACD,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,mBAAmB,CACjC,IAAY;IAEZ,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,gBAAgB;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAClC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,EAAE,CAC9C,CAAC;IAEF,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,SAAS;YACvC,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACjD,IAAI,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrE,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,oEAAoE;IACtE,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjD,IAAI,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,0BAA0B;IACjC,OAAO,aAAa,CAAC,IAAI,CACvB,OAAO,CAAC,GAAG,CAAC,sCAAsC;QAChD,OAAO,CAAC,GAAG,CAAC,qCAAqC;QACjD,EAAE,CACL,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAC/C,MAAM,WAAW,GAAG,0BAA0B,EAAE,CAAC;IACjD,IAAI,KAAyB,CAAC;IAC9B,IAAI,KAAgC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,EAAE,mBAAmB,EAAE,eAAe,EAAE,GAC5C,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAClD,KAAK,GAAG,mBAAmB,EAAE,CAAC;QAC9B,KAAK,GAAG,eAAe,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,uFAAuF,CACxF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CACT,mEAAmE,KAAK,IAAI,QAAQ,EAAE,CACvF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,EAAE,KAAuB,EAAoB,EAAE;QACrE,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACrD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAClC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,EAAE,CAC9C,CAAC;IAEF,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,SAAS;YACvC,IAAI,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,IAAI,WAAW,EAAE,CAAC;oBAChB,OAAO,CAAC,GAAG,CACT,0BAA0B,KAAK,CAAC,IAAI,UAAU,KAAK,UAAU,KAAK,IAAI,QAAQ,WAAW,CAC1F,CAAC;gBACJ,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,oEAAoE;IACtE,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;QACvC,IAAI,MAAM,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,CAAC,GAAG,CACT,0BAA0B,KAAK,CAAC,IAAI,UAAU,KAAK,UAAU,KAAK,IAAI,QAAQ,EAAE,CACjF,CAAC;YACJ,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CACT,iEAAiE,KAAK,UAAU,KAAK,IAAI,QAAQ,EAAE,CACpG,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAAC,MAAe;IAC5D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,CAAC,GAAG,MAET,CAAC;IACF,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC5D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAC9B,MAA2C;IAE3C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC;IAC3D,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,kBAAkB,CACzB,MAA0B,EAC1B,KAA+B;IAE/B,OAAO;QACL,MAAM;QACN,gBAAgB,EAAE,wCAAwC,EAAE;QAC5D,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;KACjB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAe,EACf,KAAuB;IAEvB,IAAI,8BAA8B,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,MAAe,EACf,KAAuB;IAEvB,IAAI,8BAA8B,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,IAAI,MAAM,aAAa,CAAC,GAAG,CAAC;gBAAE,SAAS;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;QACD,IACE,CAAC,wCAAwC,EAAE;YAC3C,CAAC,uBAAuB,CAAC,GAAG,CAAC,EAC7B,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAgBD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAA2B;IAE3B,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IAE9D,uCAAuC;IACvC,IACE,YAAY;QACZ,OAAO,YAAY,KAAK,QAAQ;QAChC,QAAQ,IAAI,YAAY,EACxB,CAAC;QACD,OAAO,YAA2B,CAAC;IACrC,CAAC;IAED,oCAAoC;IACpC,IACE,YAAY;QACZ,OAAO,YAAY,KAAK,QAAQ;QAChC,MAAM,IAAI,YAAY,EACtB,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,YAGtC,CAAC;QACF,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YACR,MAAM,IAAI,KAAK,CACb,mCAAmC,IAAI,kBAAkB,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5F,CAAC;QACJ,OAAO,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,uCAAuC;IACvC,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK;YACR,MAAM,IAAI,KAAK,CACb,mCAAmC,YAAY,kBAAkB,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpG,CAAC;QACJ,OAAO,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,6CAA6C;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAC3C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,wCAAwC,CAAC,KAAK,CAAC,CAAC;IACzE,IAAI,UAAU,EAAE,MAAM,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,KAAK,IAAI,CAAC,MAAM,8BAA8B,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,IAAI,MAAM,GAEC,IAAI,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,UAAU,CAAC,cAAc,CAAC,CAAkB,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;IAED,qEAAqE;IACrE,qEAAqE;IACrE,gEAAgE;IAChE,kEAAkE;IAClE,MAAM,gBAAgB,GAAG,MAAM,2BAA2B,EAAE,CAAC;IAC7D,IAAI,gBAAgB,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,gBAAgB,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