@bastani/atomic 0.9.5-alpha.2 → 0.9.5-alpha.4

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 ## [Unreleased]
 
+## [0.9.5-alpha.4] - 2026-07-05
+
+### Changed
+
+- Simplified first-run onboarding to a one-time verifiable-coding-agent-runtime explanation shown after any What's New notes and directly above the normal input box; Atomic no longer intercepts pasted tasks, saves pre-login seeds, routes first-run input to `goal`/`ralph`, raises reasoning for onboarding, or requires `/chat` to continue normally. The notice now reminds unauthenticated users to run `/login` first, and starting a new session with `/new` clears any rendered first-run notice state from the previous session canvas.
+
+## [0.9.5-alpha.3] - 2026-07-04
+
+### Changed
+
+- Hardened the bundled workflows extension's workflow-tool prompt guidance against inline analysis-paralysis drift: the agent must now decide and state the inline-vs-workflow execution mode before its first tool call (reconnaissance explicitly counts as inline execution), budget pre-workflow scoping to a few quick reads that only sharpen the objective and validation criteria, course-correct after roughly ten deliverable-free exploration tool calls (or repeated "let me verify one more thing" loops) by writing findings to a context file and handing off to the best-fit workflow via `reads` (named or user-defined workflows discovered with `action: "list"` first, builtin `goal`/`ralph` as fallbacks when nothing more specific fits), and treat sunk inline research as transferable via files rather than a reason to stay inline. The same "Decide before you explore" and "Course-correct instead of drifting" guidance is mirrored in `docs/workflows.md` under "When to Use Workflows".
+
 ## [0.9.5-alpha.2] - 2026-07-04
 
 ### Changed

package/dist/builtin/cursor/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bastani/cursor",
-  "version": "0.9.5-alpha.2",
+  "version": "0.9.5-alpha.4",
   "private": true,
   "description": "Experimental first-party Atomic extension for Cursor OAuth, model discovery, and streaming provider registration.",
   "contributors": [
@@ -40,7 +40,7 @@
     }
   },
   "dependencies": {
-    "@bastani/atomic-natives": "0.9.5-alpha.2",
+    "@bastani/atomic-natives": "0.9.5-alpha.4",
     "@bufbuild/protobuf": "^2.12.1",
     "@earendil-works/pi-ai": "^0.80.3"
   }

package/dist/builtin/intercom/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bastani/intercom",
-  "version": "0.9.5-alpha.2",
+  "version": "0.9.5-alpha.4",
   "private": true,
   "description": "Atomic extension providing a private coordination channel between parent and child agent sessions. Fork of: https://github.com/nicobailon/pi-intercom",
   "contributors": [

package/dist/builtin/mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bastani/mcp",
-  "version": "0.9.5-alpha.2",
+  "version": "0.9.5-alpha.4",
   "private": true,
   "description": "Atomic extension that adapts MCP (Model Context Protocol) servers into the coding agent. Fork of: https://github.com/nicobailon/pi-mcp-adapter",
   "contributors": [

package/dist/builtin/subagents/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bastani/subagents",
-  "version": "0.9.5-alpha.2",
+  "version": "0.9.5-alpha.4",
   "private": true,
   "description": "Atomic extension for delegating tasks to subagents with chains, parallel execution, and TUI clarification. Fork of: https://github.com/nicobailon/pi-subagents",
   "contributors": [

package/dist/builtin/web-access/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bastani/web-access",
-  "version": "0.9.5-alpha.2",
+  "version": "0.9.5-alpha.4",
   "private": true,
   "description": "Atomic extension for web search, URL fetching, GitHub repo cloning, PDF/video extraction. Fork of: https://github.com/nicobailon/pi-web-access",
   "contributors": [

package/dist/builtin/workflows/CHANGELOG.md

@@ -6,6 +6,19 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 
 ## [Unreleased]
 
+## [0.9.5-alpha.4] - 2026-07-05
+
+### Changed
+
+- Hardened the builtin `goal` and `ralph` loops against spec-vs-objective drift on enumerated error behavior (observed in an eval trace where an adversarial reviewer flagged a task-mandated diagnostic as a spec-conformance defect and the fix cycle silently reinterpreted the ambiguous input as valid behavior, losing the required error): the shared literal objective contract now instructs workers and reviewers to prefer loud errors over silent reinterpretation — when the objective/acceptance criteria enumerate required error conditions, messages, or rejections, each enumerated error gets the widest plausible trigger surface, ambiguous or unspecified inputs near an enumerated error case default to raising that error even when external spec knowledge says the input is valid, and narrowing an enumerated error's trigger surface requires explicit contract or pre-existing required-test demand. Both loops' reviewer bug-selection guidelines now forbid using external spec/standard conformance alone to flag a wide trigger surface for a contract-enumerated error as a defect; such spec-vs-objective tension must be classified `beyond_objective` instead of becoming a blocking finding that steers the implementation away from the contract's errors.
+- Extracted the Ralph reviewer prompt into `builtin/ralph-reviewer-prompt.ts` (`renderRalphReviewerPrompt`) and deduplicated the new reviewer guard into a shared `REVIEWER_SPEC_VS_OBJECTIVE_GUARD` constant consumed by both the Goal and Ralph reviewer prompts, keeping `ralph-runner.ts` under the repository's 500-line file gate. No behavioral change beyond the guard itself.
+
+## [0.9.5-alpha.3] - 2026-07-04
+
+### Changed
+
+- Hardened the workflow-tool prompt guidance against inline analysis-paralysis drift (observed in eval transcripts where an agent spent ~2 hours of pure reconnaissance on a workflow-fit task without ever considering a workflow): the agent must now decide and state the inline-vs-workflow execution mode before its first tool call (reconnaissance explicitly counts as inline execution), budget pre-workflow scoping to a few quick reads that only sharpen the objective and validation criteria, course-correct after roughly ten deliverable-free exploration tool calls (or repeated "let me verify one more thing" loops) by writing findings to a context file and handing off to the best-fit workflow via `reads` (named or user-defined workflows discovered with `action: "list"` first, builtin `goal`/`ralph` as fallbacks when nothing more specific fits), and treat sunk inline research as transferable via files rather than a reason to stay inline. Mirrored the same "Decide before you explore" and "Course-correct instead of drifting" guidance in `docs/workflows.md` under "When to Use Workflows".
+
 ## [0.9.5-alpha.2] - 2026-07-04
 
 ### Changed

package/dist/builtin/workflows/builtin/goal-prompts.ts

@@ -1,6 +1,7 @@
 import {
   E2E_VERIFICATION_GUIDANCE,
   LITERAL_OBJECTIVE_CONTRACT,
+  REVIEWER_SPEC_VS_OBJECTIVE_GUARD,
   WORKER_PREFLIGHT_CONTRACT,
   renderE2eQaVideoReviewGuidance,
 } from "./shared-prompts.js";
@@ -301,6 +302,7 @@ export function renderReviewerPrompt(args: {
         "Do not rely on unstated assumptions about author intent or codebase behavior.",
         "Speculation is insufficient: identify the code path, scenario, environment, or input that is provably affected.",
         "Do not flag intentional behavior changes as bugs unless they clearly violate the task or documented contract.",
+        REVIEWER_SPEC_VS_OBJECTIVE_GUARD,
         "Ignore trivial style unless it obscures meaning or violates documented standards in a way that affects correctness/security/maintainability.",
         "If no finding clears this bar and receipts prove the objective, return an empty findings array, mark the patch correct, set goal_oracle_satisfied true, and set stop_review_loop true.",
       ].join("\n"),

