@minniexcode/codex-switch 0.0.6 → 0.0.8

package/dist/app/setup-codex.js

@@ -33,7 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.setupCodex = setupCodex;
+exports.migrateCodex = migrateCodex;
 const fs = __importStar(require("node:fs"));
 const setup_1 = require("../domain/setup");
 const errors_1 = require("../domain/errors");
@@ -42,13 +42,14 @@ const codex_cli_1 = require("../runtime/codex-cli");
 const config_repo_1 = require("../storage/config-repo");
 const fs_utils_1 = require("../storage/fs-utils");
 const providers_repo_1 = require("../storage/providers-repo");
+const auth_repo_1 = require("../storage/auth-repo");
 const run_doctor_1 = require("./run-doctor");
 const run_mutation_1 = require("./run-mutation");
 const MIN_CODEX_VERSION = "0.0.1";
 /**
- * Bootstraps a managed providers.json from the existing Codex directory.
+ * Migrates unmanaged Codex config profiles into a managed providers.json registry.
  */
-function setupCodex(args) {
+async function migrateCodex(args) {
     const available = (0, codex_cli_1.checkCodexAvailable)();
     if (!available.ok) {
         throw (0, errors_1.cliError)("CODEX_NOT_INSTALLED", "codex CLI is not available.", {
@@ -70,8 +71,9 @@ function setupCodex(args) {
     }
     const document = (0, config_repo_1.readStructuredConfig)(args.configPath);
     const profileViews = (0, config_1.buildManagedProfileViews)(document, null);
+    // Migrate can only adopt unmanaged profiles that already contain enough runtime data to become managed.
     const adoptableProfiles = profileViews
-        .filter((view) => view.source === "unmanaged" && view.model && view.modelProvider === view.name && view.baseUrl)
+        .filter((view) => view.source === "unmanaged" && view.model && view.modelProvider === view.name && view.baseUrl && view.envKey)
         .map((view) => view.name)
         .sort();
     if (profileViews.length === 0) {
@@ -81,20 +83,20 @@ function setupCodex(args) {
     }
     const invalidAdoptProfiles = args.adoptProfiles.filter((profile) => !adoptableProfiles.includes(profile));
     if (invalidAdoptProfiles.length > 0) {
-        throw (0, errors_1.cliError)("INVALID_ARGUMENT", "setup only adopts unmanaged profiles that already contain model, model_provider, and a matching model_providers base_url.", {
+        throw (0, errors_1.cliError)("INVALID_ARGUMENT", "migrate only adopts unmanaged profiles that already contain model, model_provider, and matching model_providers base_url/env_key.", {
             invalidProfiles: invalidAdoptProfiles.sort(),
             adoptableProfiles,
         });
     }
     if (args.adoptProfiles.length === 0) {
-        throw (0, errors_1.cliError)("INVALID_ARGUMENT", "setup requires at least one explicit profile to adopt.", {
+        throw (0, errors_1.cliError)("INVALID_ARGUMENT", "migrate requires at least one explicit profile to adopt.", {
             adoptableProfiles,
         });
     }
     const drafts = (0, setup_1.buildSetupDrafts)(args.adoptProfiles, args.providerDetailsByProfile);
     const incompleteProfiles = (0, setup_1.findIncompleteSetupProfiles)(drafts);
     if (incompleteProfiles.length > 0) {
-        throw (0, errors_1.cliError)("INVALID_ARGUMENT", "setup requires complete provider data for every selected profile.", {
+        throw (0, errors_1.cliError)("INVALID_ARGUMENT", "migrate requires complete provider data for every selected profile.", {
             incompleteProfiles,
         });
     }
@@ -117,15 +119,20 @@ function setupCodex(args) {
         codexDir: args.codexDir,
         backupsDir: args.backupsDir,
         latestBackupPath: args.latestBackupPath,
-        operation: "setup",
+        operation: "migrate",
         files: [
             { absolutePath: args.providersPath, relativePath: "providers.json" },
             { absolutePath: args.configPath, relativePath: "config.toml" },
+            { absolutePath: args.authPath, relativePath: "auth.json" },
         ],
         mutate: () => {
+            // migrate currently preserves config structure and only asserts that the file remains writable inside the mutation flow.
             const configPlan = (0, config_repo_1.createConfigMutationPlan)(document, {});
             (0, providers_repo_1.writeProvidersFile)(args.providersPath, finalProviders);
             (0, config_repo_1.applyConfigMutation)(args.configPath, document, configPlan);
+            const activeProviderName = (0, config_repo_1.resolveActiveProviderName)(document, finalProviders);
+            const existingAuth = (0, auth_repo_1.readAuthFileIfExists)(args.authPath);
+            (0, auth_repo_1.writeAuthFile)(args.authPath, finalProviders.providers[activeProviderName], existingAuth ?? undefined);
             return {
                 codexDir: args.codexDir,
                 strategy: args.strategy,
@@ -140,10 +147,12 @@ function setupCodex(args) {
             };
         },
     });
-    const doctor = (0, run_doctor_1.runDoctor)({
+    // Re-run doctor on the final state so migrate returns immediate post-migration diagnostics.
+    const doctor = await (0, run_doctor_1.runDoctor)({
         codexDir: args.codexDir,
         configPath: args.configPath,
         providersPath: args.providersPath,
+        authPath: args.authPath,
     });
     return {
         data: {

