@midscene/cli 1.14.0 → 1.15.0

package/dist/es/index.mjs

@@ -1,18 +1,19 @@
 /*! For license information please see index.mjs.LICENSE.txt */
-import { ReportMergingTool, createReportCliCommands, runConnectivityTest } from "@midscene/core";
+import { ReportMergingTool, createReportCliCommands } from "@midscene/core";
 import { runToolsCLI } from "@midscene/shared/cli";
 import { basename, dirname as external_node_path_dirname, extname, join, posix, relative as external_node_path_relative, resolve as external_node_path_resolve, sep as external_node_path_sep, win32 } from "node:path";
 import { interpolateEnvVars, midsceneYamlTargetKeys, parseYamlScript as yaml_parseYamlScript, resolveWebTarget } from "@midscene/core/yaml";
 import { getDebug } from "@midscene/shared/logger";
 import { fileURLToPath, pathToFileURL } from "node:url";
-import { lstat, readdir, readlink, realpath } from "node:fs/promises";
+import { lstat, mkdir, readFile, readdir, readlink, realpath, rename, rm, writeFile } from "node:fs/promises";
 import { EventEmitter } from "node:events";
 import node_stream from "node:stream";
 import { StringDecoder } from "node:string_decoder";
 import { fileURLToPath as external_url_fileURLToPath } from "url";
 import node_process, { cwd as external_node_process_cwd } from "node:process";
 import lodash_merge from "lodash.merge";
-import { createHash } from "node:crypto";
+import { loadDotenvConfig, runModelCommand } from "@midscene/test/internal/model-command";
+import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { getMidsceneRunSubDir } from "@midscene/shared/common";
 import { buildChromeArgs, buildDownloadBehavior, defaultViewportHeight, defaultViewportWidth } from "@midscene/web/puppeteer-agent-launcher";
 import puppeteer from "puppeteer";
@@ -20,10 +21,12 @@ import { createYamlPlayer as yaml_runtime_createYamlPlayer } from "@midscene/tes
 import { stripVTControlCharacters } from "node:util";
 import { createRequire } from "node:module";
 import { serializeError } from "@midscene/shared/agent-tools/error-formatter";
-import { globalModelConfigManager } from "@midscene/shared/env";
+import { spawn } from "node:child_process";
+import { homedir } from "node:os";
+import { createServer } from "node:http";
+import { createRemoteJWKSet, jwtVerify } from "jose";
 import { classifyWorkflowDocumentFormat } from "@midscene/core/internal/test-runner";
 import * as __rspack_external_assert from "assert";
-import * as __rspack_external_crypto from "crypto";
 import * as __rspack_external_fs from "fs";
 import * as __rspack_external_os from "os";
 import * as __rspack_external_path from "path";
@@ -2475,232 +2478,6 @@ var __webpack_modules__ = {
             ]
         };
     },
-    "../../node_modules/.pnpm/dotenv@16.4.5/node_modules/dotenv/lib/main.js" (module, __unused_rspack_exports, __webpack_require__) {
-        const fs = __webpack_require__("fs");
-        const path = __webpack_require__("path");
-        const os = __webpack_require__("os");
-        const crypto = __webpack_require__("crypto");
-        const packageJson = __webpack_require__("../../node_modules/.pnpm/dotenv@16.4.5/node_modules/dotenv/package.json");
-        const version = packageJson.version;
-        const LINE = /(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/mg;
-        function parse(src) {
-            const obj = {};
-            let lines = src.toString();
-            lines = lines.replace(/\r\n?/mg, '\n');
-            let match;
-            while(null != (match = LINE.exec(lines))){
-                const key = match[1];
-                let value = match[2] || '';
-                value = value.trim();
-                const maybeQuote = value[0];
-                value = value.replace(/^(['"`])([\s\S]*)\1$/mg, '$2');
-                if ('"' === maybeQuote) {
-                    value = value.replace(/\\n/g, '\n');
-                    value = value.replace(/\\r/g, '\r');
-                }
-                obj[key] = value;
-            }
-            return obj;
-        }
-        function _parseVault(options) {
-            const vaultPath = _vaultPath(options);
-            const result = DotenvModule.configDotenv({
-                path: vaultPath
-            });
-            if (!result.parsed) {
-                const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
-                err.code = 'MISSING_DATA';
-                throw err;
-            }
-            const keys = _dotenvKey(options).split(',');
-            const length = keys.length;
-            let decrypted;
-            for(let i = 0; i < length; i++)try {
-                const key = keys[i].trim();
-                const attrs = _instructions(result, key);
-                decrypted = DotenvModule.decrypt(attrs.ciphertext, attrs.key);
-                break;
-            } catch (error) {
-                if (i + 1 >= length) throw error;
-            }
-            return DotenvModule.parse(decrypted);
-        }
-        function _log(message) {
-            console.log(`[dotenv@${version}][INFO] ${message}`);
-        }
-        function _warn(message) {
-            console.log(`[dotenv@${version}][WARN] ${message}`);
-        }
-        function _debug(message) {
-            console.log(`[dotenv@${version}][DEBUG] ${message}`);
-        }
-        function _dotenvKey(options) {
-            if (options && options.DOTENV_KEY && options.DOTENV_KEY.length > 0) return options.DOTENV_KEY;
-            if (process.env.DOTENV_KEY && process.env.DOTENV_KEY.length > 0) return process.env.DOTENV_KEY;
-            return '';
-        }
-        function _instructions(result, dotenvKey) {
-            let uri;
-            try {
-                uri = new URL(dotenvKey);
-            } catch (error) {
-                if ('ERR_INVALID_URL' === error.code) {
-                    const err = new Error('INVALID_DOTENV_KEY: Wrong format. Must be in valid uri format like dotenv://:key_1234@dotenvx.com/vault/.env.vault?environment=development');
-                    err.code = 'INVALID_DOTENV_KEY';
-                    throw err;
-                }
-                throw error;
-            }
-            const key = uri.password;
-            if (!key) {
-                const err = new Error('INVALID_DOTENV_KEY: Missing key part');
-                err.code = 'INVALID_DOTENV_KEY';
-                throw err;
-            }
-            const environment = uri.searchParams.get('environment');
-            if (!environment) {
-                const err = new Error('INVALID_DOTENV_KEY: Missing environment part');
-                err.code = 'INVALID_DOTENV_KEY';
-                throw err;
-            }