,uEAAuE;IACvE,yEAAyE;IACzE,2EAA2E;IAC3E,uEAAuE;IACvE,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,KAAK,IAAI,CAAC,MAAM,8BAA8B,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACnE,OAAO,KAAK,CAAC,MAAM,CAAC;gBAClB,GAAG,kBAAkB,CACnB,MAAM,EACN,uBAAuB,CACrB,MAAM,CAAC,MAA6C,CACrD,CACF;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO,gBAAgB,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,uEAAuE;IACvE,gDAAgD;IAChD,MAAM,QAAQ,GAAG,wCAAwC,EAAE;QACzD,CAAC,CAAC,mBAAmB,EAAE;QACvB,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IAEjE,wBAAwB;IACxB,MAAM,cAAc,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IACD,OAAO,cAAc,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAA4B,EAC5B,UAA8B,EAAE;IAEhC,MAAM,UAAU,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,wCAAwC,CAC/D,OAAO,CAAC,KAAK,CACd,CAAC;QACF,IACE,UAAU,EAAE,MAAM,KAAK,UAAU;YACjC,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ;YACpC,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAC3B,CAAC;YACD,OAAO,UAAU,CAAC,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;IAClE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,CAAC;QAChD,IACE,MAAM;YACN,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;YACjC,MAAM,CAAC,MAAM,KAAK,UAAU;YAC5B,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;YAChC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EACvB,CAAC;YACD,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["/**\n * Agent Engine Registry.\n *\n * Mirrors the CLI_REGISTRY pattern (packages/core/src/terminal/cli-registry.ts)\n * but is open — anyone can register a custom engine via registerAgentEngine()\n * from a server plugin at startup.\n *\n * Built-in engines (anthropic, ai-sdk) are auto-registered by builtin.ts.\n */\n\nimport type {\n  AgentEngine,\n  EngineCapabilities,\n  EngineStreamOptions,\n} from \"./types.js\";\nimport { getSetting } from \"../../settings/store.js\";\nimport { getAgentAppModelDefaultForCurrentRequest } from \"../app-model-defaults.js\";\nimport {\n  canUseDeployCredentialFallbackForRequest,\n  readDeployCredentialEnv,\n  resolveSecret,\n} from \"../../server/credential-provider.js\";\n\nexport interface AgentEngineEntry {\n  /** Unique name, e.g. \"anthropic\", \"ai-sdk:anthropic\", \"ai-sdk:openai\" */\n  name: string;\n  /** Human-readable label for UI */\n  label: string;\n  /** Short description for engine picker */\n  description: string;\n  /** npm package hint displayed in UI when package is missing */\n  installPackage?: string;\n  /** Engine capabilities */\n  capabilities: EngineCapabilities;\n  /** Default model string */\n  defaultModel: string;\n  /** All supported models (shown in model picker) */\n  supportedModels: readonly string[];\n  /** Environment variables required for this engine to work */\n  requiredEnvVars: string[];\n  /** Create an engine instance from config */\n  create(config: Record<string, unknown>): AgentEngine;\n}\n\nconst _registry = new Map<string, AgentEngineEntry>();\n\n/**\n * Register a custom agent engine. Called at server startup (e.g., from a\n * server plugin or builtin.ts). Throws if name is already registered.\n */\nexport function registerAgentEngine(entry: AgentEngineEntry): void {\n  if (_registry.has(entry.name)) {\n    // Allow re-registration in tests / hot-reload — just overwrite\n    if (process.env.NODE_ENV === \"test\") {\n      _registry.set(entry.name, entry);\n      return;\n    }\n    console.warn(\n      `[agent-engine] Engine \"${entry.name}\" is already registered. Skipping.`,\n    );\n    return;\n  }\n  _registry.set(entry.name, entry);\n}\n\n/** Get a registered engine entry by name, or undefined if not found */\nexport function getAgentEngineEntry(\n  name: string,\n): AgentEngineEntry | undefined {\n  return _registry.get(name);\n}\n\n/** List all registered engine entries */\nexport function listAgentEngines(): AgentEngineEntry[] {\n  return Array.from(_registry.values());\n}\n\n/**\n * First registered engine whose requiredEnvVars are all set. Registration\n * order controls priority — the Builder gateway is registered first so it\n * wins when the Builder private key is present.\n *\n * Escape hatch: AGENT_ENGINE_PREFER_BYO_KEY=true skips the Builder engine\n * on the first pass, so an explicit provider key (ANTHROPIC_API_KEY etc.)\n * is picked instead. Builder is still used as the fallback when no other\n * provider key is set.