package/dist/app/show-config.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.showConfig = showConfig;
 const config_1 = require("../domain/config");
 const errors_1 = require("../domain/errors");
+const providers_1 = require("../domain/providers");
 const config_repo_1 = require("../storage/config-repo");
 const providers_repo_1 = require("../storage/providers-repo");
 /**
@@ -28,7 +29,14 @@ function showConfig(args) {
         data: {
             activeProfile: document.activeProfile,
             selectedProfile,
-            profiles,
+            profiles: profiles.map((profile) => ({
+                ...profile,
+                managedProviderEnvKeys: (0, providers_1.findProvidersByProfile)(providers, profile.name).map((providerName) => ({
+                    providerName,
+                    envKey: providers.providers[providerName].envKey,
+                    matchesRuntime: providers.providers[providerName].envKey === profile.envKey,
+                })),
+            })),
         },
     };
 }

package/dist/app/switch-provider.js

@@ -2,14 +2,18 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.switchProvider = switchProvider;
 const errors_1 = require("../domain/errors");
+const providers_1 = require("../domain/providers");
 const config_repo_1 = require("../storage/config-repo");
 const providers_repo_1 = require("../storage/providers-repo");
+const auth_repo_1 = require("../storage/auth-repo");
+const copilot_bridge_1 = require("../runtime/copilot-bridge");
+const copilot_installer_1 = require("../runtime/copilot-installer");
+const copilot_adapter_1 = require("../runtime/copilot-adapter");
 const run_mutation_1 = require("./run-mutation");
-const codex_cli_1 = require("../runtime/codex-cli");
 /**
- * Switches the active Codex profile and optionally refreshes the CLI login session.
+ * Switches the active Codex profile and rewrites auth.json for the target provider.
  */
-function switchProvider(args) {
+async function switchProvider(args) {
     const providers = (0, providers_repo_1.readProvidersFile)(args.providersPath);
     const provider = providers.providers[args.providerName];
     if (!provider) {
@@ -18,6 +22,57 @@ function switchProvider(args) {
         });
     }
     const document = (0, config_repo_1.ensureProfileExists)(args.configPath, provider.profile, args.providerName);
+    const envKey = (0, config_repo_1.requireRuntimeEnvKey)(document, provider.profile);
+    if (provider.envKey !== envKey) {
+        throw (0, errors_1.cliError)("PROVIDER_ENV_KEY_MISMATCH", `Provider "${args.providerName}" envKey does not match runtime env_key.`, {
+            provider: args.providerName,
+            profile: provider.profile,
+            providerEnvKey: provider.envKey,
+            runtimeEnvKey: envKey,
+        });
+    }
+    if ((0, providers_1.isCopilotBridgeProvider)(provider)) {
+        const installStatus = (0, copilot_installer_1.probeCopilotSdkInstall)();
+        if (!installStatus.installed) {
+            throw (0, errors_1.cliError)("COPILOT_SDK_MISSING", "The optional Copilot SDK runtime is not installed.", {
+                installDir: installStatus.installDir,
+                packageName: installStatus.packageName,
+            });
+        }
+        await (0, copilot_adapter_1.readCopilotAuthState)();
+        const bridge = await (0, copilot_bridge_1.ensureCopilotBridge)(args.providerName, provider);
+        try {
+            return (0, run_mutation_1.runMutation)({
+                codexDir: args.codexDir,
+                backupsDir: args.backupsDir,