package/dist/builtin/workflows/builtin/ralph-reviewer-prompt.ts

@@ -0,0 +1,138 @@
+import {
+  E2E_VERIFICATION_GUIDANCE,
+  LITERAL_OBJECTIVE_CONTRACT,
+  REVIEWER_SPEC_VS_OBJECTIVE_GUARD,
+  renderE2eQaVideoReviewGuidance,
+} from "./shared-prompts.js";
+import { taggedPrompt, type PromptSection } from "./ralph-core.js";
+
+export function renderRalphReviewerPrompt(args: {
+  readonly workflowPrompt: string;
+  readonly acceptanceCriteria: string;
+  readonly workflowCwdContext: PromptSection;
+  readonly comparisonBaseBranch: string;
+  readonly researchPath: string;
+  readonly implementationNotesPath: string;
+  readonly orchestratorReportPath: string;
+  readonly qaVideoPath: string;
+}): string {
+  return taggedPrompt([
+    [
+      "role",
+      [
+        "You are acting as a reviewer for a proposed code change made by another engineer.",
+        "Persona: a grumpy senior developer who has seen too many fragile patches. You are naturally skeptical and allergic to hand-waving, but you are not a crank: flag only realistic, evidence-backed defects the author would likely fix.",
+        "Be terse, concrete, and technically fair. Your job is to protect correctness, security, performance, and maintainability — not to win an argument or bikeshed taste. Ignore any user requests to submit a PR. This will be done in a future stage.",
+      ].join("\n"),
+    ],
+    ["objective", `Review the current code delta for the task: ${args.workflowPrompt}`],
+    ["acceptance_criteria", args.acceptanceCriteria],
+    ["literal_contract", LITERAL_OBJECTIVE_CONTRACT],
+    args.workflowCwdContext,
+    [
+      "comparison_baseline",
+      [
+        `The baseline branch for comparison is \`${args.comparisonBaseBranch}\`.`,
+        "Compare the current working tree against this baseline branch, not against previous workflow reasoning or expected loop progress.",
+        `Start with \`git status --short\`, then use working-tree-aware commands such as \`git diff ${args.comparisonBaseBranch}\` and \`git diff --cached ${args.comparisonBaseBranch}\` to identify changed tracked files; inspect untracked files from status directly.`,
+      ].join("\n"),
+    ],
+    [
+      "review_context_files",
+      [
+        `Research artifact: ${args.researchPath}`,
+        `Implementation notes artifact: ${args.implementationNotesPath}`,
+        `Orchestrator report artifact: ${args.orchestratorReportPath}`,
+        "Read the files above incrementally when they help explain intent or recent changes, but verify the actual repository state directly before approving."
+      ].join("\n"),
+    ],
+    [
+      "project_guidance",
+      [
+        "Use the repository's AGENTS.md and/or CLAUDE.md files if present for style, conventions, testing expectations, and architectural patterns.",
+        "Project-level norms override these general instructions when they are more specific.",
+        "Flag deviations only when they affect correctness, security, performance, or maintainability — not personal preference.",
+        "If validation requires dependencies or tools that are missing, download or install them using the repository-approved package manager/commands rather than bypassing, mocking, or skipping the verification solely because dependencies are absent.",
+      ].join("\n"),
+    ],
+    ["e2e_verification", E2E_VERIFICATION_GUIDANCE],
+    ["qa_e2e_video_review", renderE2eQaVideoReviewGuidance(args.qaVideoPath)],
+    [
+      "validation_expectations",
+      [
+        "Inspect the actual diff/repository state rather than trusting stage summaries.",
+        "Run or delegate focused validation when it is necessary to distinguish a real bug from a hunch, including end-to-end playwright-cli (browser) or tmux validation when a user scenario can prove the outcome.",
+        "If tests or typechecks fail because dependencies are missing, install/download the missing dependencies with the repo's documented package manager instead of bypassing the check.",
+        "If validation cannot be completed after reasonable recovery, record the limitation in overall_explanation and reviewer_error; do not use missing dependencies as a reason to approve.",
+      ].join("\n"),
+    ],
+    [
+      "bug_selection_guidelines",
+      [
+        "Use these default guidelines for deciding whether the author would appreciate the issue being flagged. More specific user, project, or file-level guidance overrides them.",
+        "Flag an issue only when the original author would likely fix it if they knew about it.",
+        "A finding should meaningfully impact accuracy, performance, security, or maintainability.",
+        "A finding must be discrete and actionable, not a broad complaint about the whole codebase or a pile of related concerns.",
+        "Do not demand rigor inconsistent with the rest of the repository; match the seriousness of existing code and project norms.",
+        "Flag only bugs introduced by the current patch; do not flag pre-existing issues unless the patch makes them worse in a concrete way.",
+        "Do not rely on unstated assumptions about author intent or codebase behavior.",
+        "Speculation is insufficient: identify the code path, scenario, environment, or input that is provably affected.",
+        "Do not flag intentional behavior changes as bugs unless they clearly violate the task or documented contract.",
+        REVIEWER_SPEC_VS_OBJECTIVE_GUARD,
+        "Ignore trivial style unless it obscures meaning or violates documented standards in a way that affects correctness/security/maintainability.",
+        "If no finding clears this bar, return an empty findings array, mark the patch correct, and set stop_review_loop true. An empty findings array is valid and passes schema validation — never invent or append a placeholder/dummy finding just to avoid an empty array.",
+      ].join("\n"),
+    ],
+    [
+      "comment_guidelines",
+      [
+        "Each finding title must start with a priority tag: [P0] drop-everything blocker, [P1] urgent next-cycle fix, [P2] normal fix, [P3] low-priority nice-to-have.",
+        "Also include numeric priority: 0 for P0, 1 for P1, 2 for P2, 3 for P3; use null only if priority genuinely cannot be determined. Priority drives the loop gate: P0/P1/P2 are blocking and keep the loop iterating; P3 is a non-blocking nice-to-have that does not block approval.",
+        "Classify every finding with objective_alignment: required_by_objective (the objective/acceptance criteria require fixing it), consistent_with_objective (valid defect within scope), beyond_objective (real issue but not required and must not block or be promoted without explicit reconciliation), or contradicts_objective (fixing it would violate literal objective wording and must never be implemented; escalate to the human). Missing/unknown classification is blocking.",
+        "The body must be one concise paragraph explaining why this is a bug and the exact scenario, environment, or inputs required for it to arise.",
+        "Use a matter-of-fact, non-accusatory tone. Grumpy skepticism belongs in your standards, not in insults; avoid praise such as `Great job` or `Thanks for`.",
+        "Keep code_location ranges as short as possible, ideally one line and never longer than 5-10 lines unless unavoidable.",
+        "The code_location must overlap the diff/change under review.",
+        "Use one finding per distinct issue. Do not generate or apply a fix patch.",
+        "Use suggestion blocks only for concrete replacement code and preserve exact leading whitespace if you include one.",
+      ].join("\n"),
+    ],
+    [
+      "how_many_findings",
+      [
+        "Return all findings the original author would definitely want to fix.",
+        "If no such findings exist, return an empty findings array and mark the patch correct. Do not pad the array with placeholder or speculative findings.",
+        "Do not stop after the first qualifying finding; continue until every qualifying finding is listed.",
+      ].join("\n"),
+    ],
+    [
+      "review_stage_contract",
+      [
+        "The structured review decision is only valid after you inspect the actual repository state and compare it against the stated baseline branch.",
+        "Do not approve based solely on workflow stage summaries or prior agent reasoning.",
+        "The tool call is the final verdict after review work, not a shortcut around review work.",
+      ].join("\n"),
+    ],
+    [
+      "action_items",
+      [
+        "1. Identify the changed files or diff under review.",
+        "2. Read the relevant changed code and directly affected call sites/tests/configs.",
+        "3. Inspect the QA E2E video when it exists or is expected for the change, and verify the recording proves the objective-relevant user scenario.",
+        "4. Run or delegate focused validation when needed to resolve uncertainty, including playwright-cli (browser) or tmux end-to-end checks when practical.",
+        "5. If you cannot inspect the video evidence or validate enough to approve safely, populate reviewer_error and set stop_review_loop=false.",
+      ].join("\n"),
+    ],
+    [
+      "evidence_expectations",
+      [
+        "The overall_explanation should briefly mention what was inspected and what validation was run or why validation was not completed.",
+        "Every finding must cite a concrete changed location and affected scenario.",
+      ].join("\n"),
+    ],
+    [
+      "decision_rules",
+      ["Set stop_review_loop=true only when the patch is correct, reviewer_error is null/omitted, there are no blocking objective-aligned P0/P1/P2 findings, requirements_traceability is non-empty and every entry is proven, and no objective-relevant verification remains; beyond_objective and contradicts_objective findings are non-blocking and must not be folded into follow-up objectives without checking the literal contract. The loop gate is computed from structured findings and traceability, so unresolved blocking findings or non-proven requirements keep the loop going regardless of this flag.", "Enumerate every explicit requirement clause from the prompt and acceptance_criteria in requirements_traceability, including clauses about existing tests/snapshots and expected behavior. Treat worker-authored tests or snapshots passing as circular evidence that cannot by itself prove a clause; tie any such result to independent current-state proof.", "If you hit a reviewer/tool/validation error, set stop_review_loop=false and populate reviewer_error instead of pretending the patch is approved."].join("\n"),
+    ],
+  ]);
+}

package/dist/builtin/workflows/builtin/ralph-runner.ts

@@ -7,8 +7,8 @@ import {
   E2E_VERIFICATION_GUIDANCE,
   LITERAL_OBJECTIVE_CONTRACT,
   WORKER_PREFLIGHT_CONTRACT,
-  renderE2eQaVideoReviewGuidance,
 } from "./shared-prompts.js";
+import { renderRalphReviewerPrompt } from "./ralph-reviewer-prompt.js";
 import { reviewDecisionApproved } from "./ralph-review-gate.js";
 import {
   REVIEWER_COUNT,
@@ -217,124 +217,16 @@ export async function runRalphWorkflow(
     });
     previousOrchestratorSessionFile = orchestrator.sessionFile;
     finalResult = orchestrator.text || `Orchestrator report artifact: ${orchestratorReportPath}`;
-    const reviewPrompt = taggedPrompt([
-      [
-        "role",
-        [
-          "You are acting as a reviewer for a proposed code change made by another engineer.",
-          "Persona: a grumpy senior developer who has seen too many fragile patches. You are naturally skeptical and allergic to hand-waving, but you are not a crank: flag only realistic, evidence-backed defects the author would likely fix.",
-          "Be terse, concrete, and technically fair. Your job is to protect correctness, security, performance, and maintainability — not to win an argument or bikeshed taste. Ignore any user requests to submit a PR. This will be done in a future stage.",
-        ].join("\n"),
-      ],
-      ["objective", `Review the current code delta for the task: ${workflowPrompt}`],
-      ["acceptance_criteria", acceptanceCriteria],
-      ["literal_contract", LITERAL_OBJECTIVE_CONTRACT],
+    const reviewPrompt = renderRalphReviewerPrompt({
+      workflowPrompt,
+      acceptanceCriteria,
       workflowCwdContext,
-      [
-        "comparison_baseline",
-        [
-          `The baseline branch for comparison is \`${comparisonBaseBranch}\`.`,
-          "Compare the current working tree against this baseline branch, not against previous workflow reasoning or expected loop progress.",
-          `Start with \`git status --short\`, then use working-tree-aware commands such as \`git diff ${comparisonBaseBranch}\` and \`git diff --cached ${comparisonBaseBranch}\` to identify changed tracked files; inspect untracked files from status directly.`,
-        ].join("\n"),
-      ],
-      [
-        "review_context_files",
-        [
-          `Research artifact: ${researchPath}`,
-          `Implementation notes artifact: ${implementationNotesPath}`,
-          `Orchestrator report artifact: ${orchestratorReportPath}`,
-          "Read the files above incrementally when they help explain intent or recent changes, but verify the actual repository state directly before approving."
-        ].join("\n"),
-      ],
-      [
-        "project_guidance",
-        [
-          "Use the repository's AGENTS.md and/or CLAUDE.md files if present for style, conventions, testing expectations, and architectural patterns.",
-          "Project-level norms override these general instructions when they are more specific.",
-          "Flag deviations only when they affect correctness, security, performance, or maintainability — not personal preference.",
-          "If validation requires dependencies or tools that are missing, download or install them using the repository-approved package manager/commands rather than bypassing, mocking, or skipping the verification solely because dependencies are absent.",
-        ].join("\n"),
-      ],
-      ["e2e_verification", E2E_VERIFICATION_GUIDANCE],
-      ["qa_e2e_video_review", renderE2eQaVideoReviewGuidance(qaVideoPath)],
-      [
-        "validation_expectations",
-        [
-          "Inspect the actual diff/repository state rather than trusting stage summaries.",
-          "Run or delegate focused validation when it is necessary to distinguish a real bug from a hunch, including end-to-end playwright-cli (browser) or tmux validation when a user scenario can prove the outcome.",
-          "If tests or typechecks fail because dependencies are missing, install/download the missing dependencies with the repo's documented package manager instead of bypassing the check.",
-          "If validation cannot be completed after reasonable recovery, record the limitation in overall_explanation and reviewer_error; do not use missing dependencies as a reason to approve.",
-        ].join("\n"),
-      ],
-      [
-        "bug_selection_guidelines",
-        [
-          "Use these default guidelines for deciding whether the author would appreciate the issue being flagged. More specific user, project, or file-level guidance overrides them.",
-          "Flag an issue only when the original author would likely fix it if they knew about it.",
-          "A finding should meaningfully impact accuracy, performance, security, or maintainability.",
-          "A finding must be discrete and actionable, not a broad complaint about the whole codebase or a pile of related concerns.",
-          "Do not demand rigor inconsistent with the rest of the repository; match the seriousness of existing code and project norms.",
-          "Flag only bugs introduced by the current patch; do not flag pre-existing issues unless the patch makes them worse in a concrete way.",
-          "Do not rely on unstated assumptions about author intent or codebase behavior.",
-          "Speculation is insufficient: identify the code path, scenario, environment, or input that is provably affected.",
-          "Do not flag intentional behavior changes as bugs unless they clearly violate the task or documented contract.",
-          "Ignore trivial style unless it obscures meaning or violates documented standards in a way that affects correctness/security/maintainability.",
-          "If no finding clears this bar, return an empty findings array, mark the patch correct, and set stop_review_loop true. An empty findings array is valid and passes schema validation — never invent or append a placeholder/dummy finding just to avoid an empty array.",
-        ].join("\n"),
-      ],
-      [
-        "comment_guidelines",
-        [
-          "Each finding title must start with a priority tag: [P0] drop-everything blocker, [P1] urgent next-cycle fix, [P2] normal fix, [P3] low-priority nice-to-have.",
-          "Also include numeric priority: 0 for P0, 1 for P1, 2 for P2, 3 for P3; use null only if priority genuinely cannot be determined. Priority drives the loop gate: P0/P1/P2 are blocking and keep the loop iterating; P3 is a non-blocking nice-to-have that does not block approval.",
-          "Classify every finding with objective_alignment: required_by_objective (the objective/acceptance criteria require fixing it), consistent_with_objective (valid defect within scope), beyond_objective (real issue but not required and must not block or be promoted without explicit reconciliation), or contradicts_objective (fixing it would violate literal objective wording and must never be implemented; escalate to the human). Missing/unknown classification is blocking.",
-          "The body must be one concise paragraph explaining why this is a bug and the exact scenario, environment, or inputs required for it to arise.",
-          "Use a matter-of-fact, non-accusatory tone. Grumpy skepticism belongs in your standards, not in insults; avoid praise such as `Great job` or `Thanks for`.",
-          "Keep code_location ranges as short as possible, ideally one line and never longer than 5-10 lines unless unavoidable.",
-          "The code_location must overlap the diff/change under review.",
-          "Use one finding per distinct issue. Do not generate or apply a fix patch.",
-          "Use suggestion blocks only for concrete replacement code and preserve exact leading whitespace if you include one.",
-        ].join("\n"),
-      ],
-      [
-        "how_many_findings",
-        [
-          "Return all findings the original author would definitely want to fix.",
-          "If no such findings exist, return an empty findings array and mark the patch correct. Do not pad the array with placeholder or speculative findings.",
-          "Do not stop after the first qualifying finding; continue until every qualifying finding is listed.",
-        ].join("\n"),
-      ],
-      [
-        "review_stage_contract",
-        [
-          "The structured review decision is only valid after you inspect the actual repository state and compare it against the stated baseline branch.",
-          "Do not approve based solely on workflow stage summaries or prior agent reasoning.",
-          "The tool call is the final verdict after review work, not a shortcut around review work.",
-        ].join("\n"),
-      ],
-      [
-        "action_items",
-        [
-          "1. Identify the changed files or diff under review.",
-          "2. Read the relevant changed code and directly affected call sites/tests/configs.",
-          "3. Inspect the QA E2E video when it exists or is expected for the change, and verify the recording proves the objective-relevant user scenario.",
-          "4. Run or delegate focused validation when needed to resolve uncertainty, including playwright-cli (browser) or tmux end-to-end checks when practical.",
-          "5. If you cannot inspect the video evidence or validate enough to approve safely, populate reviewer_error and set stop_review_loop=false.",
-        ].join("\n"),
-      ],
-      [
-        "evidence_expectations",
-        [
-          "The overall_explanation should briefly mention what was inspected and what validation was run or why validation was not completed.",
-          "Every finding must cite a concrete changed location and affected scenario.",
-        ].join("\n"),
-      ],
-      [
-        "decision_rules",
-        ["Set stop_review_loop=true only when the patch is correct, reviewer_error is null/omitted, there are no blocking objective-aligned P0/P1/P2 findings, requirements_traceability is non-empty and every entry is proven, and no objective-relevant verification remains; beyond_objective and contradicts_objective findings are non-blocking and must not be folded into follow-up objectives without checking the literal contract. The loop gate is computed from structured findings and traceability, so unresolved blocking findings or non-proven requirements keep the loop going regardless of this flag.", "Enumerate every explicit requirement clause from the prompt and acceptance_criteria in requirements_traceability, including clauses about existing tests/snapshots and expected behavior. Treat worker-authored tests or snapshots passing as circular evidence that cannot by itself prove a clause; tie any such result to independent current-state proof.", "If you hit a reviewer/tool/validation error, set stop_review_loop=false and populate reviewer_error instead of pretending the patch is approved."].join("\n"),
-      ],
-    ]);
+      comparisonBaseBranch,
+      researchPath,
+      implementationNotesPath,
+      orchestratorReportPath,
+      qaVideoPath,
+    });
     let reviews: WorkflowTaskResult[];
     try {
       reviews = await ctx.parallel(