\n */\nexport function detectEngineFromEnv(): AgentEngineEntry | null {\n  const preferByo = /^(1|true)$/i.test(\n    process.env.AGENT_ENGINE_PREFER_BYO_KEY ?? \"\",\n  );\n\n  if (preferByo) {\n    for (const entry of _registry.values()) {\n      if (entry.name === \"builder\") continue;\n      if (entry.requiredEnvVars.length === 0) continue;\n      if (entry.requiredEnvVars.every((v) => !!readDeployCredentialEnv(v))) {\n        return entry;\n      }\n    }\n    // No BYO key matched — fall through to include Builder as fallback.\n  }\n\n  for (const entry of _registry.values()) {\n    if (entry.requiredEnvVars.length === 0) continue;\n    if (entry.requiredEnvVars.every((v) => !!readDeployCredentialEnv(v))) {\n      return entry;\n    }\n  }\n  return null;\n}\n\nfunction shouldTraceEngineDetection(): boolean {\n  return /^(1|true)$/i.test(\n    process.env.AGENT_NATIVE_DEBUG_AGENT_ENGINE_DETECT ??\n      process.env.AGENT_NATIVE_DEBUG_CREDENTIAL_RESOLVE ??\n      \"\",\n  );\n}\n\n/**\n * Detect a usable engine from the current request user's accessible\n * `app_secrets` rows. Mirrors `detectEngineFromEnv` but consults the\n * encrypted secret store instead of `process.env`, including org-scoped\n * credentials shared with the active organization.\n *\n * Required because the Builder OAuth callback (and the settings UI's\n * \"paste your own key\" flow) writes credentials to app_secrets, not env.\n * Without this check, a user who connected Builder would see status\n * \"configured\" but the next chat turn would fall through to the default\n * Anthropic engine and hit `missing_api_key` — exactly Brent's symptom\n * on the docs site (Loom 2026-04-28: \"It doesn't seem to realize I'm\n * connected once I do a chat\").\n *\n * Includes the local dev session (`local@localhost`): the Builder\n * OAuth flow writes credentials scoped to that email when run from\n * `pnpm dev`, so detection has to consult those rows or the dev user\n * sees the same \"Connect your AI\" card after they've already connected\n * (Sami, 2026-04-30). Org-scoped Builder credentials must also count here:\n * `/builder/status` resolves them via the same request org context, and the\n * chat engine picker must not disagree with that card.\n */\nexport async function detectEngineFromUserSecrets(): Promise<AgentEngineEntry | null> {\n  const traceLookup = shouldTraceEngineDetection();\n  let email: string | undefined;\n  let orgId: string | null | undefined;\n  try {\n    const { getRequestUserEmail, getRequestOrgId } =\n      await import(\"../../server/request-context.js\");\n    email = getRequestUserEmail();\n    orgId = getRequestOrgId();\n  } catch {\n    if (traceLookup) {\n      console.log(\n        `[engine-detect] result=null reason=no-request-context email=(unknown) orgId=(unknown)`,\n      );\n    }\n    return null;\n  }\n  if (!email) {\n    if (traceLookup) {\n      console.log(\n        `[engine-detect] result=null reason=no-email email=(empty) orgId=${orgId ?? \"(none)\"}`,\n      );\n    }\n    return null;\n  }\n\n  const hasAllKeys = async (entry: AgentEngineEntry): Promise<boolean> => {\n    if (entry.requiredEnvVars.length === 0) return false;\n    for (const key of entry.requiredEnvVars) {\n      try {\n        if (!(await resolveSecret(key))) return false;\n      } catch {\n        return false;\n      }\n    }\n    return true;\n  };\n\n  const preferByo = /^(1|true)$/i.test(\n    process.env.AGENT_ENGINE_PREFER_BYO_KEY ?? \"\",\n  );\n\n  if (preferByo) {\n    for (const entry of _registry.values()) {\n      if (entry.name === \"builder\") continue;\n      if (await hasAllKeys(entry)) {\n        if (traceLookup) {\n          console.log(\n            `[engine-detect] result=${entry.name} email=${email} orgId=${orgId ?? \"(none)\"} byo=true`,\n          );\n        }\n        return entry;\n      }\n    }\n    // No BYO key matched — fall through to include Builder as fallback.\n  }\n\n  for (const entry of _registry.values()) {\n    if (await hasAllKeys(entry)) {\n      if (traceLookup) {\n        console.log(\n          `[engine-detect] result=${entry.name} email=${email} orgId=${orgId ?? \"(none)\"}`,\n        );\n      }\n      return entry;\n    }\n  }\n  if (traceLookup) {\n    console.log(\n      `[engine-detect] result=null reason=no-engine-keys-found email=${email} orgId=${orgId ?? \"(none)\"}`,\n    );\n  }\n  return null;\n}\n\n/**\n * Legacy inline API keys on the global `agent-engine` settings row are\n * intentionally ignored. That row is deployment-wide, so treating\n * `{ apiKey }` or `{ config: { apiKey } }` as configured would let one\n * user's pasted key power every other user. Per-user keys live in\n * `app_secrets` and are resolved separately.