@goah/cli 0.13.1 → 0.13.3

package/dist/{chunk-X7UWW2PN.js → chunk-7E7V6OIU.js}

@@ -546,15 +546,15 @@ async function setupPi(current, interaction, scope = "full", setupAuthFile = def
   const model = selected === "__custom__" ? await interaction.input({ title: "Model ID", description: `Enter the model identifier accepted by ${providerId}.`, prompt: "Model", progress: { current: 3, total: 5 }, ...before?.provider === providerId ? { initial: before.model } : {} }) : selected;
   if (!model)
     return null;
-  if (scope === "model" && before?.provider === providerId)
-    return { ...before, model };
-  const config = { provider: providerId, model, thinking: before?.thinking ?? (providerId === "faux" ? "off" : "medium"), authFile: before?.authFile ?? setupAuthFile, authMode: providerId === "faux" || ["ollama", "lm-studio", "llama.cpp"].includes(providerId) ? "local" : "unconfigured" };
+  const config = scope === "model" && before?.provider === providerId ? { ...before, model, authFile: before.authFile ?? setupAuthFile } : { provider: providerId, model, thinking: before?.thinking ?? (providerId === "faux" ? "off" : "medium"), authFile: scope === "full" ? setupAuthFile : before?.authFile ?? setupAuthFile, authMode: providerId === "faux" || ["ollama", "lm-studio", "llama.cpp"].includes(providerId) ? "local" : "unconfigured" };
   const descriptor = providers.find((entry) => entry.id === provider);
   if (!descriptor.local && provider !== "faux") {
-    const existing = scope === "model" ? await new JsonCredentialStore(config.authFile).read(providerId) : null;
-    if (scope === "model")
-      config.authMode = existing?.type === "oauth" ? "oauth" : existing ? "stored-key" : "unconfigured";
-    else {
+    if (scope === "model") {
+      const authenticated = await requireAuthentication(config, descriptor, interaction, legacyCredential);
+      if (authenticated === "back")
+        return setupPi(current, interaction, scope, setupAuthFile);
+      Object.assign(config, authenticated);
+    } else {
       const auth = await configureAuthentication(providerId, descriptor, config.authFile, interaction, legacyCredential);
       if (auth === "back")
         return setupPi(current, interaction, scope, setupAuthFile);
@@ -620,6 +620,39 @@ async function configureAuthentication(provider, descriptor, authFile, interacti
   }
   return { authMode: "unconfigured" };
 }
+async function requireAuthentication(config, descriptor, interaction, legacyCredential = false) {
+  if (descriptor.local || config.provider === "faux" || ["ollama", "lm-studio", "llama.cpp"].includes(config.provider)) {
+    const local = { ...config, authMode: "local" };
+    delete local.apiKeyEnv;
+    return local;
+  }
+  const authFile = config.authFile ?? defaultAuthFile();
+  const stored = await new JsonCredentialStore(authFile).read(config.provider);
+  if (stored) {
+    const saved = { ...config, authFile, authMode: stored.type === "oauth" ? "oauth" : "stored-key" };
+    delete saved.apiKeyEnv;
+    return saved;
+  }
+  if (environmentAuthenticationAvailable(config))
+    return { ...config, authFile, authMode: "environment", apiKeyEnv: config.apiKeyEnv ?? defaultApiKeyEnv(config.provider) };
+  const auth = await configureAuthentication(config.provider, descriptor, authFile, interaction, legacyCredential, false, true);
+  if (auth === "back")
+    return "back";
+  const next = { ...config, ...auth, authFile };
+  if (auth.authMode !== "environment")
+    delete next.apiKeyEnv;
+  if (next.authMode === "environment" && !environmentAuthenticationAvailable(next))
+    throw new Error(`Environment variable ${next.apiKeyEnv ?? defaultApiKeyEnv(next.provider)} is not set. Set it first or choose \u201CPaste an API key\u201D.`);
+  return next;
+}
+function environmentAuthenticationAvailable(config) {
+  const key = config.api ? "GOAH_PI_API_KEY" : defaultApiKeyEnv(config.provider);
+  try {
+    return Boolean(resolveEnvSpec(piEnvironment(config), { root: process.cwd() })[key]);
+  } catch {
+    return false;
+  }
+}
 async function doctorPi(value, context) {
   const config = piConfig(value);
   const env = resolveEnvSpec(piEnvironment(config), { root: context?.root ?? process.cwd() });
@@ -688,7 +721,11 @@ async function runPiCommand(command, args, value, interaction) {
     const existing = provider === config.provider || provider === "faux" || ["ollama", "lm-studio", "llama.cpp"].includes(provider) ? void 0 : await new JsonCredentialStore(config.authFile ?? defaultAuthFile()).read(provider);
     const next = provider === config.provider ? { ...config, model } : { provider, model, thinking: config.thinking ?? (provider === "faux" ? "off" : "medium"), authFile: config.authFile ?? defaultAuthFile(), authMode: provider === "faux" || ["ollama", "lm-studio", "llama.cpp"].includes(provider) ? "local" : existing?.type === "oauth" ? "oauth" : existing ? "stored-key" : "unconfigured" };
     createPiModel(provider, model, piEnvironment(next));
-    return { config: next, output: [`Pi target changed to ${provider}/${model}`] };
+    const descriptor = providerCatalog().find((entry) => entry.id === provider) ?? { id: provider, name: provider, oauth: false, apiKey: true, local: false, modelCount: 0 };
+    const authenticated = await requireAuthentication(next, descriptor, interaction);
+    if (authenticated === "back")
+      return { output: ["No change."] };
+    return { config: authenticated, output: [`Pi target changed to ${provider}/${model}`] };
   }
   if (command === "auth") {
     const authFile = config.authFile ?? defaultAuthFile();

package/dist/{chunk-VWEV4LTH.js → chunk-D2DVAH37.js}

@@ -3,7 +3,7 @@ const require = __goahCreateRequire(import.meta.url);
 import {
   createPiProcessRunner,
   piRunnerConfigurator
-} from "./chunk-X7UWW2PN.js";
+} from "./chunk-7E7V6OIU.js";
 
 // node_modules/.dist-original/runner-registry.js
 var plugins = /* @__PURE__ */ new Map([

package/dist/{chunk-PFEV3HWI.js → chunk-KJ4HJCTK.js}

@@ -2,7 +2,7 @@ import { createRequire as __goahCreateRequire } from "node:module";
 const require = __goahCreateRequire(import.meta.url);
 import {
   runnerPlugin
-} from "./chunk-VWEV4LTH.js";
+} from "./chunk-D2DVAH37.js";
 import {
   SQLITE_SCHEMA_VERSION,
   SqliteLedger
@@ -16,7 +16,7 @@ import {
   ProcessRunner,
   piWorkerPath,
   resolveEnvSpec
-} from "./chunk-X7UWW2PN.js";
+} from "./chunk-7E7V6OIU.js";
 import {
   createPiModel
 } from "./chunk-6M3OOCKO.js";