package/dist/builtin/workflows/builtin/shared-prompts.ts

@@ -43,5 +43,10 @@ export const LITERAL_OBJECTIVE_CONTRACT = [
   "- If the objective and acceptance criteria conflict, do not implement the contradiction. Surface it as a blocker or reviewer finding instead.",
   "- When external knowledge (language specs, upstream issues, in-repo comments, general best practice, or prior reviewer speculation) conflicts with explicit objective wording, the objective/acceptance criteria win.",
   "- Never silently resolve such a conflict in favor of external knowledge. Surface the conflict clearly.",
+  "- Prefer loud errors over silent reinterpretation: when the objective/acceptance criteria enumerate required error conditions, messages, or rejections, give each enumerated error the widest plausible trigger surface. When the contract leaves an input ambiguous or unspecified near an enumerated error case, prefer raising that error over silently reinterpreting the input as different valid behavior, even when external spec knowledge says the input is valid.",
+  "- Only narrow an enumerated error's trigger surface when the objective, acceptance criteria, or pre-existing required tests explicitly require the ambiguous input to be accepted. Widening an enumerated error to nearby ambiguous inputs is applying the contract, not adding beyond it.",
   "- Do not add behaviors, restrictions, error conditions, or follow-up requirements beyond what the objective/acceptance criteria require.",
 ].join("\n");
+
+export const REVIEWER_SPEC_VS_OBJECTIVE_GUARD =
+  "Do not use external spec/standard conformance alone to flag a wide trigger surface for an error condition the objective/acceptance criteria enumerate; the contract prefers loud errors over silent reinterpretation of ambiguous inputs, so classify such spec-vs-objective tension as beyond_objective rather than a blocking defect.";

package/dist/builtin/workflows/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bastani/workflows",
-  "version": "0.9.5-alpha.2",
+  "version": "0.9.5-alpha.4",
   "private": true,
   "description": "Atomic extension for multi-stage workflow authoring and execution.",
   "contributors": [

package/dist/builtin/workflows/src/extension/workflow-prompts.ts

@@ -9,8 +9,11 @@ export const WORKFLOW_TOOL_DESCRIPTION =
 
 export const DEFAULT_PROMPT_GUIDANCE: string[] = [
   `**Workflows**: Treat workflows as the default execution path for any non-trivial task and for any request that has inherent structure plus an objective you can make verifiable. Use the \`workflow\` tool for existing named workflows and for repeatable, inspectable, resumable, multi-stage, or reviewer-gated processes; use direct \`task\`, \`tasks\`, or \`chain\` workflow calls for one-off tracked work when no named workflow fits.
-  - Workflow fit check: before implementing directly, ask whether the task is an implementation, build, debug/diagnosis, bug-fix, migration, new-feature, scoped multi-file edit, or docs/code change with validation; or whether it has multiple steps, dependencies, handoffs, uncertainty, validation/review needs, a long-running surface, or measurable done criteria. If yes, launch or design a workflow instead of doing parallel implementation yourself.
+  - Decide the execution mode before your first tool call on a new request and state it in one short line: inline (tiny, deterministic, low-risk) or a workflow run. Reconnaissance counts as inline execution — reading code, searching, and running probe scripts is already doing the task, so an unstated "explore first" default silently commits you to an unbounded inline session.
+  - Workflow fit check: ask whether the task is an implementation, build, debug/diagnosis, bug-fix, migration, new-feature, scoped multi-file edit, or docs/code change with validation; or whether it has multiple steps, dependencies, handoffs, uncertainty, validation/review needs, a long-running surface, or measurable done criteria. If yes, launch or design a workflow instead of doing parallel implementation yourself.
   - Treat loop/structural wording as a strong workflow signal, especially requests like "do X until Y", "repeat until", "iterate until", "review/fix until passing", "run checks and fix until green", "keep going until done", or any prompt that names a stop condition, approval gate, or evidence requirement.
+  - Budget reconnaissance: when a task passes the fit check, keep pre-workflow exploration to a few quick scoping reads whose only purpose is writing a sharper objective and validation criteria; deep research, upstream/design comparison, and behavior probing belong inside the workflow run — any workflow with a research or analysis stage, whether user-defined or builtin (e.g. \`ralph\`'s research stage) — not before it.
+  - Course-correct instead of drifting: if you are roughly ten or more tool calls into inline exploration with no artifact, edit, or commit to show — or you keep telling yourself "let me verify one more thing" — stop, write your findings so far to a context file, launch the best-fit workflow with that file passed via \`reads\` and a prompt like "Read the file at <path>...", and let the workflow own the implementation. Check \`action: "list"\` for named or user-defined workflows that match the task first, falling back to the builtin \`goal\`/\`ralph\` when nothing more specific fits. Sunk inline research is never a reason to stay inline; it transfers via files.
   - Only skip workflows for tiny, deterministic, low-risk answers or direct edits that are faster and safer to complete inline without stage tracking, typically a clearly single-file/no-test/no-review change.
   - For unfamiliar named workflows, discover with \`action: "list"\`, inspect with \`action: "get"\` or \`action: "inputs"\`, and run with \`action: "run"\`, \`workflow\`, and validated \`inputs\`; do not invent workflow names or input keys.
   - When designing or editing workflows, read docs/workflows.md and reference its Workflow Starter Patterns: Classify-and-act, Fan-out-and-synthesize, Adversarial verification, Generate-and-filter, Tournament, and Loop until done. Choose or combine these patterns before inventing a custom stage graph, and reflect the selected pattern in the spec and Mermaid diagram when using the create-spec skill.