\n */\nexport function isAgentEngineSettingConfigured(stored: unknown): boolean {\n  if (!stored || typeof stored !== \"object\") return false;\n  const s = stored as {\n    engine?: unknown;\n  };\n  if (typeof s.engine !== \"string\" || !s.engine) return false;\n  return false;\n}\n\nfunction stripInlineApiKeyConfig(\n  config: Record<string, unknown> | undefined,\n): Record<string, unknown> {\n  if (!config) return {};\n  const { apiKey: _discardedApiKey, ...safeConfig } = config;\n  return safeConfig;\n}\n\nfunction engineCreateConfig(\n  apiKey: string | undefined,\n  extra?: Record<string, unknown>,\n): Record<string, unknown> {\n  return {\n    apiKey,\n    allowEnvFallback: canUseDeployCredentialFallbackForRequest(),\n    ...(extra ?? {}),\n  };\n}\n\n/**\n * True when the stored `agent-engine` row points at a registered engine\n * AND an API key for it is reachable via the engine's required env vars.\n * Inline keys on the global settings row are ignored; see\n * `isAgentEngineSettingConfigured`.\n */\nexport function isStoredEngineUsable(\n  stored: unknown,\n  entry: AgentEngineEntry,\n): boolean {\n  if (isAgentEngineSettingConfigured(stored)) return true;\n  if (entry.requiredEnvVars.length === 0) return true;\n  return entry.requiredEnvVars.every((v) => !!readDeployCredentialEnv(v));\n}\n\n/**\n * Request-aware version of `isStoredEngineUsable`.\n *\n * The settings row stores the selected engine/model, while credentials may\n * live in per-user/org `app_secrets`. The sync helper intentionally only sees\n * deploy env vars; this async helper is what request-time routes should use\n * when deciding whether a stored engine can actually run for the current user.\n */\nexport async function isStoredEngineUsableForRequest(\n  stored: unknown,\n  entry: AgentEngineEntry,\n): Promise<boolean> {\n  if (isAgentEngineSettingConfigured(stored)) return true;\n  if (entry.requiredEnvVars.length === 0) return true;\n  for (const key of entry.requiredEnvVars) {\n    try {\n      if (await resolveSecret(key)) continue;\n    } catch {\n      // Fall through to the deployment-level check below.\n    }\n    if (\n      !canUseDeployCredentialFallbackForRequest() ||\n      !readDeployCredentialEnv(key)\n    ) {\n      return false;\n    }\n  }\n  return true;\n}\n\nexport interface ResolveEngineConfig {\n  /** Explicit engine name or instance from createAgentChatPlugin options */\n  engineOption?:\n    | string\n    | AgentEngine\n    | { name: string; config: Record<string, unknown> };\n  /** API key (used as config for the resolved engine) */\n  apiKey?: string;\n  /** Model override (used as part of engine config) */\n  model?: string;\n  /** App/template id used for org-scoped per-app model defaults. */\n  appId?: string;\n}\n\n/**\n * Resolve an AgentEngine from options → explicit env → app default →\n * request credentials → settings → env → default.\n *\n * Resolution order:\n * 1. Explicit `engineOption` from plugin options (string name, instance, or {name, config})\n * 2. Env var AGENT_ENGINE\n * 3. Org/user app-template default, when usable\n * 4. Current request's app_secrets; Builder wins by default when connected\n * 5. Settings store key \"agent-engine\" → { engine: string }, when usable\n * 6. Auto-detect deployment env credentials\n * 7. Default \"anthropic\" (requires ANTHROPIC_API_KEY)\n */\nexport async function resolveEngine(\n  config: ResolveEngineConfig,\n): Promise<AgentEngine> {\n  const { engineOption, apiKey, model: _model, appId } = config;\n\n  // 1. Explicit instance passed directly\n  if (\n    engineOption &&\n    typeof engineOption === \"object\" &&\n    \"stream\" in engineOption\n  ) {\n    return engineOption as AgentEngine;\n  }\n\n  // 2. Explicit {name, config} object\n  if (\n    engineOption &&\n    typeof engineOption === \"object\" &&\n    \"name\" in engineOption\n  ) {\n    const { name, config: engineConfig } = engineOption as {\n      name: string;\n      config: Record<string, unknown>;\n    };\n    const entry = _registry.get(name);\n    if (!entry)\n      throw new Error(\n        `[agent-engine] Unknown engine: \"${name}\". Registered: ${[..._registry.keys()].join(\", \")}`,\n      );\n    return entry.create(engineCreateConfig(apiKey, engineConfig));\n  }\n\n  // 3. Explicit string name from options\n  if (typeof engineOption === \"string\") {\n    const entry = _registry.get(engineOption);\n    if (!entry)\n      throw new Error(\n        `[agent-engine] Unknown engine: \"${engineOption}\". Registered: ${[..._registry.keys()].join(\", \")}`,\n      );\n    return entry.create(engineCreateConfig(apiKey));\n  }\n\n  // 4. Env var — explicit