+                latestBackupPath: args.latestBackupPath,
+                operation: "switch",
+                files: [
+                    { absolutePath: args.configPath, relativePath: "config.toml" },
+                    { absolutePath: args.authPath, relativePath: "auth.json" },
+                ],
+                mutate: () => {
+                    const configPlan = (0, config_repo_1.createConfigMutationPlan)(document, {
+                        setActiveProfile: provider.profile,
+                    });
+                    (0, config_repo_1.applyConfigMutation)(args.configPath, document, configPlan);
+                    const existingAuth = (0, auth_repo_1.readAuthFileIfExists)(args.authPath);
+                    (0, auth_repo_1.writeAuthFile)(args.authPath, provider, existingAuth ?? undefined);
+                    return {
+                        provider: args.providerName,
+                        profile: provider.profile,
+                        envKey: provider.envKey,
+                    };
+                },
+            });
+        }
+        catch (error) {
+            if (!bridge.reused) {
+                (0, copilot_bridge_1.stopCopilotBridge)();
+            }
+            throw error;
+        }
+    }
     return (0, run_mutation_1.runMutation)({
         codexDir: args.codexDir,
         backupsDir: args.backupsDir,
@@ -31,15 +86,13 @@ function switchProvider(args) {
             const configPlan = (0, config_repo_1.createConfigMutationPlan)(document, {
                 setActiveProfile: provider.profile,
             });
-            // Update the runtime profile first so any subsequent login is associated with the new target.
             (0, config_repo_1.applyConfigMutation)(args.configPath, document, configPlan);
-            if (!args.noLogin) {
-                (0, codex_cli_1.runCodexLogin)(provider.apiKey, args.codexDir);
-            }
+            const existingAuth = (0, auth_repo_1.readAuthFileIfExists)(args.authPath);
+            (0, auth_repo_1.writeAuthFile)(args.authPath, provider, existingAuth ?? undefined);
             return {
                 provider: args.providerName,
                 profile: provider.profile,
-                loginPerformed: !args.noLogin,
+                envKey: provider.envKey,
             };
         },
     });

package/dist/cli/add-interactive.js

@@ -1,9 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.promptTags = exports.parseTags = exports.createNonInteractiveAddError = exports.COMMON_TAG_CHOICES = exports.collectAddInput = void 0;
+exports.promptTags = exports.createNonInteractiveAddError = exports.COMMON_TAG_CHOICES = exports.collectAddInput = void 0;
+/**
+ * Compatibility facade that re-exports interactive add helpers for older imports.
+ */
 var add_interactive_1 = require("../interaction/add-interactive");
 Object.defineProperty(exports, "collectAddInput", { enumerable: true, get: function () { return add_interactive_1.collectAddInput; } });
 Object.defineProperty(exports, "COMMON_TAG_CHOICES", { enumerable: true, get: function () { return add_interactive_1.COMMON_TAG_CHOICES; } });
 Object.defineProperty(exports, "createNonInteractiveAddError", { enumerable: true, get: function () { return add_interactive_1.createNonInteractiveAddError; } });
-Object.defineProperty(exports, "parseTags", { enumerable: true, get: function () { return add_interactive_1.parseTags; } });
 Object.defineProperty(exports, "promptTags", { enumerable: true, get: function () { return add_interactive_1.promptTags; } });