-            const environmentKey = `DOTENV_VAULT_${environment.toUpperCase()}`;
-            const ciphertext = result.parsed[environmentKey];
-            if (!ciphertext) {
-                const err = new Error(`NOT_FOUND_DOTENV_ENVIRONMENT: Cannot locate environment ${environmentKey} in your .env.vault file.`);
-                err.code = 'NOT_FOUND_DOTENV_ENVIRONMENT';
-                throw err;
-            }
-            return {
-                ciphertext,
-                key
-            };
-        }
-        function _vaultPath(options) {
-            let possibleVaultPath = null;
-            if (options && options.path && options.path.length > 0) if (Array.isArray(options.path)) {
-                for (const filepath of options.path)if (fs.existsSync(filepath)) possibleVaultPath = filepath.endsWith('.vault') ? filepath : `${filepath}.vault`;
-            } else possibleVaultPath = options.path.endsWith('.vault') ? options.path : `${options.path}.vault`;
-            else possibleVaultPath = path.resolve(process.cwd(), '.env.vault');
-            if (fs.existsSync(possibleVaultPath)) return possibleVaultPath;
-            return null;
-        }
-        function _resolveHome(envPath) {
-            return '~' === envPath[0] ? path.join(os.homedir(), envPath.slice(1)) : envPath;
-        }
-        function _configVault(options) {
-            _log('Loading env from encrypted .env.vault');
-            const parsed = DotenvModule._parseVault(options);
-            let processEnv = process.env;
-            if (options && null != options.processEnv) processEnv = options.processEnv;
-            DotenvModule.populate(processEnv, parsed, options);
-            return {
-                parsed
-            };
-        }
-        function configDotenv(options) {
-            const dotenvPath = path.resolve(process.cwd(), '.env');
-            let encoding = 'utf8';
-            const debug = Boolean(options && options.debug);
-            if (options && options.encoding) encoding = options.encoding;
-            else if (debug) _debug('No encoding is specified. UTF-8 is used by default');
-            let optionPaths = [
-                dotenvPath
-            ];
-            if (options && options.path) if (Array.isArray(options.path)) {
-                optionPaths = [];
-                for (const filepath of options.path)optionPaths.push(_resolveHome(filepath));
-            } else optionPaths = [
-                _resolveHome(options.path)
-            ];
-            let lastError;
-            const parsedAll = {};
-            for (const path of optionPaths)try {
-                const parsed = DotenvModule.parse(fs.readFileSync(path, {
-                    encoding
-                }));
-                DotenvModule.populate(parsedAll, parsed, options);
-            } catch (e1) {
-                if (debug) _debug(`Failed to load ${path} ${e1.message}`);
-                lastError = e1;
-            }
-            let processEnv = process.env;
-            if (options && null != options.processEnv) processEnv = options.processEnv;
-            DotenvModule.populate(processEnv, parsedAll, options);
-            if (lastError) return {
-                parsed: parsedAll,
-                error: lastError
-            };
-            return {
-                parsed: parsedAll
-            };
-        }
-        function config(options) {
-            if (0 === _dotenvKey(options).length) return DotenvModule.configDotenv(options);
-            const vaultPath = _vaultPath(options);
-            if (!vaultPath) {
-                _warn(`You set DOTENV_KEY but you are missing a .env.vault file at ${vaultPath}. Did you forget to build it?`);
-                return DotenvModule.configDotenv(options);
-            }
-            return DotenvModule._configVault(options);
-        }
-        function decrypt(encrypted, keyStr) {
-            const key = Buffer.from(keyStr.slice(-64), 'hex');
-            let ciphertext = Buffer.from(encrypted, 'base64');
-            const nonce = ciphertext.subarray(0, 12);
-            const authTag = ciphertext.subarray(-16);
-            ciphertext = ciphertext.subarray(12, -16);
-            try {
-                const aesgcm = crypto.createDecipheriv('aes-256-gcm', key, nonce);
-                aesgcm.setAuthTag(authTag);
-                return `${aesgcm.update(ciphertext)}${aesgcm.final()}`;
-            } catch (error) {
-                const isRange = error instanceof RangeError;
-                const invalidKeyLength = 'Invalid key length' === error.message;
-                const decryptionFailed = 'Unsupported state or unable to authenticate data' === error.message;
-                if (isRange || invalidKeyLength) {
-                    const err = new Error('INVALID_DOTENV_KEY: It must be 64 characters long (or more)');
-                    err.code = 'INVALID_DOTENV_KEY';
-                    throw err;
-                }
-                if (decryptionFailed) {
-                    const err = new Error('DECRYPTION_FAILED: Please check your DOTENV_KEY');
-                    err.code = 'DECRYPTION_FAILED';
-                    throw err;
-                }
-                throw error;
-            }
-        }
-        function populate(processEnv, parsed, options = {}) {
-            const debug = Boolean(options && options.debug);
-            const override = Boolean(options && options.override);
-            if ('object' != typeof parsed) {
-                const err = new Error('OBJECT_REQUIRED: Please check the processEnv argument being passed to populate');
-                err.code = 'OBJECT_REQUIRED';
-                throw err;
-            }
-            for (const key of Object.keys(parsed))if (Object.prototype.hasOwnProperty.call(processEnv, key)) {
-                if (true === override) processEnv[key] = parsed[key];
-                if (debug) true === override ? _debug(`"${key}" is already defined and WAS overwritten`) : _debug(`"${key}" is already defined and was NOT overwritten`);
-            } else processEnv[key] = parsed[key];
-        }
-        const DotenvModule = {
-            configDotenv,
-            _configVault,
-            _parseVault,
-            config,
-            decrypt,
-            parse,
-            populate
-        };
-        module.exports.configDotenv = DotenvModule.configDotenv;
-        module.exports._configVault = DotenvModule._configVault;
-        module.exports._parseVault = DotenvModule._parseVault;
-        module.exports.config = DotenvModule.config;
-        module.exports.decrypt = DotenvModule.decrypt;
-        module.exports.parse = DotenvModule.parse;
-        module.exports.populate = DotenvModule.populate;