engine name override\n  const envEngine = process.env.AGENT_ENGINE;\n  if (envEngine) {\n    const entry = _registry.get(envEngine);\n    if (entry) return entry.create(engineCreateConfig(apiKey));\n  }\n\n  const appDefault = await getAgentAppModelDefaultForCurrentRequest(appId);\n  if (appDefault?.engine) {\n    const entry = _registry.get(appDefault.engine);\n    if (entry && (await isStoredEngineUsableForRequest(appDefault, entry))) {\n      return entry.create(engineCreateConfig(apiKey));\n    }\n  }\n\n  let stored:\n    | (Record<string, unknown> & { engine?: unknown; config?: unknown })\n    | null = null;\n  try {\n    stored = (await getSetting(\"agent-engine\")) as typeof stored;\n  } catch {\n    // Settings not available — fall through\n  }\n\n  // 5. Auto-detect from the current user's per-user `app_secrets` rows\n  // (Builder OAuth callback + \"paste your own key\" settings flow write\n  // here, not env). Comes before env-detection so a user-specific\n  // Builder connection wins over a stale deploy-level/provider key.\n  const detectedFromUser = await detectEngineFromUserSecrets();\n  if (detectedFromUser?.name === \"builder\") {\n    return detectedFromUser.create(engineCreateConfig(apiKey));\n  }\n\n  // 6. Settings store — only when the stored row's API key is reachable.\n  // This remains below Builder detection so \"Builder.io connected\" and the\n  // runtime agree on the default managed gateway path. Non-Builder user keys\n  // still honor the stored provider/model when Builder is not connected.\n  if (stored && typeof stored.engine === \"string\") {\n    const entry = _registry.get(stored.engine);\n    if (entry && (await isStoredEngineUsableForRequest(stored, entry))) {\n      return entry.create({\n        ...engineCreateConfig(\n          apiKey,\n          stripInlineApiKeyConfig(\n            stored.config as Record<string, unknown> | undefined,\n          ),\n        ),\n      });\n    }\n  }\n\n  if (detectedFromUser) {\n    return detectedFromUser.create(engineCreateConfig(apiKey));\n  }\n\n  // 8. Auto-detect from any provider env var — so just dropping a key in\n  // .env works without also setting AGENT_ENGINE.\n  const detected = canUseDeployCredentialFallbackForRequest()\n    ? detectEngineFromEnv()\n    : null;\n  if (detected) return detected.create(engineCreateConfig(apiKey));\n\n  // 9. Default: anthropic\n  const anthropicEntry = _registry.get(\"anthropic\");\n  if (!anthropicEntry) {\n    throw new Error(\n      \"[agent-engine] Default Anthropic engine is not registered. Did builtin.ts fail to load?\",\n    );\n  }\n  return anthropicEntry.create(engineCreateConfig(apiKey));\n}\n\n/**\n * Read the user-selected model for an engine from the `agent-engine` setting.\n *\n * The settings UI writes `{engine, model}` via the `manage-agent-engine` action=\"set\",\n * but `resolveEngine` only uses the stored engine (the model is a separate\n * per-request concern). Call this helper alongside `resolveEngine` to honor\n * the user's model choice without requiring a process restart.\n *\n * Returns the stored model only when the stored engine name matches `engine`\n * — otherwise returns `undefined` to avoid applying an Anthropic model string\n * to, say, an OpenRouter engine.\n */\nexport async function getStoredModelForEngine(\n  engine: AgentEngine | string,\n  options: { appId?: string } = {},\n): Promise<string | undefined> {\n  const engineName = typeof engine === \"string\" ? engine : engine.name;\n  try {\n    const appDefault = await getAgentAppModelDefaultForCurrentRequest(\n      options.appId,\n    );\n    if (\n      appDefault?.engine === engineName &&\n      typeof appDefault.model === \"string\" &&\n      appDefault.model.length > 0\n    ) {\n      return appDefault.model;\n    }\n  } catch {\n    // Settings/request context may not be available — fall through.\n  }\n\n  try {\n    const stored = await getSetting(\"agent-engine\");\n    if (\n      stored &&\n      typeof stored.engine === \"string\" &&\n      stored.engine === engineName &&\n      typeof stored.model === \"string\" &&\n      stored.model.length > 0\n    ) {\n      return stored.model;\n    }\n  } catch {\n    // Settings store not ready (fresh install, migration pending) — skip.\n  }\n  return undefined;\n}\n"]}

package/dist/cli/connect.d.ts

@@ -23,7 +23,7 @@
  *     | { status: "consumed" }
  *     | { status: "error" | "not_found", message? }
  *
- * Node-only CLI module. No new npm deps (Node built-ins + global fetch only).
+ * Node-only CLI module. Uses Node built-ins, @clack/prompts, and global fetch.