package/dist/cli/args.js

@@ -1,6 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.parseArgs = exports.hasFlag = exports.getSingleOption = void 0;
+/**
+ * Compatibility facade that re-exports shared CLI argument parsing helpers.
+ */
 var args_1 = require("../commands/args");
 Object.defineProperty(exports, "getSingleOption", { enumerable: true, get: function () { return args_1.getSingleOption; } });
 Object.defineProperty(exports, "hasFlag", { enumerable: true, get: function () { return args_1.hasFlag; } });

package/dist/cli/help.js

@@ -1,6 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.isKnownCommandName = exports.getKnownCommandNames = exports.buildHelpText = void 0;
+/**
+ * Compatibility facade that re-exports CLI help helpers from the commands layer.
+ */
 var help_1 = require("../commands/help");
 Object.defineProperty(exports, "buildHelpText", { enumerable: true, get: function () { return help_1.buildHelpText; } });
 Object.defineProperty(exports, "getKnownCommandNames", { enumerable: true, get: function () { return help_1.getKnownCommandNames; } });

package/dist/cli/interactive.js

@@ -1,6 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.promptForProviderSelection = exports.getRollbackSummaryById = exports.getRollbackSummary = exports.exportTargetExists = exports.confirmRollback = exports.confirmProviderRemoval = exports.confirmImport = exports.confirmExportOverwrite = exports.collectSetupProviderDetails = exports.collectEditInput = exports.chooseSetupStrategy = exports.chooseSetupProfiles = exports.chooseCodexDir = exports.canPrompt = void 0;
+/**
+ * Compatibility facade that re-exports interactive command helpers.
+ */
 var interactive_1 = require("../interaction/interactive");
 Object.defineProperty(exports, "canPrompt", { enumerable: true, get: function () { return interactive_1.canPrompt; } });
 Object.defineProperty(exports, "chooseCodexDir", { enumerable: true, get: function () { return interactive_1.chooseCodexDir; } });