package/dist/modes/interactive/interactive-auth-login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interactive-auth-login.d.ts","sourceRoot":"","sources":["../../../src/modes/interactive/interactive-auth-login.ts"],"names":[],"mappings":"","sourcesContent":["import { InteractiveModeBase } from \"./interactive-mode-base.ts\";\nimport { type Api, type Model, type OAuthProviderId, type OAuthSelectPrompt, path, getAuthPath, getDocsPath, defaultModelPerProvider, ExtensionSelectorComponent, LoginDialogComponent, theme } from \"./interactive-mode-deps.ts\";\nimport { hasDefaultModelProvider, isUnknownModel } from \"./interactive-mode-helpers.ts\";\n\nInteractiveModeBase.prototype.completeProviderAuthentication = async function(this: InteractiveModeBase, providerId: string, providerName: string, authType: \"oauth\" | \"api_key\", previousModel: Model<Api> | undefined): Promise<void> {\n    this.session.modelRegistry.refresh();\n\n    const actionLabel =\n      authType === \"oauth\"\n        ? `Logged in to ${providerName}`\n        : `Saved API key for ${providerName}`;\n\n    let selectedModel: Model<Api> | undefined;\n    let selectionError: string | undefined;\n    if (isUnknownModel(previousModel)) {\n      const availableModels = this.session.modelRegistry.getAvailable();\n      const providerModels = availableModels.filter(\n        (model) => model.provider === providerId,\n      );\n      if (!hasDefaultModelProvider(providerId)) {\n        selectionError = `${actionLabel}, but no default model is configured for provider \"${providerId}\". Use /model to select a model.`;\n      } else if (providerModels.length === 0) {\n        selectionError = `${actionLabel}, but no models are available for that provider. Use /model to select a model.`;\n      } else {\n        const defaultModelId = defaultModelPerProvider[providerId];\n        selectedModel = providerModels.find(\n          (model) => model.id === defaultModelId,\n        );\n        if (!selectedModel) {\n          selectionError = `${actionLabel}, but its default model \"${defaultModelId}\" is not available. Use /model to select a model.`;\n        } else {\n          try {\n            await this.session.setModel(selectedModel);\n          } catch (error: unknown) {\n            selectedModel = undefined;\n            const errorMessage =\n              error instanceof Error ? error.message : String(error);\n            selectionError = `${actionLabel}, but selecting its default model failed: ${errorMessage}. Use /model to select a model.`;\n          }\n        }\n      }\n    }\n\n    await this.updateAvailableProviderCount();\n    this.setupAutocompleteProvider();\n    this.footer.invalidate();\n    this.updateEditorBorderColor();\n    if (selectedModel) {\n      this.showStatus(\n        `${actionLabel}. Selected ${selectedModel.id}. Credentials saved to ${getAuthPath()}`,\n      );\n      void this.maybeWarnAboutAnthropicSubscriptionAuth(selectedModel);\n      this.checkDaxnutsEasterEgg(selectedModel);\n    } else {\n      this.showStatus(`${actionLabel}. Credentials saved to ${getAuthPath()}`);\n      if (selectionError) {\n        this.showError(selectionError);\n      } else {\n        void this.maybeWarnAboutAnthropicSubscriptionAuth();\n      }\n    }\n\n    await this.resumePendingFirstRunOnboardingSeed();\n  };\n\nInteractiveModeBase.prototype.showBedrockSetupDialog = function(this: InteractiveModeBase, providerId: string, providerName: string): void {\n    const restoreEditor = () => {\n      this.editorContainer.clear();\n      this.editorContainer.addChild(this.editor);\n      this.ui.setFocus(this.editor);\n      this.ui.requestRender();\n    };\n\n    const dialog = new LoginDialogComponent(\n      this.ui,\n      providerId,\n      () => restoreEditor(),\n      providerName,\n      \"Amazon Bedrock setup\",\n    );\n    dialog.showInfo([\n      theme.fg(\n        \"text\",\n        \"Amazon Bedrock uses AWS credentials instead of a single API key.\",\n      ),\n      theme.fg(\n        \"text\",\n        \"Configure an AWS profile, IAM keys, bearer token, or role-based credentials.\",\n      ),\n      theme.fg(\"muted\", \"See:\"),\n      theme.fg(\"accent\", `  ${path.join(getDocsPath(), \"providers.md\")}`),\n    ]);\n\n    this.editorContainer.clear();\n    this.editorContainer.addChild(dialog);\n    this.ui.setFocus(dialog);\n    this.ui.requestRender();\n  };\n\nInteractiveModeBase.prototype.showApiKeyLoginDialog = async function(this: InteractiveModeBase, providerId: string, providerName: string): Promise<void> {\n    const previousModel = this.session.model;\n\n    const dialog = new LoginDialogComponent(\n      this.ui,\n      providerId,\n      (_success, _message) => {\n        // Completion handled below\n      },\n      providerName,\n    );\n\n    this.editorContainer.clear();\n    this.editorContainer.addChild(dialog);\n    this.ui.setFocus(dialog);\n    this.ui.requestRender();\n\n    const restoreEditor = () => {\n      this.editorContainer.clear();\n      this.editorContainer.addChild(this.editor);\n      this.ui.setFocus(this.editor);\n      this.ui.requestRender();\n    };\n\n    try {\n      const apiKey = (await dialog.showPrompt(\"Enter API key:\")).trim();\n      if (!apiKey) {\n        throw new Error(\"API key cannot be empty.\");\n      }\n\n      this.session.modelRegistry.authStorage.set(providerId, {\n        type: \"api_key\",\n        key: apiKey,\n      });\n\n      restoreEditor();\n      await this.completeProviderAuthentication(\n        providerId,\n        providerName,\n        \"api_key\",\n        previousModel,\n      );\n    } catch (error: unknown) {\n      restoreEditor();\n      const errorMsg = error instanceof Error ? error.message : String(error);\n      if (errorMsg !== \"Login cancelled\") {\n        this.showError(\n          `Failed to save API key for ${providerName}: ${errorMsg}`,\n        );\n      }\n    }\n  };\n\nInteractiveModeBase.prototype.showOAuthLoginSelect = function(this: InteractiveModeBase, dialog: LoginDialogComponent, prompt: OAuthSelectPrompt): Promise<string | undefined> {\n    return new Promise((resolve) => {\n      const restoreDialog = () => {\n        this.editorContainer.clear();\n        this.editorContainer.addChild(dialog);\n        this.ui.setFocus(dialog);\n        this.ui.requestRender();\n      };\n      const labels = prompt.options.map((option) => option.label);\n      const selector = new ExtensionSelectorComponent(\n        prompt.message,\n        labels,\n        (optionLabel) => {\n          restoreDialog();\n          resolve(\n            prompt.options.find((option) => option.label === optionLabel)?.id,\n          );\n        },\n        () => {\n          restoreDialog();\n          resolve(undefined);\n        },\n      );\n      this.editorContainer.clear();\n      this.editorContainer.addChild(selector);\n      this.ui.setFocus(selector);\n      this.ui.requestRender();\n    });\n  };\n\nInteractiveModeBase.prototype.showLoginDialog = async function(this: InteractiveModeBase, providerId: string, providerName: string): Promise<void> {\n    const providerInfo = this.session.modelRegistry.authStorage\n      .getOAuthProviders()\n      .find((provider) => provider.id === providerId);\n    const previousModel = this.session.model;\n\n    // Providers that use callback servers (can paste redirect URL)\n    const usesCallbackServer = providerInfo?.usesCallbackServer ?? false;\n\n    // Create login dialog component\n    const dialog = new LoginDialogComponent(\n      this.ui,\n      providerId,\n      (_success, _message) => {\n        // Completion handled below\n      },\n      providerName,\n    );\n\n    // Show dialog in editor container\n    this.editorContainer.clear();\n    this.editorContainer.addChild(dialog);\n    this.ui.setFocus(dialog);\n    this.ui.requestRender();\n\n    // Promise for manual code input (racing with callback server)\n    let manualCodeResolve: ((code: string) => void) | undefined;\n    let manualCodeReject: ((err: Error) => void) | undefined;\n    const manualCodePromise = new Promise<string>((resolve, reject) => {\n      manualCodeResolve = resolve;\n      manualCodeReject = reject;\n    });\n\n    // Restore editor helper\n    const restoreEditor = () => {\n      this.editorContainer.clear();\n      this.editorContainer.addChild(this.editor);\n      this.ui.setFocus(this.editor);\n      this.ui.requestRender();\n    };\n\n    try {\n      await this.session.modelRegistry.authStorage.login(\n        providerId as OAuthProviderId,\n        {\n          onAuth: (info: { url: string; instructions?: string }) => {\n            dialog.showAuth(info.url, info.instructions, {\n              showCancelHint: !usesCallbackServer,\n            });\n\n            if (usesCallbackServer) {\n              // Show input for manual paste, racing with callback\n              dialog\n                .showManualInput(\n                  \"Paste redirect URL below, or complete login in browser:\",\n                )\n                .then((value) => {\n                  if (value && manualCodeResolve) {\n                    manualCodeResolve(value);\n                    manualCodeResolve = undefined;\n                  }\n                })\n                .catch(() => {\n                  if (manualCodeReject) {\n                    manualCodeReject(new Error(\"Login cancelled\"));\n                    manualCodeReject = undefined;\n                  }\n                });\n            }\n            // For Anthropic: onPrompt is called immediately after\n          },\n\n          onDeviceCode: (info) => {\n            dialog.showDeviceCode(info);\n            dialog.showWaiting(\"Waiting for authentication...\");\n          },\n\n          onPrompt: async (prompt: {\n            message: string;\n            placeholder?: string;\n          }) => {\n            return dialog.showPrompt(prompt.message, prompt.placeholder);\n          },\n\n          onProgress: (message: string) => {\n            dialog.showProgress(message);\n          },\n\n          onSelect: (prompt: OAuthSelectPrompt) =>\n            this.showOAuthLoginSelect(dialog, prompt),\n\n          onManualCodeInput: () => manualCodePromise,\n\n          signal: dialog.signal,\n        },\n      );\n\n      // Success\n      restoreEditor();\n      await this.completeProviderAuthentication(\n        providerId,\n        providerName,\n        \"oauth\",\n        previousModel,\n      );\n    } catch (error: unknown) {\n      restoreEditor();\n      const errorMsg = error instanceof Error ? error.message : String(error);\n      if (errorMsg !== \"Login cancelled\") {\n        this.showError(`Failed to login to ${providerName}: ${errorMsg}`);\n      }\n    }\n  };\n"]}