-        module.exports = DotenvModule;
-    },
     "../../node_modules/.pnpm/emoji-regex@8.0.0/node_modules/emoji-regex/index.js" (module) {
         module.exports = function() {
             return /\uD83C\uDFF4\uDB40\uDC67\uDB40\uDC62(?:\uDB40\uDC65\uDB40\uDC6E\uDB40\uDC67|\uDB40\uDC73\uDB40\uDC63\uDB40\uDC74|\uDB40\uDC77\uDB40\uDC6C\uDB40\uDC73)\uDB40\uDC7F|\uD83D\uDC68(?:\uD83C\uDFFC\u200D(?:\uD83E\uDD1D\u200D\uD83D\uDC68\uD83C\uDFFB|\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFF\u200D(?:\uD83E\uDD1D\u200D\uD83D\uDC68(?:\uD83C[\uDFFB-\uDFFE])|\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFE\u200D(?:\uD83E\uDD1D\u200D\uD83D\uDC68(?:\uD83C[\uDFFB-\uDFFD])|\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFD\u200D(?:\uD83E\uDD1D\u200D\uD83D\uDC68(?:\uD83C[\uDFFB\uDFFC])|\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\u200D(?:\u2764\uFE0F\u200D(?:\uD83D\uDC8B\u200D)?\uD83D\uDC68|(?:\uD83D[\uDC68\uDC69])\u200D(?:\uD83D\uDC66\u200D\uD83D\uDC66|\uD83D\uDC67\u200D(?:\uD83D[\uDC66\uDC67]))|\uD83D\uDC66\u200D\uD83D\uDC66|\uD83D\uDC67\u200D(?:\uD83D[\uDC66\uDC67])|(?:\uD83D[\uDC68\uDC69])\u200D(?:\uD83D[\uDC66\uDC67])|[\u2695\u2696\u2708]\uFE0F|\uD83D[\uDC66\uDC67]|\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|(?:\uD83C\uDFFB\u200D[\u2695\u2696\u2708]|\uD83C\uDFFF\u200D[\u2695\u2696\u2708]|\uD83C\uDFFE\u200D[\u2695\u2696\u2708]|\uD83C\uDFFD\u200D[\u2695\u2696\u2708]|\uD83C\uDFFC\u200D[\u2695\u2696\u2708])\uFE0F|\uD83C\uDFFB\u200D(?:\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C[\uDFFB-\uDFFF])|(?:\uD83E\uDDD1\uD83C\uDFFB\u200D\uD83E\uDD1D\u200D\uD83E\uDDD1|\uD83D\uDC69\uD83C\uDFFC\u200D\uD83E\uDD1D\u200D\uD83D\uDC69)\uD83C\uDFFB|\uD83E\uDDD1(?:\uD83C\uDFFF\u200D\uD83E\uDD1D\u200D\uD83E\uDDD1(?:\uD83C[\uDFFB-\uDFFF])|\u200D\uD83E\uDD1D\u200D\uD83E\uDDD1)|(?:\uD83E\uDDD1\uD83C\uDFFE\u200D\uD83E\uDD1D\u200D\uD83E\uDDD1|\uD83D\uDC69\uD83C\uDFFF\u200D\uD83E\uDD1D\u200D(?:\uD83D[\uDC68\uDC69]))(?:\uD83C[\uDFFB-\uDFFE])|(?:\uD83E\uDDD1\uD83C\uDFFC\u200D\uD83E\uDD1D\u200D\uD83E\uDDD1|\uD83D\uDC69\uD83C\uDFFD\u200D\uD83E\uDD1D\u200D\uD83D\uDC69)(?:\uD83C[\uDFFB\uDFFC])|\uD83D\uDC69(?:\uD83C\uDFFE\u200D(?:\uD83E\uDD1D\u200D\uD83D\uDC68(?:\uD83C[\uDFFB-\uDFFD\uDFFF])|\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFC\u200D(?:\uD83E\uDD1D\u200D\uD83D\uDC68(?:\uD83C[\uDFFB\uDFFD-\uDFFF])|\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFB\u200D(?:\uD83E\uDD1D\u200D\uD83D\uDC68(?:\uD83C[\uDFFC-\uDFFF])|\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFD\u200D(?:\uD83E\uDD1D\u200D\uD83D\uDC68(?:\uD83C[\uDFFB\uDFFC\uDFFE\uDFFF])|\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\u200D(?:\u2764\uFE0F\u200D(?:\uD83D\uDC8B\u200D(?:\uD83D[\uDC68\uDC69])|\uD83D[\uDC68\uDC69])|\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD])|\uD83C\uDFFF\u200D(?:\uD83C[\uDF3E\uDF73\uDF93\uDFA4\uDFA8\uDFEB\uDFED]|\uD83D[\uDCBB\uDCBC\uDD27\uDD2C\uDE80\uDE92]|\uD83E[\uDDAF-\uDDB3\uDDBC\uDDBD]))|\uD83D\uDC69\u200D\uD83D\uDC69\u200D(?:\uD83D\uDC66\u200D\uD83D\uDC66|\uD83D\uDC67\u200D(?:\uD83D[\uDC66\uDC67]))|(?:\uD83E\uDDD1\uD83C\uDFFD\u200D\uD83E\uDD1D\u200D\uD83E\uDDD1|\uD83D\uDC69\uD83C\uDFFE\u200D\uD83E\uDD1D\u200D\uD83D\uDC69)(?:\uD83C[\uDFFB-\uDFFD])|\uD83D\uDC69\u200D\uD83D\uDC66\u200D\uD83D\uDC66|\uD83D\uDC69\u200D\uD83D\uDC69\u200D(?:\uD83D[\uDC66\uDC67])|(?:\uD83D\uDC41\uFE0F\u200D\uD83D\uDDE8|\uD83D\uDC69(?:\uD83C\uDFFF\u200D[\u2695\u2696\u2708]|\uD83C\uDFFE\u200D[\u2695\u2696\u2708]|\uD83C\uDFFC\u200D[\u2695\u2696\u2708]|\uD83C\uDFFB\u200D[\u2695\u2696\u2708]|\uD83C\uDFFD\u200D[\u2695\u2696\u2708]|\u200D[\u2695\u2696\u2708])|(?:(?:\u26F9|\uD83C[\uDFCB\uDFCC]|\uD83D\uDD75)\uFE0F|\uD83D\uDC6F|\uD83E[\uDD3C\uDDDE\uDDDF])\u200D[\u2640\u2642]|(?:\u26F9|\uD83C[\uDFCB\uDFCC]|\uD83D\uDD75)(?:\uD83C[\uDFFB-\uDFFF])\u200D[\u2640\u2642]|(?:\uD83C[\uDFC3\uDFC4\uDFCA]|\uD83D[\uDC6E\uDC71\uDC73\uDC77\uDC81\uDC82\uDC86\uDC87\uDE45-\uDE47\uDE4B\uDE4D\uDE4E\uDEA3\uDEB4-\uDEB6]|\uD83E[\uDD26\uDD37-\uDD39\uDD3D\uDD3E\uDDB8\uDDB9\uDDCD-\uDDCF\uDDD6-\uDDDD])(?:(?:\uD83C[\uDFFB-\uDFFF])\u200D[\u2640\u2642]|\u200D[\u2640\u2642])|\uD83C\uDFF4\u200D\u2620)\uFE0F|\uD83D\uDC69\u200D\uD83D\uDC67\u200D(?:\uD83D[\uDC66\uDC67])|\uD83C\uDFF3\uFE0F\u200D\uD83C\uDF08|\uD83D\uDC15\u200D\uD83E\uDDBA|\uD83D\uDC69\u200D\uD83D\uDC66|\uD83D\uDC69\u200D\uD83D\uDC67|\uD83C\uDDFD\uD83C\uDDF0|\uD83C\uDDF4\uD83C\uDDF2|\uD83C\uDDF6\uD83C\uDDE6|[#\*0-9]\uFE0F\u20E3|\uD83C\uDDE7(?:\uD83C[\uDDE6\uDDE7\uDDE9-\uDDEF\uDDF1-\uDDF4\uDDF6-\uDDF9\uDDFB\uDDFC\uDDFE\uDDFF])|\uD83C\uDDF9(?:\uD83C[\uDDE6\uDDE8\uDDE9\uDDEB-\uDDED\uDDEF-\uDDF4\uDDF7\uDDF9\uDDFB\uDDFC\uDDFF])|\uD83C\uDDEA(?:\uD83C[\uDDE6\uDDE8\uDDEA\uDDEC\uDDED\uDDF7-\uDDFA])|\uD83E\uDDD1(?:\uD83C[\uDFFB-\uDFFF])|\uD83C\uDDF7(?:\uD83C[\uDDEA\uDDF4\uDDF8\uDDFA\uDDFC])|\uD83D\uDC69(?:\uD83C[\uDFFB-\uDFFF])|\uD83C\uDDF2(?:\uD83C[\uDDE6\uDDE8-\uDDED\uDDF0-\uDDFF])|\uD83C\uDDE6(?:\uD83C[\uDDE8-\uDDEC\uDDEE\uDDF1\uDDF2\uDDF4\uDDF6-\uDDFA\uDDFC\uDDFD\uDDFF])|\uD83C\uDDF0(?:\uD83C[\uDDEA\uDDEC-\uDDEE\uDDF2\uDDF3\uDDF5\uDDF7\uDDFC\uDDFE\uDDFF])|\uD83C\uDDED(?:\uD83C[\uDDF0\uDDF2\uDDF3\uDDF7\uDDF9\uDDFA])|\uD83C\uDDE9(?:\uD83C[\uDDEA\uDDEC\uDDEF\uDDF0\uDDF2\uDDF4\uDDFF])|\uD83C\uDDFE(?:\uD83C[\uDDEA\uDDF9])|\uD83C\uDDEC(?:\uD83C[\uDDE6\uDDE7\uDDE9-\uDDEE\uDDF1-\uDDF3\uDDF5-\uDDFA\uDDFC\uDDFE])|\uD83C\uDDF8(?:\uD83C[\uDDE6-\uDDEA\uDDEC-\uDDF4\uDDF7-\uDDF9\uDDFB\uDDFD-\uDDFF])|\uD83C\uDDEB(?:\uD83C[\uDDEE-\uDDF0\uDDF2\uDDF4\uDDF7])|\uD83C\uDDF5(?:\uD83C[\uDDE6\uDDEA-\uDDED\uDDF0-\uDDF3\uDDF7-\uDDF9\uDDFC\uDDFE])|\uD83C\uDDFB(?:\uD83C[\uDDE6\uDDE8\uDDEA\uDDEC\uDDEE\uDDF3\uDDFA])|\uD83C\uDDF3(?:\uD83C[\uDDE6\uDDE8\uDDEA-\uDDEC\uDDEE\uDDF1\uDDF4\uDDF5\uDDF7\uDDFA\uDDFF])|\uD83C\uDDE8(?:\uD83C[\uDDE6\uDDE8\uDDE9\uDDEB-\uDDEE\uDDF0-\uDDF5\uDDF7\uDDFA-\uDDFF])|\uD83C\uDDF1(?:\uD83C[\uDDE6-\uDDE8\uDDEE\uDDF0\uDDF7-\uDDFB\uDDFE])|\uD83C\uDDFF(?:\uD83C[\uDDE6\uDDF2\uDDFC])|\uD83C\uDDFC(?:\uD83C[\uDDEB\uDDF8])|\uD83C\uDDFA(?:\uD83C[\uDDE6\uDDEC\uDDF2\uDDF3\uDDF8\uDDFE\uDDFF])|\uD83C\uDDEE(?:\uD83C[\uDDE8-\uDDEA\uDDF1-\uDDF4\uDDF6-\uDDF9])|\uD83C\uDDEF(?:\uD83C[\uDDEA\uDDF2\uDDF4\uDDF5])|(?:\uD83C[\uDFC3\uDFC4\uDFCA]|\uD83D[\uDC6E\uDC71\uDC73\uDC77\uDC81\uDC82\uDC86\uDC87\uDE45-\uDE47\uDE4B\uDE4D\uDE4E\uDEA3\uDEB4-\uDEB6]|\uD83E[\uDD26\uDD37-\uDD39\uDD3D\uDD3E\uDDB8\uDDB9\uDDCD-\uDDCF\uDDD6-\uDDDD])(?:\uD83C[\uDFFB-\uDFFF])|(?:\u26F9|\uD83C[\uDFCB\uDFCC]|\uD83D\uDD75)(?:\uD83C[\uDFFB-\uDFFF])|(?:[\u261D\u270A-\u270D]|\uD83C[\uDF85\uDFC2\uDFC7]|\uD83D[\uDC42\uDC43\uDC46-\uDC50\uDC66\uDC67\uDC6B-\uDC6D\uDC70\uDC72\uDC74-\uDC76\uDC78\uDC7C\uDC83\uDC85\uDCAA\uDD74\uDD7A\uDD90\uDD95\uDD96\uDE4C\uDE4F\uDEC0\uDECC]|\uD83E[\uDD0F\uDD18-\uDD1C\uDD1E\uDD1F\uDD30-\uDD36\uDDB5\uDDB6\uDDBB\uDDD2-\uDDD5])(?