package/dist/cli/output.js

@@ -90,7 +90,8 @@ function renderHumanSuccess(command, data, warnings) {
                         ? ` tags=${provider.tags.join(",")}`
                         : "";
                     const note = provider.note ? ` note=${provider.note}` : "";
-                    lines.push(`${provider.name} -> ${provider.profile}${tags}${note}`);
+                    const envKey = provider.envKey ? ` envKey=${provider.envKey}` : "";
+                    lines.push(`${provider.name} -> ${provider.profile}${envKey}${tags}${note}`);
                 }
             }
             break;
@@ -100,6 +101,7 @@ function renderHumanSuccess(command, data, warnings) {
             lines.push(`Provider: ${String(data?.providerName ?? "")}`);
             lines.push(`profile: ${String(provider.profile ?? "")}`);
             lines.push(`apiKey: ${String(provider.apiKey ?? "")}`);
+            lines.push(`envKey: ${String(provider.envKey ?? "")}`);
             if (provider.baseUrl) {
                 lines.push(`baseUrl: ${String(provider.baseUrl)}`);
             }
@@ -120,13 +122,17 @@ function renderHumanSuccess(command, data, warnings) {
             lines.push(`providersExists: ${String(data?.providersExists ?? false)}`);
             lines.push(`currentProfile: ${String(data?.currentProfile ?? "")}`);
             lines.push(`mappedProvider: ${String(data?.provider ?? "")}`);
+            lines.push(`activeProviderResolvable: ${String(data?.activeProviderResolvable ?? false)}`);
+            const auth = data?.auth ?? {};
+            lines.push(`authExists: ${String(auth.exists ?? false)}`);
+            lines.push(`authManagedKeys: ${Array.isArray(auth.managedSecretKeys) ? auth.managedSecretKeys.join(",") : ""}`);
             lines.push(`issues: ${Array.isArray(data?.issues) ? (data?.issues).length : 0}`);
             break;
         case "config-show": {
             lines.push(`activeProfile: ${String(data?.activeProfile ?? "")}`);
             const profiles = data?.profiles ?? [];
             for (const profile of profiles) {
-                lines.push(`${String(profile.name)} managed=${String(profile.managed)} active=${String(profile.isActive)} source=${String(profile.source)} model=${String(profile.model ?? "")} modelProvider=${String(profile.modelProvider ?? "")} baseUrl=${String(profile.baseUrl ?? "")}`);
+                lines.push(`${String(profile.name)} managed=${String(profile.managed)} active=${String(profile.isActive)} source=${String(profile.source)} model=${String(profile.model ?? "")} modelProvider=${String(profile.modelProvider ?? "")} baseUrl=${String(profile.baseUrl ?? "")} envKey=${String(profile.envKey ?? "")}`);
             }
             break;
         }
@@ -139,8 +145,8 @@ function renderHumanSuccess(command, data, warnings) {
         }
         case "switch":
             lines.push(`Switched to provider ${String(data?.provider ?? "")} using profile ${String(data?.profile ?? "")}.`);
+            lines.push(`envKey: ${String(data?.envKey ?? "")}`);
             lines.push(`Backup: ${String(data?.backupPath ?? "")}`);
-            lines.push(`Login performed: ${String(data?.loginPerformed ?? false)}`);
             break;
         case "import":
             lines.push(`Imported providers from file using mode ${String(data?.mode ?? "replace")}. Backup: ${String(data?.backupPath ?? "")}`);
@@ -148,12 +154,21 @@ function renderHumanSuccess(command, data, warnings) {
         case "export":
             lines.push(`Exported providers to ${String(data?.exportedTo ?? "")}.`);
             break;
-        case "setup":
-            lines.push(`Initialized providers in ${String(data?.codexDir ?? "")} using ${String(data?.strategy ?? "")}.`);
+        case "init":
+            lines.push(`Initialized Codex directory ${String(data?.codexDir ?? "")}.`);
+            lines.push(`Created codexDir: ${String(data?.createdCodexDir ?? false)}`);
+            lines.push(`Created providers.json: ${String(data?.createdProvidersFile ?? false)}`);
+            lines.push(`providersAlreadyExisted: ${String(data?.providersAlreadyExisted ?? false)}`);
+            break;
+        case "migrate":
+            lines.push(`Migrated providers in ${String(data?.codexDir ?? "")} using ${String(data?.strategy ?? "")}.`);
             lines.push(`Providers initialized: ${String(data?.providersInitialized ?? 0)}`);
             lines.push(`Doctor healthy: ${String(data?.doctor?.healthy ?? false)}`);
             lines.push(`Backup: ${String(data?.backupPath ?? "")}`);
             break;
+        case "setup":
+            lines.push("setup is deprecated. Use `codexs init` or `codexs migrate`.");
+            break;
         case "edit":
             lines.push(`Updated provider ${String(data?.provider ?? "")}. Backup: ${String(data?.backupPath ?? "")}`);
             lines.push(`Updated fields: ${Array.isArray(data?.updatedFields) ? (data?.updatedFields).join(", ") : ""}`);

package/dist/cli/prompt.js

@@ -1,5 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createPromptRuntime = void 0;
+/**
+ * Compatibility facade that re-exports the CLI prompt runtime types and factory.
+ */
 var prompt_1 = require("../interaction/prompt");
 Object.defineProperty(exports, "createPromptRuntime", { enumerable: true, get: function () { return prompt_1.createPromptRuntime; } });

package/dist/cli.js

@@ -9,7 +9,7 @@ const args_1 = require("./commands/args");
 const help_1 = require("./commands/help");
 const errors_1 = require("./domain/errors");
 const output_1 = require("./cli/output");
-const VERSION = "0.0.6";
+const VERSION = "0.0.8";
 /**
  * Prints the command help text to stdout.
  */