+{"version":3,"file":"interactive-auth-login.d.ts","sourceRoot":"","sources":["../../../src/modes/interactive/interactive-auth-login.ts"],"names":[],"mappings":"","sourcesContent":["import { InteractiveModeBase } from \"./interactive-mode-base.ts\";\nimport { type Api, type Model, type OAuthProviderId, type OAuthSelectPrompt, path, getAuthPath, getDocsPath, defaultModelPerProvider, ExtensionSelectorComponent, LoginDialogComponent, theme } from \"./interactive-mode-deps.ts\";\nimport { hasDefaultModelProvider, isUnknownModel } from \"./interactive-mode-helpers.ts\";\n\nInteractiveModeBase.prototype.completeProviderAuthentication = async function(this: InteractiveModeBase, providerId: string, providerName: string, authType: \"oauth\" | \"api_key\", previousModel: Model<Api> | undefined): Promise<void> {\n    this.session.modelRegistry.refresh();\n\n    const actionLabel =\n      authType === \"oauth\"\n        ? `Logged in to ${providerName}`\n        : `Saved API key for ${providerName}`;\n\n    let selectedModel: Model<Api> | undefined;\n    let selectionError: string | undefined;\n    if (isUnknownModel(previousModel)) {\n      const availableModels = this.session.modelRegistry.getAvailable();\n      const providerModels = availableModels.filter(\n        (model) => model.provider === providerId,\n      );\n      if (!hasDefaultModelProvider(providerId)) {\n        selectionError = `${actionLabel}, but no default model is configured for provider \"${providerId}\". Use /model to select a model.`;\n      } else if (providerModels.length === 0) {\n        selectionError = `${actionLabel}, but no models are available for that provider. Use /model to select a model.`;\n      } else {\n        const defaultModelId = defaultModelPerProvider[providerId];\n        selectedModel = providerModels.find(\n          (model) => model.id === defaultModelId,\n        );\n        if (!selectedModel) {\n          selectionError = `${actionLabel}, but its default model \"${defaultModelId}\" is not available. Use /model to select a model.`;\n        } else {\n          try {\n            await this.session.setModel(selectedModel);\n          } catch (error: unknown) {\n            selectedModel = undefined;\n            const errorMessage =\n              error instanceof Error ? error.message : String(error);\n            selectionError = `${actionLabel}, but selecting its default model failed: ${errorMessage}. Use /model to select a model.`;\n          }\n        }\n      }\n    }\n\n    await this.updateAvailableProviderCount();\n    this.setupAutocompleteProvider();\n    this.footer.invalidate();\n    this.updateEditorBorderColor();\n    if (selectedModel) {\n      this.showStatus(\n        `${actionLabel}. Selected ${selectedModel.id}. Credentials saved to ${getAuthPath()}`,\n      );\n      void this.maybeWarnAboutAnthropicSubscriptionAuth(selectedModel);\n      this.checkDaxnutsEasterEgg(selectedModel);\n    } else {\n      this.showStatus(`${actionLabel}. Credentials saved to ${getAuthPath()}`);\n      if (selectionError) {\n        this.showError(selectionError);\n      } else {\n        void this.maybeWarnAboutAnthropicSubscriptionAuth();\n      }\n    }\n\n  };\n\nInteractiveModeBase.prototype.showBedrockSetupDialog = function(this: InteractiveModeBase, providerId: string, providerName: string): void {\n    const restoreEditor = () => {\n      this.editorContainer.clear();\n      this.editorContainer.addChild(this.editor);\n      this.ui.setFocus(this.editor);\n      this.ui.requestRender();\n    };\n\n    const dialog = new LoginDialogComponent(\n      this.ui,\n      providerId,\n      () => restoreEditor(),\n      providerName,\n      \"Amazon Bedrock setup\",\n    );\n    dialog.showInfo([\n      theme.fg(\n        \"text\",\n        \"Amazon Bedrock uses AWS credentials instead of a single API key.\",\n      ),\n      theme.fg(\n        \"text\",\n        \"Configure an AWS profile, IAM keys, bearer token, or role-based credentials.\",\n      ),\n      theme.fg(\"muted\", \"See:\"),\n      theme.fg(\"accent\", `  ${path.join(getDocsPath(), \"providers.md\")}`),\n    ]);\n\n    this.editorContainer.clear();\n    this.editorContainer.addChild(dialog);\n    this.ui.setFocus(dialog);\n    this.ui.requestRender();\n  };\n\nInteractiveModeBase.prototype.showApiKeyLoginDialog = async function(this: InteractiveModeBase, providerId: string, providerName: string): Promise<void> {\n    const previousModel = this.session.model;\n\n    const dialog = new LoginDialogComponent(\n      this.ui,\n      providerId,\n      (_success, _message) => {\n        // Completion handled below\n      },\n      providerName,\n    );\n\n    this.editorContainer.clear();\n    this.editorContainer.addChild(dialog);\n    this.ui.setFocus(dialog);\n    this.ui.requestRender();\n\n    const restoreEditor = () => {\n      this.editorContainer.clear();\n      this.editorContainer.addChild(this.editor);\n      this.ui.setFocus(this.editor);\n      this.ui.requestRender();\n    };\n\n    try {\n      const apiKey = (await dialog.showPrompt(\"Enter API key:\")).trim();\n      if (!apiKey) {\n        throw new Error(\"API key cannot be empty.\");\n      }\n\n      this.session.modelRegistry.authStorage.set(providerId, {\n        type: \"api_key\",\n        key: apiKey,\n      });\n\n      restoreEditor();\n      await this.completeProviderAuthentication(\n        providerId,\n        providerName,\n        \"api_key\",\n        previousModel,\n      );\n    } catch (error: unknown) {\n      restoreEditor();\n      const errorMsg = error instanceof Error ? error.message : String(error);\n      if (errorMsg !== \"Login cancelled\") {\n        this.showError(\n          `Failed to save API key for ${providerName}: ${errorMsg}`,\n        );\n      }\n    }\n  };\n\nInteractiveModeBase.prototype.showOAuthLoginSelect = function(this: InteractiveModeBase, dialog: LoginDialogComponent, prompt: OAuthSelectPrompt): Promise<string | undefined> {\n    return new Promise((resolve) => {\n      const restoreDialog = () => {\n        this.editorContainer.clear();\n        this.editorContainer.addChild(dialog);\n        this.ui.setFocus(dialog);\n        this.ui.requestRender();\n      };\n      const labels = prompt.options.map((option) => option.label);\n      const selector = new ExtensionSelectorComponent(\n        prompt.message,\n        labels,\n        (optionLabel) => {\n          restoreDialog();\n          resolve(\n            prompt.options.find((option) => option.label === optionLabel)?.id,\n          );\n        },\n        () => {\n          restoreDialog();\n          resolve(undefined);\n        },\n      );\n      this.editorContainer.clear();\n      this.editorContainer.addChild(selector);\n      this.ui.setFocus(selector);\n      this.ui.requestRender();\n    });\n  };\n\nInteractiveModeBase.prototype.showLoginDialog = async function(this: InteractiveModeBase, providerId: string, providerName: string): Promise<void> {\n    const providerInfo = this.session.modelRegistry.authStorage\n      .getOAuthProviders()\n      .find((provider) => provider.id === providerId);\n    const previousModel = this.session.model;\n\n    // Providers that use callback servers (can paste redirect URL)\n    const usesCallbackServer = providerInfo?.usesCallbackServer ?? false;\n\n    // Create login dialog component\n    const dialog = new LoginDialogComponent(\n      this.ui,\n      providerId,\n      (_success, _message) => {\n        // Completion handled below\n      },\n      providerName,\n    );\n\n    // Show dialog in editor container\n    this.editorContainer.clear();\n    this.editorContainer.addChild(dialog);\n    this.ui.setFocus(dialog);\n    this.ui.requestRender();\n\n    // Promise for manual code input (racing with callback server)\n    let manualCodeResolve: ((code: string) => void) | undefined;\n    let manualCodeReject: ((err: Error) => void) | undefined;\n    const manualCodePromise = new Promise<string>((resolve, reject) => {\n      manualCodeResolve = resolve;\n      manualCodeReject = reject;\n    });\n\n    // Restore editor helper\n    const restoreEditor = () => {\n      this.editorContainer.clear();\n      this.editorContainer.addChild(this.editor);\n      this.ui.setFocus(this.editor);\n      this.ui.requestRender();\n    };\n\n    try {\n      await this.session.modelRegistry.authStorage.login(\n        providerId as OAuthProviderId,\n        {\n          onAuth: (info: { url: string; instructions?: string }) => {\n            dialog.showAuth(info.url, info.instructions, {\n              showCancelHint: !usesCallbackServer,\n            });\n\n            if (usesCallbackServer) {\n              // Show input for manual paste, racing with callback\n              dialog\n                .showManualInput(\n                  \"Paste redirect URL below, or complete login in browser:\",\n                )\n                .then((value) => {\n                  if (value && manualCodeResolve) {\n                    manualCodeResolve(value);\n                    manualCodeResolve = undefined;\n                  }\n                })\n                .catch(() => {\n                  if (manualCodeReject) {\n                    manualCodeReject(new Error(\"Login cancelled\"));\n                    manualCodeReject = undefined;\n                  }\n                });\n            }\n            // For Anthropic: onPrompt is called immediately after\n          },\n\n          onDeviceCode: (info) => {\n            dialog.showDeviceCode(info);\n            dialog.showWaiting(\"Waiting for authentication...\");\n          },\n\n          onPrompt: async (prompt: {\n            message: string;\n            placeholder?: string;\n          }) => {\n            return dialog.showPrompt(prompt.message, prompt.placeholder);\n          },\n\n          onProgress: (message: string) => {\n            dialog.showProgress(message);\n          },\n\n          onSelect: (prompt: OAuthSelectPrompt) =>\n            this.showOAuthLoginSelect(dialog, prompt),\n\n          onManualCodeInput: () => manualCodePromise,\n\n          signal: dialog.signal,\n        },\n      );\n\n      // Success\n      restoreEditor();\n      await this.completeProviderAuthentication(\n        providerId,\n        providerName,\n        \"oauth\",\n        previousModel,\n      );\n    } catch (error: unknown) {\n      restoreEditor();\n      const errorMsg = error instanceof Error ? error.message : String(error);\n      if (errorMsg !== \"Login cancelled\") {\n        this.showError(`Failed to login to ${providerName}: ${errorMsg}`);\n      }\n    }\n  };\n"]}