  */
 import { ClientId } from "./mcp-config-writers.js";
 export interface ParsedConnectArgs {
@@ -31,6 +31,8 @@ export interface ParsedConnectArgs {
     url?: string;
     /** all | claude-code | claude-code-cli | codex | cowork (default "all"). */
     client: string;
+    /** True when the user passed --client explicitly, so we skip the picker. */
+    clientExplicit: boolean;
     /** user | project (default "user"). */
     scope: string;
     /** Override the minted MCP server name. */
@@ -48,6 +50,18 @@ export declare function parseConnectArgs(argv: string[]): ParsedConnectArgs;
 export declare function normalizeUrl(raw: string): string;
 /** Resolve the requested clients list. "all" → every supported client. */
 export declare function resolveClients(client: string): ClientId[];
+export declare function connectPreferencesPath(): string;
+export declare function readConnectClientPreferences(file?: string): ClientId[] | null;
+export declare function writeConnectClientPreferences(clients: ClientId[], file?: string): void;
+export interface ConnectClientPromptContext {
+    initialClients: ClientId[];
+    options: {
+        value: ClientId;
+        label: string;
+        hint: string;
+    }[];
+    preferencesFile: string;
+}
 /** Injectable hooks so the poll state machine is unit-testable. */
 export interface ConnectDeps {
     /** Defaults to global fetch. */
@@ -58,6 +72,12 @@ export interface ConnectDeps {
     openBrowser?: (url: string) => void;
     /** Override "now" for the expiry cap (ms epoch). Defaults to Date.now. */
     now?: () => number;
+    /** Tests/embedders can force or suppress the interactive client picker. */
+    isInteractive?: () => boolean;
+    /** Injectable client picker. Defaults to @clack/prompts multiselect. */
+    promptClients?: (context: ConnectClientPromptContext) => Promise<ClientId[] | null>;
+    /** Override the persisted connect preferences file. */
+    preferencesFile?: string;
 }
 /**
  * Run the device-code flow against `baseUrl` and return the approved grant.

package/dist/cli/connect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/cli/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAMH,OAAO,EAEL,QAAQ,EAET,MAAM,yBAAyB,CAAC;AAkBjC,MAAM,WAAW,iBAAiB;IAChC,uEAAuE;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,GAAG,EAAE,OAAO,CAAC;CACd;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAsBlE;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAmChD;AAED,0EAA0E;AAC1E,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE,CAOzD;AAuED,mEAAmE;AACnE,MAAM,WAAW,WAAW;IAC1B,gCAAgC;IAChC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,0EAA0E;IAC1E,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,0EAA0E;IAC1E,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AA4CD;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,WAAgB,GACrB,OAAO,CAAC;IACT,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC,GAAG,IAAI,CAAC,CAqHR;AAWD;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,QAAQ,EAAE,EACnB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,MAAyB,EAClC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,CAetC;AA6DD,8EAA8E;AAC9E,wBAAgB,UAAU,IAAI;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAAE,CAI5D;AA8DD;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,GAAE,WAAgB,GACrB,OAAO,CAAC,IAAI,CAAC,CA6Bf"}
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/cli/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAQH,OAAO,EAEL,QAAQ,EAET,MAAM,yBAAyB,CAAC;AAiCjC,MAAM,WAAW,iBAAiB;IAChC,uEAAuE;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,cAAc,EAAE,OAAO,CAAC;IACxB,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,GAAG,EAAE,OAAO,CAAC;CACd;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAyBlE;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAmChD;AAED,0EAA0E;AAC1E,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE,CAOzD;AAED,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C;AAkBD,wBAAgB,4BAA4B,CAC1C,IAAI,GAAE,MAAiC,GACtC,QAAQ,EAAE,GAAG,IAAI,CAUnB;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,QAAQ,EAAE,EACnB,IAAI,GAAE,MAAiC,GACtC,IAAI,CAiBN;AAED,MAAM,WAAW,0BAA0B;IACzC,cAAc,EAAE,QAAQ,EAAE,CAAC;IAC3B,OAAO,EAAE;QAAE,KAAK,EAAE,QAAQ,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5D,eAAe,EAAE,MAAM,CAAC;CACzB;AA6ID,mEAAmE;AACnE,MAAM,WAAW,WAAW;IAC1B,gCAAgC;IAChC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,0EAA0E;IAC1E,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,0EAA0E;IAC1E,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC;IAC9B,wEAAwE;IACxE,aAAa,CAAC,EAAE,CACd,OAAO,EAAE,0BAA0B,KAChC,OAAO,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC;IAChC,uDAAuD;IACvD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AA4CD;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,WAAgB,GACrB,OAAO,CAAC;IACT,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC,GAAG,IAAI,CAAC,CAqHR;AAWD;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,QAAQ,EAAE,EACnB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,MAAyB,EAClC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,CAetC;AAkED,8EAA8E;AAC9E,wBAAgB,UAAU,IAAI;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAAE,CAI5D;AAiED;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,GAAE,WAAgB,GACrB,OAAO,CAAC,IAAI,CAAC,CAiCf"}

package/dist/cli/connect.js

@@ -23,8 +23,10 @@
  *     | { status: "consumed" }
  *     | { status: "error" | "not_found", message? }
  *
- * Node-only CLI module. No new npm deps (Node built-ins + global fetch only).