:\uD83C[\uDFFB-\uDFFF])|(?:[\u231A\u231B\u23E9-\u23EC\u23F0\u23F3\u25FD\u25FE\u2614\u2615\u2648-\u2653\u267F\u2693\u26A1\u26AA\u26AB\u26BD\u26BE\u26C4\u26C5\u26CE\u26D4\u26EA\u26F2\u26F3\u26F5\u26FA\u26FD\u2705\u270A\u270B\u2728\u274C\u274E\u2753-\u2755\u2757\u2795-\u2797\u27B0\u27BF\u2B1B\u2B1C\u2B50\u2B55]|\uD83C[\uDC04\uDCCF\uDD8E\uDD91-\uDD9A\uDDE6-\uDDFF\uDE01\uDE1A\uDE2F\uDE32-\uDE36\uDE38-\uDE3A\uDE50\uDE51\uDF00-\uDF20\uDF2D-\uDF35\uDF37-\uDF7C\uDF7E-\uDF93\uDFA0-\uDFCA\uDFCF-\uDFD3\uDFE0-\uDFF0\uDFF4\uDFF8-\uDFFF]|\uD83D[\uDC00-\uDC3E\uDC40\uDC42-\uDCFC\uDCFF-\uDD3D\uDD4B-\uDD4E\uDD50-\uDD67\uDD7A\uDD95\uDD96\uDDA4\uDDFB-\uDE4F\uDE80-\uDEC5\uDECC\uDED0-\uDED2\uDED5\uDEEB\uDEEC\uDEF4-\uDEFA\uDFE0-\uDFEB]|\uD83E[\uDD0D-\uDD3A\uDD3C-\uDD45\uDD47-\uDD71\uDD73-\uDD76\uDD7A-\uDDA2\uDDA5-\uDDAA\uDDAE-\uDDCA\uDDCD-\uDDFF\uDE70-\uDE73\uDE78-\uDE7A\uDE80-\uDE82\uDE90-\uDE95])|(?:[#\*0-9\xA9\xAE\u203C\u2049\u2122\u2139\u2194-\u2199\u21A9\u21AA\u231A\u231B\u2328\u23CF\u23E9-\u23F3\u23F8-\u23FA\u24C2\u25AA\u25AB\u25B6\u25C0\u25FB-\u25FE\u2600-\u2604\u260E\u2611\u2614\u2615\u2618\u261D\u2620\u2622\u2623\u2626\u262A\u262E\u262F\u2638-\u263A\u2640\u2642\u2648-\u2653\u265F\u2660\u2663\u2665\u2666\u2668\u267B\u267E\u267F\u2692-\u2697\u2699\u269B\u269C\u26A0\u26A1\u26AA\u26AB\u26B0\u26B1\u26BD\u26BE\u26C4\u26C5\u26C8\u26CE\u26CF\u26D1\u26D3\u26D4\u26E9\u26EA\u26F0-\u26F5\u26F7-\u26FA\u26FD\u2702\u2705\u2708-\u270D\u270F\u2712\u2714\u2716\u271D\u2721\u2728\u2733\u2734\u2744\u2747\u274C\u274E\u2753-\u2755\u2757\u2763\u2764\u2795-\u2797\u27A1\u27B0\u27BF\u2934\u2935\u2B05-\u2B07\u2B1B\u2B1C\u2B50\u2B55\u3030\u303D\u3297\u3299]|\uD83C[\uDC04\uDCCF\uDD70\uDD71\uDD7E\uDD7F\uDD8E\uDD91-\uDD9A\uDDE6-\uDDFF\uDE01\uDE02\uDE1A\uDE2F\uDE32-\uDE3A\uDE50\uDE51\uDF00-\uDF21\uDF24-\uDF93\uDF96\uDF97\uDF99-\uDF9B\uDF9E-\uDFF0\uDFF3-\uDFF5\uDFF7-\uDFFF]|\uD83D[\uDC00-\uDCFD\uDCFF-\uDD3D\uDD49-\uDD4E\uDD50-\uDD67\uDD6F\uDD70\uDD73-\uDD7A\uDD87\uDD8A-\uDD8D\uDD90\uDD95\uDD96\uDDA4\uDDA5\uDDA8\uDDB1\uDDB2\uDDBC\uDDC2-\uDDC4\uDDD1-\uDDD3\uDDDC-\uDDDE\uDDE1\uDDE3\uDDE8\uDDEF\uDDF3\uDDFA-\uDE4F\uDE80-\uDEC5\uDECB-\uDED2\uDED5\uDEE0-\uDEE5\uDEE9\uDEEB\uDEEC\uDEF0\uDEF3-\uDEFA\uDFE0-\uDFEB]|\uD83E[\uDD0D-\uDD3A\uDD3C-\uDD45\uDD47-\uDD71\uDD73-\uDD76\uDD7A-\uDDA2\uDDA5-\uDDAA\uDDAE-\uDDCA\uDDCD-\uDDFF\uDE70-\uDE73\uDE78-\uDE7A\uDE80-\uDE82\uDE90-\uDE95])\uFE0F|(?:[\u261D\u26F9\u270A-\u270D]|\uD83C[\uDF85\uDFC2-\uDFC4\uDFC7\uDFCA-\uDFCC]|\uD83D[\uDC42\uDC43\uDC46-\uDC50\uDC66-\uDC78\uDC7C\uDC81-\uDC83\uDC85-\uDC87\uDC8F\uDC91\uDCAA\uDD74\uDD75\uDD7A\uDD90\uDD95\uDD96\uDE45-\uDE47\uDE4B-\uDE4F\uDEA3\uDEB4-\uDEB6\uDEC0\uDECC]|\uD83E[\uDD0F\uDD18-\uDD1F\uDD26\uDD30-\uDD39\uDD3C-\uDD3E\uDDB5\uDDB6\uDDB8\uDDB9\uDDBB\uDDCD-\uDDCF\uDDD1-\uDDDD])/g;
@@ -3024,7 +2801,7 @@ var __webpack_modules__ = {
     },
     "./src/index.ts" (__unused_rspack_module, __unused_rspack___webpack_exports__, __webpack_require__) {
         var package_namespaceObject = {
-            rE: "1.14.0"
+            rE: "1.15.0"
         };
         var brace_expansion = __webpack_require__("../../node_modules/.pnpm/brace-expansion@2.0.1/node_modules/brace-expansion/index.js");
         const MAX_PATTERN_LENGTH = 65536;
@@ -8636,9 +8413,11 @@ Homepage: https://midscenejs.com
 Github: https://github.com/web-infra-dev/midscene
 
 Usage: 
+      $0 model siwc <login|refresh> [options]
       $0 [options] <path-to-yaml-script-file-or-directory>
       $0 [options] --files <yaml-file1> <yaml-file2 ...>
-      $0 [options] --config <path-to-config-yaml-file>`).options({
+      $0 [options] --config <path-to-config-yaml-file>
+      $0 model verify  Check model connectivity and Midscene compatibility`).options({
                 files: {
                     type: 'array',
                     string: true,
@@ -8696,7 +8475,7 @@ Usage:
                     type: 'boolean',
                     description: 'Whether to dismiss the HarmonyOS keyboard after text input'
                 }
-            }).version('version', 'Show version number', "1.14.0").help().epilogue(`For complete list of configuration options, please visit:
+            }).version('version', 'Show version number', "1.15.0").help().epilogue(`For complete list of configuration options, please visit:
   • Web options: https://midscenejs.com/automate-with-scripts-in-yaml#the-web-part
   • Android options: https://midscenejs.com/automate-with-scripts-in-yaml#the-android-part
   • HarmonyOS options: https://midscenejs.com/automate-with-scripts-in-yaml#the-harmony-part
@@ -10943,18 +10722,6 @@ Native cases/steps Test projects use the midscene-test command.`).wrap(yargs().t
                 globalConfig: pickYamlTargetConfig(options)
             };
         }
-        var main = __webpack_require__("../../node_modules/.pnpm/dotenv@16.4.5/node_modules/dotenv/lib/main.js");
-        var main_default = /*#__PURE__*/ __webpack_require__.n(main);
-        function loadDotenvConfig(options = {}) {
-            const dotEnvConfigFile = join(options.cwd ?? process.cwd(), '.env');
-            if (!(0, __rspack_external_node_fs_5ea92f0c.existsSync)(dotEnvConfigFile)) return;
-            options.log?.(`   Env file: ${dotEnvConfigFile}`);
-            main_default().config({
-                path: dotEnvConfigFile,
-                debug: options.dotenvDebug,
-                override: options.dotenvOverride
-            });
-        }
         const warnRetryReport = getDebug('execution-summary', {
             console: true
         });
@@ -12723,172 +12490,431 @@ defineYamlBatchTest(test, testOptions);
             const success = printExecutionSummary(results, summaryPath);
             return success ? exitCode : 1;
         }
-        const DEFAULT_OPENAI_BASE_URL = 'https://api.openai.com/v1';
-        const MODEL_VERIFY_SEPARATOR = '────────────────────────────────────────';
-        const MODEL_COMMAND_USAGE = `Usage:
-  midscene model verify
-  midscene model eval
-`;
-        function assertNoModelVerifyOptions(args) {
-            for (const arg of args)throw new Error(`Unknown option for midscene model verify: ${arg}`);
-        }
-        function shellSingleQuote(value) {
-            return `'${value.replace(/'/g, "'\\''")}'`;
+        const defaultCredentialsPath = ()=>join(homedir(), '.midscene', 'siwc.json');
+        async function readCredentialsFile(path) {
+            const content = await readFile(path, 'utf8').catch((error)=>{
+                if ('ENOENT' === error.code) return;
+                throw new Error('Unable to read the local SIWC credentials file.');
+            });
+            if (void 0 === content) return;
+            try {
+                const value = JSON.parse(content);