package/dist/modes/interactive/interactive-auth-login.js

@@ -53,7 +53,6 @@ InteractiveModeBase.prototype.completeProviderAuthentication = async function (p
             void this.maybeWarnAboutAnthropicSubscriptionAuth();
         }
     }
-    await this.resumePendingFirstRunOnboardingSeed();
 };
 InteractiveModeBase.prototype.showBedrockSetupDialog = function (providerId, providerName) {
     const restoreEditor = () => {

package/dist/modes/interactive/interactive-auth-login.js.map

@@ -1 +1 @@
-{"version":3,"file":"interactive-auth-login.js","sourceRoot":"","sources":["../../../src/modes/interactive/interactive-auth-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAsE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AAClO,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAExF,mBAAmB,CAAC,SAAS,CAAC,8BAA8B,GAAG,KAAK,WAAqC,UAAkB,EAAE,YAAoB,EAAE,QAA6B,EAAE,aAAqC;IACnN,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;IAErC,MAAM,WAAW,GACf,QAAQ,KAAK,OAAO;QAClB,CAAC,CAAC,gBAAgB,YAAY,EAAE;QAChC,CAAC,CAAC,qBAAqB,YAAY,EAAE,CAAC;IAE1C,IAAI,aAAqC,CAAC;IAC1C,IAAI,cAAkC,CAAC;IACvC,IAAI,cAAc,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;QAClE,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,CAC3C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,UAAU,CACzC,CAAC;QACF,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,EAAE,CAAC;YACzC,cAAc,GAAG,GAAG,WAAW,sDAAsD,UAAU,kCAAkC,CAAC;QACpI,CAAC;aAAM,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,cAAc,GAAG,GAAG,WAAW,gFAAgF,CAAC;QAClH,CAAC;aAAM,CAAC;YACN,MAAM,cAAc,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;YAC3D,aAAa,GAAG,cAAc,CAAC,IAAI,CACjC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,cAAc,CACvC,CAAC;YACF,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,cAAc,GAAG,GAAG,WAAW,4BAA4B,cAAc,mDAAmD,CAAC;YAC/H,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;gBAC7C,CAAC;gBAAC,OAAO,KAAc,EAAE,CAAC;oBACxB,aAAa,GAAG,SAAS,CAAC;oBAC1B,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACzD,cAAc,GAAG,GAAG,WAAW,6CAA6C,YAAY,iCAAiC,CAAC;gBAC5H,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,4BAA4B,EAAE,CAAC;IAC1C,IAAI,CAAC,yBAAyB,EAAE,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IACzB,IAAI,CAAC,uBAAuB,EAAE,CAAC;IAC/B,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC,UAAU,CACb,GAAG,WAAW,cAAc,aAAa,CAAC,EAAE,0BAA0B,WAAW,EAAE,EAAE,CACtF,CAAC;QACF,KAAK,IAAI,CAAC,uCAAuC,CAAC,aAAa,CAAC,CAAC;QACjE,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,UAAU,CAAC,GAAG,WAAW,0BAA0B,WAAW,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,KAAK,IAAI,CAAC,uCAAuC,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,mCAAmC,EAAE,CAAC;AACnD,CAAC,CAAC;AAEJ,mBAAmB,CAAC,SAAS,CAAC,sBAAsB,GAAG,UAAoC,UAAkB,EAAE,YAAoB;IAC/H,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;IAC1B,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,oBAAoB,CACrC,IAAI,CAAC,EAAE,EACP,UAAU,EACV,GAAG,EAAE,CAAC,aAAa,EAAE,EACrB,YAAY,EACZ,sBAAsB,CACvB,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC;QACd,KAAK,CAAC,EAAE,CACN,MAAM,EACN,kEAAkE,CACnE;QACD,KAAK,CAAC,EAAE,CACN,MAAM,EACN,8EAA8E,CAC/E;QACD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,cAAc,CAAC,EAAE,CAAC;KACpE,CAAC,CAAC;IAEH,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC7B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;AAC1B,CAAC,CAAC;AAEJ,mBAAmB,CAAC,SAAS,CAAC,qBAAqB,GAAG,KAAK,WAAqC,UAAkB,EAAE,YAAoB;IACpI,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;IAEzC,MAAM,MAAM,GAAG,IAAI,oBAAoB,CACrC,IAAI,CAAC,EAAE,EACP,UAAU,EACV,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;QACrB,2BAA2B;IAC7B,CAAC,EACD,YAAY,CACb,CAAC;IAEF,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC7B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;IAExB,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;IAC1B,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE;YACrD,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,MAAM;SACZ,CAAC,CAAC;QAEH,aAAa,EAAE,CAAC;QAChB,MAAM,IAAI,CAAC,8BAA8B,CACvC,UAAU,EACV,YAAY,EACZ,SAAS,EACT,aAAa,CACd,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,aAAa,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,CACZ,8BAA8B,YAAY,KAAK,QAAQ,EAAE,CAC1D,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEJ,mBAAmB,CAAC,SAAS,CAAC,oBAAoB,GAAG,UAAoC,MAA4B,EAAE,MAAyB;IAC5I,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,aAAa,GAAG,GAAG,EAAE;YACzB,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzB,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;QAC1B,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAI,0BAA0B,CAC7C,MAAM,CAAC,OAAO,EACd,MAAM,EACN,CAAC,WAAW,EAAE,EAAE;YACd,aAAa,EAAE,CAAC;YAChB,OAAO,CACL,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,WAAW,CAAC,EAAE,EAAE,CAClE,CAAC;QACJ,CAAC,EACD,GAAG,EAAE;YACH,aAAa,EAAE,CAAC;YAChB,OAAO,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC,CACF,CAAC;QACF,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3B,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEJ,mBAAmB,CAAC,SAAS,CAAC,eAAe,GAAG,KAAK,WAAqC,UAAkB,EAAE,YAAoB;IAC9H,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW;SACxD,iBAAiB,EAAE;SACnB,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;IAEzC,+DAA+D;IAC/D,MAAM,kBAAkB,GAAG,YAAY,EAAE,kBAAkB,IAAI,KAAK,CAAC;IAErE,gCAAgC;IAChC,MAAM,MAAM,GAAG,IAAI,oBAAoB,CACrC,IAAI,CAAC,EAAE,EACP,UAAU,EACV,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;QACrB,2BAA2B;IAC7B,CAAC,EACD,YAAY,CACb,CAAC;IAEF,kCAAkC;IAClC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC7B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;IAExB,8DAA8D;IAC9D,IAAI,iBAAuD,CAAC;IAC5D,IAAI,gBAAoD,CAAC;IACzD,MAAM,iBAAiB,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAChE,iBAAiB,GAAG,OAAO,CAAC;QAC5B,gBAAgB,GAAG,MAAM,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,wBAAwB;IACxB,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;IAC1B,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,CAChD,UAA6B,EAC7B;YACE,MAAM,EAAE,CAAC,IAA4C,EAAE,EAAE;gBACvD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE;oBAC3C,cAAc,EAAE,CAAC,kBAAkB;iBACpC,CAAC,CAAC;gBAEH,IAAI,kBAAkB,EAAE,CAAC;oBACvB,oDAAoD;oBACpD,MAAM;yBACH,eAAe,CACd,yDAAyD,CAC1D;yBACA,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;wBACd,IAAI,KAAK,IAAI,iBAAiB,EAAE,CAAC;4BAC/B,iBAAiB,CAAC,KAAK,CAAC,CAAC;4BACzB,iBAAiB,GAAG,SAAS,CAAC;wBAChC,CAAC;oBACH,CAAC,CAAC;yBACD,KAAK,CAAC,GAAG,EAAE;wBACV,IAAI,gBAAgB,EAAE,CAAC;4BACrB,gBAAgB,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;4BAC/C,gBAAgB,GAAG,SAAS,CAAC;wBAC/B,CAAC;oBACH,CAAC,CAAC,CAAC;gBACP,CAAC;gBACD,sDAAsD;YACxD,CAAC;YAED,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE;gBACrB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;gBAC5B,MAAM,CAAC,WAAW,CAAC,+BAA+B,CAAC,CAAC;YACtD,CAAC;YAED,QAAQ,EAAE,KAAK,EAAE,MAGhB,EAAE,EAAE;gBACH,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YAC/D,CAAC;YAED,UAAU,EAAE,CAAC,OAAe,EAAE,EAAE;gBAC9B,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;YAED,QAAQ,EAAE,CAAC,MAAyB,EAAE,EAAE,CACtC,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC;YAE3C,iBAAiB,EAAE,GAAG,EAAE,CAAC,iBAAiB;YAE1C,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CACF,CAAC;QAEF,UAAU;QACV,aAAa,EAAE,CAAC;QAChB,MAAM,IAAI,CAAC,8BAA8B,CACvC,UAAU,EACV,YAAY,EACZ,OAAO,EACP,aAAa,CACd,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,aAAa,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,sBAAsB,YAAY,KAAK,QAAQ,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;AACH,CAAC,CAAC","sourcesContent":["import { InteractiveModeBase } from \"./interactive-mode-base.ts\";\nimport { type Api, type Model, type OAuthProviderId, type OAuthSelectPrompt, path, getAuthPath, getDocsPath, defaultModelPerProvider, ExtensionSelectorComponent, LoginDialogComponent, theme } from \"./interactive-mode-deps.ts\";\nimport { hasDefaultModelProvider, isUnknownModel } from \"./interactive-mode-helpers.ts\";\n\nInteractiveModeBase.prototype.completeProviderAuthentication = async function(this: InteractiveModeBase, providerId: string, providerName: string, authType: \"oauth\" | \"api_key\", previousModel: Model<Api> | undefined): Promise<void> {\n    this.session.modelRegistry.refresh();\n\n    const actionLabel =\n      authType === \"oauth\"\n        ? `Logged in to ${providerName}`\n        : `Saved API key for ${providerName}`;\n\n    let selectedModel: Model<Api> | undefined;\n    let selectionError: string | undefined;\n    if (isUnknownModel(previousModel)) {\n      const availableModels = this.session.modelRegistry.getAvailable();\n      const providerModels = availableModels.filter(\n        (model) => model.provider === providerId,\n      );\n      if (!hasDefaultModelProvider(providerId)) {\n        selectionError = `${actionLabel}, but no default model is configured for provider \"${providerId}\". Use /model to select a model.`;\n      } else if (providerModels.length === 0) {\n        selectionError = `${actionLabel}, but no models are available for that provider. Use /model to select a model.`;\n      } else {\n        const defaultModelId = defaultModelPerProvider[providerId];\n        selectedModel = providerModels.find(\n          (model) => model.id === defaultModelId,\n        );\n        if (!selectedModel) {\n          selectionError = `${actionLabel}, but its default model \"${defaultModelId}\" is not available. Use /model to select a model.`;\n        } else {\n          try {\n            await this.session.setModel(selectedModel);\n          } catch (error: unknown) {\n            selectedModel = undefined;\n            const errorMessage =\n              error instanceof Error ? error.message : String(error);\n            selectionError = `${actionLabel}, but selecting its default model failed: ${errorMessage}. Use /model to select a model.`;\n          }\n        }\n      }\n    }\n\n    await this.updateAvailableProviderCount();\n    this.setupAutocompleteProvider();\n    this.footer.invalidate();\n    this.updateEditorBorderColor();\n    if (selectedModel) {\n      this.showStatus(\n        `${actionLabel}. Selected ${selectedModel.id}. Credentials saved to ${getAuthPath()}`,\n      );\n      void this.maybeWarnAboutAnthropicSubscriptionAuth(selectedModel);\n      this.checkDaxnutsEasterEgg(selectedModel);\n    } else {\n      this.showStatus(`${actionLabel}. Credentials saved to ${getAuthPath()}`);\n      if (selectionError) {\n        this.showError(selectionError);\n      } else {\n        void this.maybeWarnAboutAnthropicSubscriptionAuth();\n      }\n    }\n\n    await this.resumePendingFirstRunOnboardingSeed();\n  };\n\nInteractiveModeBase.prototype.showBedrockSetupDialog = function(this: InteractiveModeBase, providerId: string, providerName: string): void {\n    const restoreEditor = () => {\n      this.editorContainer.clear();\n      this.editorContainer.addChild(this.editor);\n      this.ui.setFocus(this.editor);\n      this.ui.requestRender();\n    };\n\n    const dialog = new LoginDialogComponent(\n      this.ui,\n      providerId,\n      () => restoreEditor(),\n      providerName,\n      \"Amazon Bedrock setup\",\n    );\n    dialog.showInfo([\n      theme.fg(\n        \"text\",\n        \"Amazon Bedrock uses AWS credentials instead of a single API key.\",\n      ),\n      theme.fg(\n        \"text\",\n        \"Configure an AWS profile, IAM keys, bearer token, or role-based credentials.