+ * Node-only CLI module. Uses Node built-ins, @clack/prompts, and global fetch.
  */
+import fs from "node:fs";
+import os from "node:os";
 import { spawn } from "node:child_process";
 import path from "node:path";
 import { findWorkspaceRoot } from "../mcp/workspace-resolve.js";
@@ -33,6 +35,19 @@ import { visibleTemplates } from "./templates-meta.js";
 const DEVICE_START_PATH = "/_agent-native/mcp/connect/device/start";
 const DEVICE_POLL_PATH = "/_agent-native/mcp/connect/device/poll";
 const SERVER_NAME_PREFIX = "agent-native";
+const CONNECT_PREFERENCES_VERSION = 1;
+const CLIENT_LABELS = {
+    "claude-code": "Claude Code",
+    "claude-code-cli": "Claude Code CLI",
+    codex: "Codex",
+    cowork: "Claude Cowork",
+};
+const CLIENT_HINTS = {
+    "claude-code": ".mcp.json or ~/.claude.json",
+    "claude-code-cli": ".mcp.json or ~/.claude.json",
+    codex: "~/.codex/config.toml",
+    cowork: "~/.cowork/mcp.json",
+};
 function logOut(msg) {
     process.stdout.write(`${msg}\n`);
 }
@@ -42,6 +57,7 @@ function logErr(msg) {
 export function parseConnectArgs(argv) {
     const out = {
         client: "all",
+        clientExplicit: false,
         scope: "user",
         all: false,
     };
@@ -57,8 +73,10 @@ export function parseConnectArgs(argv) {
         let v;
         if (a === "--all")
             out.all = true;
-        else if ((v = eat("--client")) !== undefined)
+        else if ((v = eat("--client")) !== undefined) {
             out.client = v;
+            out.clientExplicit = true;
+        }
         else if ((v = eat("--scope")) !== undefined)
             out.scope = v;
         else if ((v = eat("--name")) !== undefined)
@@ -113,6 +131,107 @@ export function resolveClients(client) {
         return [c];
     throw new Error(`Unknown --client "${client}". Use: all, ${CLIENTS.join(", ")}`);
 }
+export function connectPreferencesPath() {
+    return path.join(os.homedir(), ".agent-native", "connect.json");
+}
+function normalizeClientIds(values) {
+    if (!Array.isArray(values))
+        return [];
+    const seen = new Set();
+    const out = [];
+    for (const value of values) {
+        if (typeof value !== "string")
+            continue;
+        const id = value.toLowerCase();
+        if (!CLIENTS.includes(id))
+            continue;
+        const client = id;
+        if (seen.has(client))
+            continue;
+        seen.add(client);
+        out.push(client);
+    }
+    return out;
+}
+export function readConnectClientPreferences(file = connectPreferencesPath()) {
+    try {
+        const parsed = JSON.parse(fs.readFileSync(file, "utf-8"));
+        const clients = normalizeClientIds(parsed?.defaultClients ?? parsed?.clients);
+        return clients.length > 0 ? clients : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function writeConnectClientPreferences(clients, file = connectPreferencesPath()) {
+    const normalized = normalizeClientIds(clients);
+    if (normalized.length === 0)
+        return;
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file, JSON.stringify({
+        version: CONNECT_PREFERENCES_VERSION,
+        defaultClients: normalized,
+        updatedAt: new Date().toISOString(),
+    }, null, 2) + "\n", "utf-8");
+}
+function clientPromptOptions() {
+    return CLIENTS.map((client) => ({
+        value: client,
+        label: CLIENT_LABELS[client],
+        hint: CLIENT_HINTS[client],
+    }));
+}
+function shouldPromptForClients(deps) {
+    if (process.env.AGENT_NATIVE_NO_PROMPT === "1")
+        return false;
+    if (process.env.CI === "true")
+        return false;
+    if (deps.isInteractive)
+        return deps.isInteractive();
+    return !!process.stdin.isTTY && !!process.stdout.isTTY;
+}
+async function promptForClients(context) {
+    const clack = await import("@clack/prompts");
+    const result = await clack.multiselect({
+        message: "Write MCP config for which local agents?\n" +
+            "  (space toggles, enter confirms; saved for next time)",
+        options: context.options,
+        initialValues: context.initialClients,
+        required: true,
+    });
+    if (clack.isCancel(result)) {
+        clack.cancel("Cancelled.");
+        return null;
+    }
+    return normalizeClientIds(result);
+}
+async function resolveConnectClients(parsed, deps) {
+    if (parsed.clientExplicit)
+        return resolveClients(parsed.client);
+    const defaultClients = resolveClients(parsed.client);
+    if (!shouldPromptForClients(deps))
+        return defaultClients;
+    const preferencesFile = deps.preferencesFile ?? connectPreferencesPath();
+    const initialClients = readConnectClientPreferences(preferencesFile) ?? defaultClients;