+                if (!value || 'string' != typeof value.credentials?.ext_agent_host_id || !value.credentials.ext_agent_host_id) throw new Error('Invalid SIWC credentials record.');
+                return value;
+            } catch  {
+                throw new Error('Invalid local SIWC credentials file.');
+            }
         }
-        function buildChatCompletionsUrl(baseURL) {
-            const normalizedBaseURL = (baseURL || DEFAULT_OPENAI_BASE_URL).replace(/\/+$/, '');
-            if (normalizedBaseURL.endsWith('/chat/completions')) return normalizedBaseURL;
-            return `${normalizedBaseURL}/chat/completions`;
+        async function readRegistration(path) {
+            return (await readCredentialsFile(path))?.credentials;
         }
-        function buildCurlCommand(modelConfig) {
-            const payload = {
-                model: modelConfig.modelName,
-                messages: [
-                    {
-                        role: 'user',
-                        content: 'What is 1+1?'
-                    }
-                ]
+        async function saveRegistration(path, value) {
+            const saved = await readCredentialsFile(path);
+            const now = new Date().toISOString();
+            const record = {
+                ...saved,
+                created_at: saved?.created_at ?? now,
+                updated_at: now,
+                credentials: value
             };
-            return [
-                `curl -X POST ${shellSingleQuote(buildChatCompletionsUrl(modelConfig.openaiBaseURL))} \\`,
-                `  -H ${shellSingleQuote(`Authorization: Bearer ${modelConfig.openaiApiKey || ''}`)} \\`,
-                `  -H ${shellSingleQuote('Content-Type: application/json')} \\`,
-                `  -d ${shellSingleQuote(JSON.stringify(payload, null, 2))}`
-            ].join('\n');
-        }
-        function buildCurlDedupKey(modelConfig) {
-            return JSON.stringify({
-                baseURL: modelConfig.openaiBaseURL || DEFAULT_OPENAI_BASE_URL,
-                apiKey: modelConfig.openaiApiKey || '',
-                modelName: modelConfig.modelName
-            });
-        }
-        function buildModelVerifyCurlCommands(configs) {
-            const commandMap = new Map();
-            for (const item of configs){
-                const key = buildCurlDedupKey(item.modelConfig);
-                const existing = commandMap.get(key);
-                if (existing) {
-                    existing.intents.push(item.intent);
-                    continue;
-                }
-                commandMap.set(key, {
-                    intents: [
-                        item.intent
-                    ],
-                    curl: buildCurlCommand(item.modelConfig),
-                    usesDefaultBaseURL: !item.modelConfig.openaiBaseURL
+            const temporary = `${path}.${randomUUID()}.tmp`;
+            try {
+                await writeFile(temporary, `${JSON.stringify(record, null, 2)}\n`, {
+                    mode: 384,
+                    flag: 'wx'
+                });
+                await rename(temporary, path);
+            } finally{
+                await rm(temporary, {
+                    force: true
                 });
             }
-            return [
-                ...commandMap.values()
-            ];
         }
-        function formatModelVerifyFailureOutput(message, curlCommands) {
-            const details = message?.trim() || 'No failure details were generated.';
-            const curlSection = curlCommands.map((item)=>{
-                const baseUrlNote = item.usesDefaultBaseURL ? ' (base URL not configured; using OpenAI SDK default)' : '';
-                return source_default().gray(`# ${item.intents.join(', ')}${baseUrlNote}\n${item.curl}`);
-            }).join('\n\n');
-            return [
-                source_default().red.bold('❌ Model verify failed with messages:'),
-                MODEL_VERIFY_SEPARATOR,
-                '',
-                details,
-                '',
-                MODEL_VERIFY_SEPARATOR,
-                'Generated curl requests for basic API connectivity:',
-                'If the error is a basic connectivity issue, use these requests to test the base URL, API key, and model name directly.',
-                'These commands contain your API key. Do not share them publicly.',
-                '',
-                curlSection
-            ].join('\n');
+        async function lockCredentials(path) {
+            await mkdir(external_node_path_dirname(path), {
+                recursive: true,
+                mode: 448
+            });
+            const lockPath = `${path}.lock`;
+            try {
+                await mkdir(lockPath, {
+                    mode: 448
+                });
+            } catch (error) {
+                if ('EEXIST' === error.code) throw new Error(`Another SIWC command holds ${lockPath}. If it was interrupted, remove this lock only after confirming that no SIWC command is running.`);
+                throw new Error('Unable to lock the local SIWC credentials file.');
+            }
+            return ()=>rm(lockPath, {
+                    recursive: true,
+                    force: true
+                });
         }
-        function getDefaultDeps(io) {
-            return {
-                loadDotenv: ()=>{
-                    loadDotenvConfig({
-                        dotenvDebug: true,
-                        dotenvOverride: true,
-                        log: io.stdout
+        function requireCredentials(value) {
+            if (!value || [
+                'client_id',
+                'subject',
+                'issuer',
+                'access_token',
+                'refresh_token',
+                'id_token'
+            ].some((key)=>'string' != typeof value[key] || !value[key]) || !Array.isArray(value.scopes) || !value.scopes.every((scope)=>'string' == typeof scope) || !Number.isFinite(value.expires_at)) throw new Error('No valid SIWC credentials. Run midscene model siwc login first.');
+            return value;
+        }
+        const ISSUER = 'https://auth.openai.com';
+        const RESOURCE = 'https://api.openai.com/v1';
+        const SCOPES = 'openid profile email offline_access resource.invoke chatgpt.tokens.use.direct';
+        async function loginWithOpenAI(options, dependencies) {
+            const hostId = options.hostId ?? `urn:uuid:${randomUUID()}`;
+            const existingClientId = options.clientId;
+            const state = randomBytes(32).toString('base64url');
+            const nonce = randomBytes(32).toString('base64url');
+            const verifier = randomBytes(32).toString('base64url');