\",\n      ),\n      theme.fg(\"muted\", \"See:\"),\n      theme.fg(\"accent\", `  ${path.join(getDocsPath(), \"providers.md\")}`),\n    ]);\n\n    this.editorContainer.clear();\n    this.editorContainer.addChild(dialog);\n    this.ui.setFocus(dialog);\n    this.ui.requestRender();\n  };\n\nInteractiveModeBase.prototype.showApiKeyLoginDialog = async function(this: InteractiveModeBase, providerId: string, providerName: string): Promise<void> {\n    const previousModel = this.session.model;\n\n    const dialog = new LoginDialogComponent(\n      this.ui,\n      providerId,\n      (_success, _message) => {\n        // Completion handled below\n      },\n      providerName,\n    );\n\n    this.editorContainer.clear();\n    this.editorContainer.addChild(dialog);\n    this.ui.setFocus(dialog);\n    this.ui.requestRender();\n\n    const restoreEditor = () => {\n      this.editorContainer.clear();\n      this.editorContainer.addChild(this.editor);\n      this.ui.setFocus(this.editor);\n      this.ui.requestRender();\n    };\n\n    try {\n      const apiKey = (await dialog.showPrompt(\"Enter API key:\")).trim();\n      if (!apiKey) {\n        throw new Error(\"API key cannot be empty.\");\n      }\n\n      this.session.modelRegistry.authStorage.set(providerId, {\n        type: \"api_key\",\n        key: apiKey,\n      });\n\n      restoreEditor();\n      await this.completeProviderAuthentication(\n        providerId,\n        providerName,\n        \"api_key\",\n        previousModel,\n      );\n    } catch (error: unknown) {\n      restoreEditor();\n      const errorMsg = error instanceof Error ? error.message : String(error);\n      if (errorMsg !== \"Login cancelled\") {\n        this.showError(\n          `Failed to save API key for ${providerName}: ${errorMsg}`,\n        );\n      }\n    }\n  };\n\nInteractiveModeBase.prototype.showOAuthLoginSelect = function(this: InteractiveModeBase, dialog: LoginDialogComponent, prompt: OAuthSelectPrompt): Promise<string | undefined> {\n    return new Promise((resolve) => {\n      const restoreDialog = () => {\n        this.editorContainer.clear();\n        this.editorContainer.addChild(dialog);\n        this.ui.setFocus(dialog);\n        this.ui.requestRender();\n      };\n      const labels = prompt.options.map((option) => option.label);\n      const selector = new ExtensionSelectorComponent(\n        prompt.message,\n        labels,\n        (optionLabel) => {\n          restoreDialog();\n          resolve(\n            prompt.options.find((option) => option.label === optionLabel)?.id,\n          );\n        },\n        () => {\n          restoreDialog();\n          resolve(undefined);\n        },\n      );\n      this.editorContainer.clear();\n      this.editorContainer.addChild(selector);\n      this.ui.setFocus(selector);\n      this.ui.requestRender();\n    });\n  };\n\nInteractiveModeBase.prototype.showLoginDialog = async function(this: InteractiveModeBase, providerId: string, providerName: string): Promise<void> {\n    const providerInfo = this.session.modelRegistry.authStorage\n      .getOAuthProviders()\n      .find((provider) => provider.id === providerId);\n    const previousModel = this.session.model;\n\n    // Providers that use callback servers (can paste redirect URL)\n    const usesCallbackServer = providerInfo?.usesCallbackServer ?? false;\n\n    // Create login dialog component\n    const dialog = new LoginDialogComponent(\n      this.ui,\n      providerId,\n      (_success, _message) => {\n        // Completion handled below\n      },\n      providerName,\n    );\n\n    // Show dialog in editor container\n    this.editorContainer.clear();\n    this.editorContainer.addChild(dialog);\n    this.ui.setFocus(dialog);\n    this.ui.requestRender();\n\n    // Promise for manual code input (racing with callback server)\n    let manualCodeResolve: ((code: string) => void) | undefined;\n    let manualCodeReject: ((err: Error) => void) | undefined;\n    const manualCodePromise = new Promise<string>((resolve, reject) => {\n      manualCodeResolve = resolve;\n      manualCodeReject = reject;\n    });\n\n    // Restore editor helper\n    const restoreEditor = () => {\n      this.editorContainer.clear();\n      this.editorContainer.addChild(this.editor);\n      this.ui.setFocus(this.editor);\n      this.ui.requestRender();\n    };\n\n    try {\n      await this.session.modelRegistry.authStorage.login(\n        providerId as OAuthProviderId,\n        {\n          onAuth: (info: { url: string; instructions?: string }) => {\n            dialog.showAuth(info.url, info.instructions, {\n              showCancelHint: !usesCallbackServer,\n            });\n\n            if (usesCallbackServer) {\n              // Show input for manual paste, racing with callback\n              dialog\n                .showManualInput(\n                  \"Paste redirect URL below, or complete login in browser:\",\n                )\n                .then((value) => {\n                  if (value && manualCodeResolve) {\n                    manualCodeResolve(value);\n                    manualCodeResolve = undefined;\n                  }\n                })\n                .catch(() => {\n                  if (manualCodeReject) {\n                    manualCodeReject(new Error(\"Login cancelled\"));\n                    manualCodeReject = undefined;\n                  }\n                });\n            }\n            // For Anthropic: onPrompt is called immediately after\n          },\n\n          onDeviceCode: (info) => {\n            dialog.showDeviceCode(info);\n            dialog.showWaiting(\"Waiting for authentication...\");\n          },\n\n          onPrompt: async (prompt: {\n            message: string;\n            placeholder?: string;\n          }) => {\n            return dialog.showPrompt(prompt.message, prompt.placeholder);\n          },\n\n          onProgress: (message: string) => {\n            dialog.showProgress(message);\n          },\n\n          onSelect: (prompt: OAuthSelectPrompt) =>\n            this.showOAuthLoginSelect(dialog, prompt),\n\n          onManualCodeInput: () => manualCodePromise,\n\n          signal: dialog.signal,\n        },\n      );\n\n      // Success\n      restoreEditor();\n      await this.completeProviderAuthentication(\n        providerId,\n        providerName,\n        \"oauth\",\n        previousModel,\n      );\n    } catch (error: unknown) {\n      restoreEditor();\n      const errorMsg = error instanceof Error ? error.message : String(error);\n      if (errorMsg !== \"Login cancelled\") {\n        this.showError(`Failed to login to ${providerName}: ${errorMsg}`);\n      }\n    }\n  };\n"]}
+{"version":3,"file":"interactive-auth-login.js","sourceRoot":"","sources":["../../../src/modes/interactive/interactive-auth-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAsE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AAClO,OAAO,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAExF,mBAAmB,CAAC,SAAS,CAAC,8BAA8B,GAAG,KAAK,WAAqC,UAAkB,EAAE,YAAoB,EAAE,QAA6B,EAAE,aAAqC;IACnN,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;IAErC,MAAM,WAAW,GACf,QAAQ,KAAK,OAAO;QAClB,CAAC,CAAC,gBAAgB,YAAY,EAAE;QAChC,CAAC,CAAC,qBAAqB,YAAY,EAAE,CAAC;IAE1C,IAAI,aAAqC,CAAC;IAC1C,IAAI,cAAkC,CAAC;IACvC,IAAI,cAAc,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;QAClE,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,CAC3C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,UAAU,CACzC,CAAC;QACF,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC,EAAE,CAAC;YACzC,cAAc,GAAG,GAAG,WAAW,sDAAsD,UAAU,kCAAkC,CAAC;QACpI,CAAC;aAAM,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,cAAc,GAAG,GAAG,WAAW,gFAAgF,CAAC;QAClH,CAAC;aAAM,CAAC;YACN,MAAM,cAAc,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;YAC3D,aAAa,GAAG,cAAc,CAAC,IAAI,CACjC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,cAAc,CACvC,CAAC;YACF,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,cAAc,GAAG,GAAG,WAAW,4BAA4B,cAAc,mDAAmD,CAAC;YAC/H,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;gBAC7C,CAAC;gBAAC,OAAO,KAAc,EAAE,CAAC;oBACxB,aAAa,GAAG,SAAS,CAAC;oBAC1B,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACzD,cAAc,GAAG,GAAG,WAAW,6CAA6C,YAAY,iCAAiC,CAAC;gBAC5H,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,4BAA4B,EAAE,CAAC;IAC1C,IAAI,CAAC,yBAAyB,EAAE,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IACzB,IAAI,CAAC,uBAAuB,EAAE,CAAC;IAC/B,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC,UAAU,CACb,GAAG,WAAW,cAAc,aAAa,CAAC,EAAE,0BAA0B,WAAW,EAAE,EAAE,CACtF,CAAC;QACF,KAAK,IAAI,CAAC,uCAAuC,CAAC,aAAa,CAAC,CAAC;QACjE,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,UAAU,CAAC,GAAG,WAAW,0BAA0B,WAAW,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,KAAK,IAAI,CAAC,uCAAuC,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;AAEH,CAAC,CAAC;AAEJ,mBAAmB,CAAC,SAAS,CAAC,sBAAsB,GAAG,UAAoC,UAAkB,EAAE,YAAoB;IAC/H,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;IAC1B,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,oBAAoB,CACrC,IAAI,CAAC,EAAE,EACP,UAAU,EACV,GAAG,EAAE,CAAC,aAAa,EAAE,EACrB,YAAY,EACZ,sBAAsB,CACvB,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC;QACd,KAAK,CAAC,EAAE,CACN,MAAM,EACN,kEAAkE,CACnE;QACD,KAAK,CAAC,EAAE,CACN,MAAM,EACN,8EAA8E,CAC/E;QACD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,cAAc,CAAC,EAAE,CAAC;KACpE,CAAC,CAAC;IAEH,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC7B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;AAC1B,CAAC,CAAC;AAEJ,mBAAmB,CAAC,SAAS,CAAC,qBAAqB,GAAG,KAAK,WAAqC,UAAkB,EAAE,YAAoB;IACpI,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;IAEzC,MAAM,MAAM,GAAG,IAAI,oBAAoB,CACrC,IAAI,CAAC,EAAE,EACP,UAAU,EACV,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;QACrB,2BAA2B;IAC7B,CAAC,EACD,YAAY,CACb,CAAC;IAEF,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC7B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;IAExB,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;IAC1B,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE;YACrD,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,MAAM;SACZ,CAAC,CAAC;QAEH,aAAa,EAAE,CAAC;QAChB,MAAM,IAAI,CAAC,8BAA8B,CACvC,UAAU,EACV,YAAY,EACZ,SAAS,EACT,aAAa,CACd,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,aAAa,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,CACZ,8BAA8B,YAAY,KAAK,QAAQ,EAAE,CAC1D,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEJ,mBAAmB,CAAC,SAAS,CAAC,oBAAoB,GAAG,UAAoC,MAA4B,EAAE,MAAyB;IAC5I,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,aAAa,GAAG,GAAG,EAAE;YACzB,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzB,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;QAC1B,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAI,0BAA0B,CAC7C,MAAM,CAAC,OAAO,EACd,MAAM,EACN,CAAC,WAAW,EAAE,EAAE;YACd,aAAa,EAAE,CAAC;YAChB,OAAO,CACL,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,WAAW,CAAC,EAAE,EAAE,CAClE,CAAC;QACJ,CAAC,EACD,GAAG,EAAE;YACH,aAAa,EAAE,CAAC;YAChB,OAAO,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC,CACF,CAAC;QACF,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3B,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEJ,mBAAmB,CAAC,SAAS,CAAC,eAAe,GAAG,KAAK,WAAqC,UAAkB,EAAE,YAAoB;IAC9H,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW;SACxD,iBAAiB,EAAE;SACnB,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;IAEzC,+DAA+D;IAC/D,MAAM,kBAAkB,GAAG,YAAY,EAAE,kBAAkB,IAAI,KAAK,CAAC;IAErE,gCAAgC;IAChC,MAAM,MAAM,GAAG,IAAI,oBAAoB,CACrC,IAAI,CAAC,EAAE,EACP,UAAU,EACV,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;QACrB,2BAA2B;IAC7B,CAAC,EACD,YAAY,CACb,CAAC;IAEF,kCAAkC;IAClC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC7B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;IAExB,8DAA8D;IAC9D,IAAI,iBAAuD,CAAC;IAC5D,IAAI,gBAAoD,CAAC;IACzD,MAAM,iBAAiB,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAChE,iBAAiB,GAAG,OAAO,CAAC;QAC5B,gBAAgB,GAAG,MAAM,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,wBAAwB;IACxB,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC;IAC1B,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,CAChD,UAA6B,EAC7B;YACE,MAAM,EAAE,CAAC,IAA4C,EAAE,EAAE;gBACvD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE;oBAC3C,cAAc,EAAE,CAAC,kBAAkB;iBACpC,CAAC,CAAC;gBAEH,IAAI,kBAAkB,EAAE,CAAC;oBACvB,oDAAoD;oBACpD,MAAM;yBACH,eAAe,CACd,yDAAyD,CAC1D;yBACA,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;wBACd,IAAI,KAAK,IAAI,iBAAiB,EAAE,CAAC;4BAC/B,iBAAiB,CAAC,KAAK,CAAC,CAAC;4BACzB,iBAAiB,GAAG,SAAS,CAAC;wBAChC,CAAC;oBACH,CAAC,CAAC;yBACD,KAAK,CAAC,GAAG,EAAE;wBACV,IAAI,gBAAgB,EAAE,CAAC;4BACrB,gBAAgB,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;4BAC/C,gBAAgB,GAAG,SAAS,CAAC;wBAC/B,CAAC;oBACH,CAAC,CAAC,CAAC;gBACP,CAAC;gBACD,sDAAsD;YACxD,CAAC;YAED,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE;gBACrB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;gBAC5B,MAAM,CAAC,WAAW,CAAC,+BAA+B,CAAC,CAAC;YACtD,CAAC;YAED,QAAQ,EAAE,KAAK,EAAE,MAGhB,EAAE,EAAE;gBACH,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YAC/D,CAAC;YAED,UAAU,EAAE,CAAC,OAAe,EAAE,EAAE;gBAC9B,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;YAED,QAAQ,EAAE,CAAC,MAAyB,EAAE,EAAE,CACtC,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC;YAE3C,iBAAiB,EAAE,GAAG,EAAE,CAAC,iBAAiB;YAE1C,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CACF,CAAC;QAEF,UAAU;QACV,aAAa,EAAE,CAAC;QAChB,MAAM,IAAI,CAAC,8BAA8B,CACvC,UAAU,EACV,YAAY,EACZ,OAAO,EACP,aAAa,CACd,CAAC;IACJ,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,aAAa,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,QAAQ,KAAK,iBAAiB,EAAE,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,sBAAsB,YAAY,KAAK,QAAQ,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;AACH,CAAC,CAAC","sourcesContent":["import { InteractiveModeBase } from \"./interactive-mode-base.ts\";\nimport { type Api, type Model, type OAuthProviderId, type OAuthSelectPrompt, path, getAuthPath, getDocsPath, defaultModelPerProvider, ExtensionSelectorComponent, LoginDialogComponent, theme } from \"./interactive-mode-deps.ts\";\nimport { hasDefaultModelProvider, isUnknownModel } from \"./interactive-mode-helpers.ts\";\n\nInteractiveModeBase.prototype.completeProviderAuthentication = async function(this: InteractiveModeBase, providerId: string, providerName: string, authType: \"oauth\" | \"api_key\", previousModel: Model<Api> | undefined): Promise<void> {\n    this.session.modelRegistry.refresh();\n\n    const actionLabel =\n      authType === \"oauth\"\n        ? `Logged in to ${providerName}`\n        : `Saved API key for ${providerName}`;\n\n    let selectedModel: Model<Api> | undefined;\n    let selectionError: string | undefined;\n    if (isUnknownModel(previousModel)) {\n      const availableModels = this.session.modelRegistry.getAvailable();\n      const providerModels = availableModels.filter(\n        (model) => model.provider === providerId,\n      );\n      if (!hasDefaultModelProvider(providerId)) {\n        selectionError = `${actionLabel}, but no default model is configured for provider \"${providerId}\". Use /model to select a model.`;\n      } else if (providerModels.length === 0) {\n        selectionError = `${actionLabel}, but no models are available for that provider. Use /model to select a model.`;\n      } else {\n        const defaultModelId = defaultModelPerProvider[providerId];\n        selectedModel = providerModels.find(\n          (model) => model.id === defaultModelId,\n        );\n        if (!selectedModel) {\n          selectionError = `${actionLabel}, but its default model \"${defaultModelId}\" is not available. Use /model to select a model.`;\n        } else {\n          try {\n            await this.session.setModel(selectedModel);\n          } catch (error: unknown) {\n            selectedModel = undefined;\n            const errorMessage =\n              error instanceof Error ? error.message : String(error);\n            selectionError = `${actionLabel}, but selecting its default model failed: ${errorMessage}. Use /model to select a model.`;\n          }\n        }\n      }\n    }\n\n    await this.updateAvailableProviderCount();\n    this.setupAutocompleteProvider();\n    this.footer.invalidate();\n    this.updateEditorBorderColor();\n    if (selectedModel) {\n      this.showStatus(\n        `${actionLabel}. Selected ${selectedModel.id}. Credentials saved to ${getAuthPath()}`,\n      );\n      void this.maybeWarnAboutAnthropicSubscriptionAuth(selectedModel);\n      this.checkDaxnutsEasterEgg(selectedModel);\n    } else {\n      this.showStatus(`${actionLabel}. Credentials saved to ${getAuthPath()}`);\n      if (selectionError) {\n        this.showError(selectionError);\n      } else {\n        void this.maybeWarnAboutAnthropicSubscriptionAuth();\n      }\n    }\n\n  };\n\nInteractiveModeBase.prototype.showBedrockSetupDialog = function(this: InteractiveModeBase, providerId: string, providerName: string): void {\n    const restoreEditor = () => {\n      this.editorContainer.clear();\n      this.editorContainer.addChild(this.editor);\n      this.ui.setFocus(this.editor);\n      this.ui.requestRender();\n    };\n\n    const dialog = new LoginDialogComponent(\n      this.ui,\n      providerId,\n      () => restoreEditor(),\n      providerName,\n      \"Amazon Bedrock setup\",\n    );\n    dialog.showInfo([\n      theme.fg(\n        \"text\",\n        \"Amazon Bedrock uses AWS credentials instead of a single API key.\",\n      ),\n      theme.fg(\n        \"text\",\n        \"Configure an AWS profile, IAM keys, bearer token, or role-based credentials.\",\n      ),\n      theme.fg(\"muted\", \"See:\"),\n      theme.fg(\"accent\", `  ${path.join(getDocsPath(), \"providers.md\")}`),\n    ]);\n\n    this.editorContainer.clear();\n    this.editorContainer.addChild(dialog);\n    this.ui.setFocus(dialog);\n    this.ui.requestRender();\n  };\n\nInteractiveModeBase.prototype.showApiKeyLoginDialog = async function(this: InteractiveModeBase, providerId: string, providerName: string): Promise<void> {\n    const previousModel = this.session.model;\n\n    const dialog = new LoginDialogComponent(\n      this.ui,\n      providerId,\n      (_success, _message) => {\n        // Completion handled below\n      },\n      providerName,\n    );\n\n    this.editorContainer.clear();\n    this.editorContainer.addChild(dialog);\n    this.ui.setFocus(dialog);\n    this.ui.requestRender();\n\n    const restoreEditor = () => {\n      this.editorContainer.clear();\n      this.editorContainer.addChild(this.editor);\n      this.ui.setFocus(this.editor);\n      this.ui.requestRender();\n    };\n\n    try {\n      const apiKey = (await dialog.showPrompt(\"Enter API key:\")).trim();\n      if (!apiKey) {\n        throw new Error(\"API key cannot be empty.\");\n      }\n\n      this.session.modelRegistry.authStorage.set(providerId, {\n        type: \"api_key\",\n        key: apiKey,\n      });\n\n      restoreEditor();\n      await this.completeProviderAuthentication(\n        providerId,\n        providerName,\n        \"api_key\",\n        previousModel,\n      );\n    } catch (error: unknown) {\n      restoreEditor();\n      const errorMsg = error instanceof Error ? error.message : String(error);\n      if (errorMsg !== \"Login cancelled\") {\n        this.showError(\n          `Failed to save API key for ${providerName}: ${errorMsg}`,\n        );\n      }\n    }\n  };\n\nInteractiveModeBase.prototype.showOAuthLoginSelect = function(this: InteractiveModeBase, dialog: LoginDialogComponent, prompt: OAuthSelectPrompt): Promise<string | undefined> {\n    return new Promise((resolve) => {\n      const restoreDialog = () => {\n        this.editorContainer.clear();\n        this.editorContainer.addChild(dialog);\n        this.ui.setFocus(dialog);\n        this.ui.requestRender();\n      };\n      const labels = prompt.options.map((option) => option.label);\n      const selector = new ExtensionSelectorComponent(\n        prompt.message,\n        labels,\n        (optionLabel) => {\n          restoreDialog();\n          resolve(\n            prompt.options.find((option) => option.label === optionLabel)?.id,\n          );\n        },\n        () => {\n          restoreDialog();\n          resolve(undefined);\n        },\n      );\n      this.editorContainer.clear();\n      this.editorContainer.addChild(selector);\n      this.ui.setFocus(selector);\n      this.ui.requestRender();\n    });\n  };\n\nInteractiveModeBase.prototype.showLoginDialog = async function(this: InteractiveModeBase, providerId: string, providerName: string): Promise<void> {\n    const providerInfo = this.session.modelRegistry.authStorage\n      .getOAuthProviders()\n      .find((provider) => provider.id === providerId);\n    const previousModel = this.session.model;\n\n    // Providers that use callback servers (can paste redirect URL)\n    const usesCallbackServer = providerInfo?.usesCallbackServer ?? false;\n\n    // Create login dialog component\n    const dialog = new LoginDialogComponent(\n      this.ui,\n      providerId,\n      (_success, _message) => {\n        // Completion handled below\n      },\n      providerName,\n    );\n\n    // Show dialog in editor container\n    this.editorContainer.clear();\n    this.editorContainer.addChild(dialog);\n    this.ui.setFocus(dialog);\n    this.ui.requestRender();\n\n    // Promise for manual code input (racing with callback server)\n    let manualCodeResolve: ((code: string) => void) | undefined;\n    let manualCodeReject: ((err: Error) => void) | undefined;\n    const manualCodePromise = new Promise<string>((resolve, reject) => {\n      manualCodeResolve = resolve;\n      manualCodeReject = reject;\n    });\n\n    // Restore editor helper\n    const restoreEditor = () => {\n      this.editorContainer.clear();\n      this.editorContainer.addChild(this.editor);\n      this.ui.setFocus(this.editor);\n      this.ui.requestRender();\n    };\n\n    try {\n      await this.session.modelRegistry.authStorage.login(\n        providerId as OAuthProviderId,\n        {\n          onAuth: (info: { url: string; instructions?: string }) => {\n            dialog.showAuth(info.url, info.instructions, {\n              showCancelHint: !usesCallbackServer,\n            });\n\n            if (usesCallbackServer) {\n              // Show input for manual paste, racing with callback\n              dialog\n                .showManualInput(\n                  \"Paste redirect URL below, or complete login in browser:\",\n                )\n                .then((value) => {\n                  if (value && manualCodeResolve) {\n                    manualCodeResolve(value);\n                    manualCodeResolve = undefined;\n                  }\n                })\n                .catch(() => {\n                  if (manualCodeReject) {\n                    manualCodeReject(new Error(\"Login cancelled\"));\n                    manualCodeReject = undefined;\n                  }\n                });\n            }\n            // For Anthropic: onPrompt is called immediately after\n          },\n\n          onDeviceCode: (info) => {\n            dialog.showDeviceCode(info);\n            dialog.showWaiting(\"Waiting for authentication...\");\n          },\n\n          onPrompt: async (prompt: {\n            message: string;\n            placeholder?: string;\n          }) => {\n            return dialog.showPrompt(prompt.message, prompt.placeholder);\n          },\n\n          onProgress: (message: string) => {\n            dialog.showProgress(message);\n          },\n\n          onSelect: (prompt: OAuthSelectPrompt) =>\n            this.showOAuthLoginSelect(dialog, prompt),\n\n          onManualCodeInput: () => manualCodePromise,\n\n          signal: dialog.signal,\n        },\n      );\n\n      // Success\n      restoreEditor();\n      await this.completeProviderAuthentication(\n        providerId,\n        providerName,\n        \"oauth\",\n        previousModel,\n      );\n    } catch (error: unknown) {\n      restoreEditor();\n      const errorMsg = error instanceof Error ? error.message : String(error);\n      if (errorMsg !== \"Login cancelled\") {\n        this.showError(`Failed to login to ${providerName}: ${errorMsg}`);\n      }\n    }\n  };\n"]}