+    const prompt = deps.promptClients ?? promptForClients;
+    const selected = normalizeClientIds(await prompt({
+        initialClients,
+        options: clientPromptOptions(),
+        preferencesFile,
+    }));
+    if (selected.length === 0)
+        return null;
+    try {
+        writeConnectClientPreferences(selected, preferencesFile);
+    }
+    catch (err) {
+        logErr(`  Could not save connect client preference (${err?.message ?? err}).`);
+    }
+    return selected;
+}
+function clientArgForDeviceFlow(clients) {
+    return clients.length === 1 ? clients[0] : "all";
+}
 /** Derive an app slug from a deployed origin, e.g. mail.agent-native.com → mail. */
 function appSlugFromUrl(url) {
     try {
@@ -309,10 +428,9 @@ export function writeConfigs(clients, serverName, mcpUrl, token, scope, baseDir
 // ---------------------------------------------------------------------------
 // Single-app connect
 // ---------------------------------------------------------------------------
-async function connectOne(rawUrl, parsed, deps) {
+async function connectOne(rawUrl, parsed, clients, deps) {
     const baseUrl = normalizeUrl(rawUrl);
     const appSlug = appSlugFromUrl(baseUrl);
-    const clients = resolveClients(parsed.client);
     const scope = parsed.scope === "user" ? "user" : "project";
     let token;
     let mcpUrl;
@@ -327,7 +445,7 @@ async function connectOne(rawUrl, parsed, deps) {
         logOut(`  Using supplied --token for ${baseUrl} (skipping browser flow).`);
     }
     else {
-        const grant = await runDeviceFlow(baseUrl, appSlug, parsed.client, deps);
+        const grant = await runDeviceFlow(baseUrl, appSlug, clientArgForDeviceFlow(clients), deps);
         if (!grant)
             return { ok: false };
         token = grant.token;
@@ -354,7 +472,7 @@ export function hostedApps() {
         .filter((t) => typeof t.prodUrl === "string" && t.prodUrl.length > 0)
         .map((t) => ({ name: t.name, url: t.prodUrl }));
 }
-async function connectAll(parsed, deps) {
+async function connectAll(parsed, clients, deps) {
     const apps = hostedApps();
     if (apps.length === 0) {
         logErr("  No hosted first-party apps found in the template registry.");
@@ -367,7 +485,7 @@ async function connectAll(parsed, deps) {
         logOut("");
         logOut(`  ── ${app.name} (${app.url}) ──`);
         try {
-            const res = await connectOne(app.url, parsed, deps);
+            const res = await connectOne(app.url, parsed, clients, deps);
             results.push({
                 name: app.name,
                 status: res.ok ? "connected" : "skipped",
@@ -396,7 +514,9 @@ Usage:
   agent-native connect <url> [--client <c>] [--scope user|project] [--name <n>]
       Browser device-code flow. Prints a code, opens the verification URL,
       polls until approved, then writes the HTTP MCP entry into your
-      client config(s). Idempotent — re-running replaces the same entry.
+      selected client config(s). With no --client, opens a brief picker
+      preselected from ~/.agent-native/connect.json, or all clients on first
+      run. Idempotent — re-running replaces the same entry.
 
   agent-native connect <url> --token <token>
       No-browser fallback. Skip the device flow and write the entry with
@@ -406,7 +526,7 @@ Usage:
       Connect every first-party hosted app at once.
 
 Clients:  all (default), claude-code, claude-code-cli, codex, cowork
-Scope:    project (default, .mcp.json) or user (~/.claude.json)`;
+Scope:    user (default, ~/.claude.json) or project (.mcp.json)`;
 /**
  * `agent-native connect` entry point. `deps` is injectable for tests; the
  * dispatcher in index.ts calls it with just `args`.
@@ -423,7 +543,10 @@ export async function runConnect(args, deps = {}) {
     const parsed = parseConnectArgs(args);
     try {
         if (parsed.all) {
-            const ok = await connectAll(parsed, deps);
+            const clients = await resolveConnectClients(parsed, deps);
+            if (!clients)
+                return;
+            const ok = await connectAll(parsed, clients, deps);
             if (!ok)
                 process.exitCode = 1;
             return;
@@ -435,7 +558,10 @@ export async function runConnect(args, deps = {}) {
             process.exitCode = 1;
             return;
         }
-        const res = await connectOne(parsed.url, parsed, deps);
+        const clients = await resolveConnectClients(parsed, deps);
+        if (!clients)
+            return;
+        const res = await connectOne(parsed.url, parsed, clients, deps);
         if (!res.ok)
             process.exitCode = 1;
     }