+            const signal = options.signal;
+            signal.throwIfAborted();
+            const server = createServer();
+            const callback = new Promise((resolve, reject)=>{
+                const consumed = {
+                    value: false
+                };
+                server.on('request', (request, response)=>{
+                    response.setHeader('Content-Type', 'text/plain; charset=utf-8');
+                    response.setHeader('Cache-Control', 'no-store');
+                    response.setHeader('Referrer-Policy', 'no-referrer');
+                    const url = new URL(request.url || '/', 'http://127.0.0.1');
+                    if ('GET' !== request.method || '/auth/callback' !== url.pathname) return void response.writeHead(404).end('Not found');
+                    if (1 !== url.searchParams.getAll('state').length || url.searchParams.get('state') !== state) return void response.writeHead(400).end('Invalid login state. Use the original authorization link.');
+                    if (consumed.value) return void response.writeHead(409).end('Authorization already received.');
+                    if (url.searchParams.has('error')) {
+                        consumed.value = true;
+                        response.writeHead(400).end('Authorization was not granted. Return to the terminal.');
+                        reject(new Error('OpenAI authorization was denied or failed.'));
+                        return;
+                    }
+                    const code = url.searchParams.get('code');
+                    const clientId = url.searchParams.get('client_id') || existingClientId;
+                    if (!code || !clientId || 'dynamic_agent_client' === clientId || existingClientId && clientId !== existingClientId || 1 !== url.searchParams.getAll('code').length || url.searchParams.getAll('client_id').length > 1) return void response.writeHead(400).end('Invalid authorization callback.');
+                    consumed.value = true;
+                    response.setHeader('Content-Type', 'text/html; charset=utf-8');
+                    response.end(`<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Authorization received · Midscene</title>
+  <style>
+    * { box-sizing: border-box; }
+    body { margin: 0; min-height: 100vh; display: grid; place-items: center; padding: 24px; background: #f6f7f9; color: #202124; font-family: system-ui, sans-serif; }
+    main { width: 100%; max-width: 480px; padding: 40px 28px; text-align: center; background: white; border: 1px solid #e5e7eb; border-radius: 20px; box-shadow: 0 8px 32px #00000008; }
+    h1 { margin: 0 0 20px; font-size: 24px; line-height: 1.4; }
+    h1 span { color: #16834a; }
+    p { margin: 8px 0 0; color: #596273; font-size: 15px; line-height: 1.6; }
+  </style>
+</head>
+<body>
+  <main>
+    <h1><span aria-hidden="true">✓</span> Authorization received</h1>
+    <p>You can close this tab.</p>
+    <p>Check your terminal for the sign-in result and access token.</p>
+  </main>
+</body>
+</html>`);
+                    resolve({
+                        code,
+                        clientId
                     });
-                },
-                getModelConfig: (intent)=>globalModelConfigManager.getModelConfig(intent),
-                verifyModel: runConnectivityTest
-            };
-        }
-        async function runModelVerifyCommand(args, deps, io) {
+                });
+                server.on('error', reject);
+            });
+            callback.catch(()=>void 0);
+            const abort = ()=>server.emit('error', new Error('OpenAI login cancelled or timed out.'));
+            signal.addEventListener('abort', abort, {
+                once: true
+            });
             try {
-                if (args.includes('--help') || args.includes('-h')) {
-                    io.stdout(MODEL_COMMAND_USAGE);
-                    return 0;
-                }
-                assertNoModelVerifyOptions(args);
-                io.stdout('Model verify started. This usually takes about 5 seconds.\n');
-                deps.loadDotenv();
-                io.stdout('');
-                const defaultModelConfig = deps.getModelConfig('default');
-                const planningModelConfig = deps.getModelConfig('planning');
-                const insightModelConfig = deps.getModelConfig('insight');
-                const curlCommands = buildModelVerifyCurlCommands([
-                    {
-                        intent: 'default',
-                        modelConfig: defaultModelConfig
+                await new Promise((resolve, reject)=>{
+                    server.once('error', reject);
+                    server.listen(options.port ?? 0, '127.0.0.1', ()=>{
+                        server.removeListener('error', reject);
+                        resolve();
+                    });
+                });
+                signal.throwIfAborted();
+                const redirectUri = `http://127.0.0.1:${server.address().port}/auth/callback`;
+                const authorization = new URL(`${ISSUER}/api/accounts/authorize`);
+                authorization.search = new URLSearchParams({
+                    client_id: existingClientId ?? 'dynamic_agent_client',
+                    ...existingClientId ? {} : {
+                        agent_name_hint: 'Midscene'
                     },
-                    {
-                        intent: 'planning',
-                        modelConfig: planningModelConfig
+                    ext_agent_host_id: hostId,
+                    response_type: 'code',
+                    redirect_uri: redirectUri,
+                    scope: SCOPES,
+                    resource: RESOURCE,
+                    state,
+                    nonce,
+                    code_challenge_method: 'S256',
+                    code_challenge: createHash('sha256').update(verifier).digest('base64url')
+                }).toString();
+                await options.onAuthorization(authorization.toString());
+                const { code, clientId } = await callback;
+                signal.throwIfAborted();
+                const request = dependencies?.fetch ?? fetch;
+                const result = await request(`${ISSUER}/api/accounts/oauth/token`, {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/x-www-form-urlencoded'
                     },
-                    {
-                        intent: 'insight',
-                        modelConfig: insightModelConfig
-                    }
-                ]);
-                const result = await deps.verifyModel({
-                    defaultModelConfig,
-                    planningModelConfig,
-                    insightModelConfig
+                    body: new URLSearchParams({
+                        grant_type: 'authorization_code',
+                        client_id: clientId,
+                        code,
+                        code_verifier: verifier,
+                        redirect_uri: redirectUri,
+                        resource: RESOURCE
+                    }),
+                    signal,
+                    redirect: 'error'
                 });
-                if (result.passed) {
-                    io.stdout('✅ Model verify passed.');
-                    return 0;
-                }
-                io.stderr(formatModelVerifyFailureOutput(result.message, curlCommands));
-                return 1;
-            } catch (error) {
-                const message = error instanceof Error ? error.message : String(error);
-                io.stderr([
-                    MODEL_VERIFY_SEPARATOR,
-                    '❌ Model verify failed with messages:',
-                    '',
-                    message,
-                    MODEL_VERIFY_SEPARATOR
-                ].join('\n'));
-                return 1;
+                if (!result.ok) throw new Error(`OpenAI token exchange failed (HTTP ${result.status}). Run midscene model siwc login again.`);
+                const tokens = await result.json();
+                if (!tokens || 'string' != typeof tokens.access_token || !tokens.access_token || 'string' != typeof tokens.refresh_token || !tokens.refresh_token || 'string' != typeof tokens.id_token || 'string' != typeof tokens.scope || 'number' != typeof tokens.expires_in || !Number.isFinite(tokens.expires_in) || tokens.expires_in <= 0 || 'string' != typeof tokens.token_type || 'bearer' !== tokens.token_type.toLowerCase()) throw new Error('OpenAI returned an invalid token response.');
+                const scopes = tokens.scope.split(/\s+/);
+                if (!scopes.includes('chatgpt.tokens.use.direct')) throw new Error('ChatGPT plan usage was not authorized. Run midscene model siwc login again and grant access.');
+                const keys = dependencies?.keys ?? createRemoteJWKSet(new URL(`${ISSUER}/.well-known/jwks.json`));
+                const { payload } = await jwtVerify(tokens.id_token, keys, {
+                    issuer: ISSUER,
+                    audience: clientId,
+                    algorithms: [
+                        'RS256'
+                    ],
+                    requiredClaims: [
+                        'sub',
+                        'exp',
+                        'iat',
+                        'nonce'
+                    ]
+                });
+                if (payload.nonce !== nonce || !payload.sub) throw new Error('OpenAI login identity or nonce did not match.');
+                signal.throwIfAborted();
+                return {
+                    ext_agent_host_id: hostId,
+                    client_id: clientId,
+                    subject: payload.sub,
+                    issuer: ISSUER,
+                    ...'string' == typeof payload.email ? {
+                        email: payload.email
+                    } : {},
+                    access_token: tokens.access_token,
+                    refresh_token: tokens.refresh_token,
+                    id_token: tokens.id_token,
+                    scopes,
+                    expires_at: Date.now() + 1000 * tokens.expires_in
+                };
+            } finally{
+                signal.removeEventListener('abort', abort);
+                server.closeAllConnections();
+                await new Promise((resolve)=>server.close(()=>resolve()));
+            }
+        }
+        async function refreshOpenAICredentials(saved, signal, dependencies) {
+            const issuer = 'https://auth.openai.com';
+            signal.throwIfAborted();
+            const response = await (dependencies?.fetch ?? fetch)(`${issuer}/api/accounts/oauth/token`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/x-www-form-urlencoded'
+                },
+                body: new URLSearchParams({
+                    grant_type: 'refresh_token',
+                    client_id: saved.client_id,
+                    refresh_token: saved.refresh_token,
+                    resource: 'https://api.openai.com/v1'
+                }),
+                signal,
+                redirect: 'error'
+            });
+            if (!response.ok) throw new Error('OpenAI refresh failed.');
+            const tokens = await response.json();
+            if (!tokens || 'string' != typeof tokens.access_token || !tokens.access_token || 'string' != typeof tokens.refresh_token || !tokens.refresh_token || 'number' != typeof tokens.expires_in || !Number.isFinite(tokens.expires_in) || tokens.expires_in <= 0 || 'string' != typeof tokens.token_type || 'bearer' !== tokens.token_type.toLowerCase() || 'string' != typeof tokens.scope) throw new Error('OpenAI returned an invalid refresh response.');
+            const scopes = tokens.scope.split(/\s+/);
+            if (!scopes.includes('chatgpt.tokens.use.direct')) throw new Error('ChatGPT plan usage is no longer authorized.');
+            if (void 0 !== tokens.id_token) {
+                if ('string' != typeof tokens.id_token || !tokens.id_token) throw new Error('Invalid refreshed ID token.');
+                const keys = dependencies?.keys ?? createRemoteJWKSet(new URL(`${issuer}/.well-known/jwks.json`));
+                const { payload } = await jwtVerify(tokens.id_token, keys, {
+                    issuer,
+                    audience: saved.client_id,
+                    algorithms: [
+                        'RS256'
+                    ],
+                    requiredClaims: [
+                        'sub',
+                        'exp',
+                        'iat'
+                    ]
+                });
+                if (payload.sub !== saved.subject) throw new Error('Refreshed identity does not match the saved account.');
             }
+            signal.throwIfAborted();
+            return {
+                ...saved,
+                access_token: tokens.access_token,
+                refresh_token: tokens.refresh_token,
+                id_token: tokens.id_token ?? saved.id_token,
+                scopes,
+                expires_at: Date.now() + 1000 * tokens.expires_in
+            };
         }
-        async function runModelCommand(rawArgs, deps, io = {
+        const USAGE = `Usage:
+  midscene model siwc login [--no-open] [--port <port>]
+  midscene model siwc refresh
+
+Sign in with ChatGPT or refresh the saved credentials.
+Full credentials are saved to ~/.midscene/siwc.json. Only the access token is printed to stdout.
+Midscene does not collect your credentials.
+
+Options (login):
+  --no-open           Print the authorization URL without opening a browser
+  --port <port>       Loopback callback port (default: an available port)
+  --help, -h          Show this help
+`;
+        async function openBrowser(url) {
+            const command = 'darwin' === process.platform ? 'open' : 'win32' === process.platform ? 'rundll32' : 'xdg-open';
+            const args = 'win32' === process.platform ? [
+                'url.dll,FileProtocolHandler',
+                url
+            ] : [
+                url
+            ];
+            await new Promise((resolve, reject)=>{
+                const child = spawn(command, args, {
+                    stdio: 'ignore',
+                    shell: false
+                });
+                child.once('error', reject);
+                child.once('spawn', ()=>{
+                    child.unref();
+                    resolve();
+                });
+            });
+        }
+        async function runSiwcCommand(args, io = {
             stdout: console.log,
             stderr: console.error
-        }) {
-            const [, action, ...restArgs] = rawArgs;
-            const mergedDeps = {
-                ...getDefaultDeps(io),
-                ...deps
-            };
-            if (!action || '--help' === action || '-h' === action) {
-                io.stdout(MODEL_COMMAND_USAGE);
+        }, credentialsPath = defaultCredentialsPath()) {
+            if (!args.length || args.includes('--help') || args.includes('-h')) {
+                io.stdout(USAGE);
                 return 0;
             }
-            if ('verify' === action) return runModelVerifyCommand(restArgs, mergedDeps, io);
-            if ('eval' === action) {
-                io.stderr('midscene model eval is not implemented yet. It is reserved for future model evaluation suites.');
+            const [action, ...options] = args;
+            if ('login' !== action && 'refresh' !== action) {
+                io.stderr(`Unknown SIWC command: ${action}\n${USAGE}`);
                 return 1;
             }
-            io.stderr(`Unknown midscene model command: ${action}\n\n${MODEL_COMMAND_USAGE}`);
-            return 1;
+            const portOptions = {
+                port: 0,
+                noOpen: false
+            };
+            const seen = new Set();
+            for(let index = 0; index < options.length; index++){
+                const option = options[index];
+                if ('login' !== action || seen.has(option) || ![
+                    '--port',
+                    '--no-open'
+                ].includes(option)) {
+                    io.stderr(`Invalid midscene model siwc arguments.\n${USAGE}`);
+                    return 1;
+                }
+                seen.add(option);
+                if ('--no-open' === option) portOptions.noOpen = true;
+                else {
+                    const value = options[++index];
+                    if (!value || !/^\d+$/.test(value) || Number(value) > 65535) {
+                        io.stderr('--port must be an integer between 0 and 65535.');
+                        return 1;
+                    }
+                    portOptions.port = Number(value);
+                }
+            }
+            const unlock = await lockCredentials(credentialsPath).catch((error)=>{
+                io.stderr(error.message);
+            });
+            if (!unlock) return 1;
+            const controller = new AbortController();
+            const cancel = ()=>controller.abort();
+            const timer = setTimeout(cancel, 300000);
+            process.once('SIGINT', cancel);
+            process.once('SIGTERM', cancel);
+            try {
+                io.stderr(source_default().cyan.bold(`🔄 Starting OpenAI SIWC ${action}...`));
+                const saved = await readRegistration(credentialsPath);
+                const credentials = await (async ()=>{
+                    if ('refresh' === action) return refreshOpenAICredentials(requireCredentials(saved), controller.signal);
+                    const registration = saved ?? {
+                        ext_agent_host_id: `urn:uuid:${randomUUID()}`
+                    };
+                    if (!saved) await saveRegistration(credentialsPath, registration);
+                    const result = await loginWithOpenAI({
+                        port: portOptions.port,
+                        hostId: registration.ext_agent_host_id,
+                        clientId: registration.client_id,
+                        signal: controller.signal,
+                        onAuthorization: async (url)=>{
+                            io.stderr(`\n${source_default().bold('Continue with ChatGPT:')}\n${url}\n\n${source_default().gray('Waiting for authorization...')}`);
+                            if (!portOptions.noOpen) try {
+                                await openBrowser(url);
+                            } catch  {
+                                io.stderr('Open the URL above in your browser to continue.');
+                            }
+                        }
+                    });
+                    if (registration.subject && result.subject !== registration.subject) throw new Error('Login identity does not match the saved account.');
+                    return result;
+                })();
+                await saveRegistration(credentialsPath, credentials);
+                io.stderr('\n🔑 your Access token:');
+                io.stdout(credentials.access_token);
+                const expiresAt = new Intl.DateTimeFormat('en-GB', {
+                    dateStyle: 'medium',
+                    timeStyle: 'long'
+                }).format(credentials.expires_at);
+                const remainingMinutes = Math.ceil((credentials.expires_at - Date.now()) / 60000);
+                const expiresIn = new Intl.RelativeTimeFormat('en', {
+                    numeric: 'always'
+                }).format(60 === remainingMinutes ? 1 : remainingMinutes, 60 === remainingMinutes ? 'hour' : 'minute');
+                io.stderr(`\nExpires at: ${expiresAt} (${expiresIn})`);
+                io.stderr(`\n${source_default().green(`✅ SIWC ${action} succeeded.`)}\n\nYou can use this access token as your model API Key in Midscene by setting MIDSCENE_MODEL_API_KEY.\n\nFull credentials are saved locally to:\n${source_default().cyan(credentialsPath)}\n\n${source_default().gray('Midscene does not collect your credentials.')}`);
+                return 0;
+            } catch  {
+                io.stderr(source_default().red(controller.signal.aborted ? `OpenAI ${action} cancelled or timed out.` : `OpenAI ${action} failed. Check the local credentials file permissions or run midscene model siwc login to authorize again.`));
+                return 1;
+            } finally{
+                clearTimeout(timer);
+                process.removeListener('SIGINT', cancel);
+                process.removeListener('SIGTERM', cancel);
+                await unlock();
+            }
         }
+        const model_command_runModelCommand = (rawArgs, deps, io = {
+            stdout: console.log,
+            stderr: console.error
+        })=>{
+            const [, action, ...restArgs] = rawArgs;
+            if ('siwc' === action) return runSiwcCommand(restArgs, io);
+            const withSiwcUsage = (message)=>message.replace('  midscene model verify\n', '  midscene model verify\n  midscene model siwc <login|refresh> [options]\n');
+            return runModelCommand(rawArgs, {
+                loadDotenv: ()=>loadDotenvConfig({
+                        dotenvDebug: true,
+                        dotenvOverride: true,
+                        log: io.stdout
+                    }),
+                ...deps
+            }, {
+                stdout: (message)=>io.stdout(withSiwcUsage(message)),
+                stderr: (message)=>io.stderr(withSiwcUsage(message))
+            }, 'midscene');
+        };
         const probeWorkflowFormat = (file)=>{
             try {
                 const content = (0, __rspack_external_node_fs_5ea92f0c.readFileSync)(file, 'utf8').replace(/\$\{[^}\r\n]*\}/g, 'MIDSCENE_ENV');
@@ -12937,7 +12963,7 @@ defineYamlBatchTest(test, testOptions);
                 extraCommands: createReportCliCommands()
             });
             if ('model' === firstArg) {
-                const exitCode = await runModelCommand(rawArgs);
+                const exitCode = await model_command_runModelCommand(rawArgs);
                 process.exit(exitCode);
                 return;
             }
@@ -13013,9 +13039,6 @@ defineYamlBatchTest(test, testOptions);
     assert (module) {
         module.exports = __rspack_external_assert;
     },
-    crypto (module) {
-        module.exports = __rspack_external_crypto;
-    },
     fs (module) {
         module.exports = __rspack_external_fs;
     },
@@ -16300,9 +16323,6 @@ defineYamlBatchTest(test, testOptions);
             YError: e1
         };
         module.exports = ue;
-    },
-    "../../node_modules/.pnpm/dotenv@16.4.5/node_modules/dotenv/package.json" (module) {
-        module.exports = JSON.parse('{"name":"dotenv","version":"16.4.5","description":"Loads environment variables from .env file","main":"lib/main.js","types":"lib/main.d.ts","exports":{".":{"types":"./lib/main.d.ts","require":"./lib/main.js","default":"./lib/main.js"},"./config":"./config.js","./config.js":"./config.js","./lib/env-options":"./lib/env-options.js","./lib/env-options.js":"./lib/env-options.js","./lib/cli-options":"./lib/cli-options.js","./lib/cli-options.js":"./lib/cli-options.js","./package.json":"./package.json"},"scripts":{"dts-check":"tsc --project tests/types/tsconfig.json","lint":"standard","lint-readme":"standard-markdown","pretest":"npm run lint && npm run dts-check","test":"tap tests/*.js --100 -Rspec","test:coverage":"tap --coverage-report=lcov","prerelease":"npm test","release":"standard-version"},"repository":{"type":"git","url":"git://github.com/motdotla/dotenv.git"},"funding":"https://dotenvx.com","keywords":["dotenv","env",".env","environment","variables","config","settings"],"readmeFilename":"README.md","license":"BSD-2-Clause","devDependencies":{"@definitelytyped/dtslint":"^0.0.133","@types/node":"^18.11.3","decache":"^4.6.1","sinon":"^14.0.1","standard":"^17.0.0","standard-markdown":"^7.1.0","standard-version":"^9.5.0","tap":"^16.3.0","tar":"^6.1.11","typescript":"^4.8.4"},"engines":{"node":">=12"},"browser":{"fs":false}}');
     }
 };
 var __webpack_module_cache__ = {};