package/dist/commands/handlers.js

@@ -40,6 +40,7 @@ const edit_provider_1 = require("../app/edit-provider");
 const export_providers_1 = require("../app/export-providers");
 const get_current_profile_1 = require("../app/get-current-profile");
 const get_status_1 = require("../app/get-status");
+const init_codex_1 = require("../app/init-codex");
 const import_providers_1 = require("../app/import-providers");
 const list_config_profiles_1 = require("../app/list-config-profiles");
 const list_backups_1 = require("../app/list-backups");
@@ -57,6 +58,7 @@ const providers_1 = require("../domain/providers");
 const add_interactive_1 = require("../interaction/add-interactive");
 const interactive_1 = require("../interaction/interactive");
 const prompt_1 = require("../interaction/prompt");
+const copilot_installer_1 = require("../runtime/copilot-installer");
 const config_repo_1 = require("../storage/config-repo");
 const codex_paths_1 = require("../storage/codex-paths");
 const providers_repo_1 = require("../storage/providers-repo");
@@ -87,7 +89,54 @@ async function handleRegisteredCommand(ctx, parsed, runtime = (0, prompt_1.creat
         case "current":
             return (0, get_current_profile_1.getCurrentProfile)(paths.configPath);
         case "status":
-            return (0, get_status_1.getStatus)(paths.codexDir, paths.configPath, paths.providersPath);
+            return (0, get_status_1.getStatus)(paths.codexDir, paths.configPath, paths.providersPath, paths.authPath);
+        case "init": {
+            let codexDir = ctx.options.codexDir;
+            const candidates = (0, config_repo_1.findCodexDirCandidates)(ctx.options.codexDirExplicit ? ctx.options.codexDir : null);
+            if (!ctx.options.codexDirExplicit) {
+                if (candidates.length > 1) {
+                    if (!(0, interactive_1.canPrompt)(runtime, ctx.options.json)) {
+                        throw (0, errors_1.cliError)("CODEX_DIR_AMBIGUOUS", "Multiple Codex directories were found.", {
+                            candidates,
+                        });
+                    }
+                    codexDir = await (0, interactive_1.chooseCodexDir)(runtime, candidates);
+                }
+                else if (candidates.length === 0) {
+                    if (!(0, interactive_1.canPrompt)(runtime, ctx.options.json)) {
+                        throw (0, errors_1.cliError)("CODEX_DIR_NOT_FOUND", "No Codex directory could be found.", {
+                            codexDir: ctx.options.codexDir,
+                        });
+                    }
+                    codexDir = await (0, interactive_1.chooseCodexDir)(runtime, candidates);
+                }
+                else {
+                    codexDir = candidates[0];
+                }
+            }
+            setupPaths = (0, codex_paths_1.createCodexPaths)(codexDir);
+            let createCodexDir = false;
+            if (!fs.existsSync(setupPaths.codexDir)) {
+                if (!(0, interactive_1.canPrompt)(runtime, ctx.options.json)) {
+                    throw (0, errors_1.cliError)("CODEX_DIR_NOT_FOUND", "The requested Codex directory does not exist.", {
+                        codexDir: setupPaths.codexDir,
+                    });
+                }
+                createCodexDir = await (0, interactive_1.confirmCreateCodexDir)(runtime, setupPaths.codexDir);
+                if (!createCodexDir) {
+                    throw (0, errors_1.cliError)("CODEX_DIR_NOT_FOUND", "The requested Codex directory does not exist.", {
+                        codexDir: setupPaths.codexDir,
+                    });
+                }
+            }
+            return (0, init_codex_1.initCodex)({
+                codexDir: setupPaths.codexDir,
+                providersPath: setupPaths.providersPath,
+                configPath: setupPaths.configPath,
+                authPath: setupPaths.authPath,
+                createCodexDir,
+            });
+        }
         case "config-show":
             return (0, show_config_1.showConfig)({
                 configPath: paths.configPath,
@@ -107,6 +156,9 @@ async function handleRegisteredCommand(ctx, parsed, runtime = (0, prompt_1.creat
             if (!providerName) {
                 throw (0, errors_1.cliError)("PROVIDER_NOT_FOUND", "Missing provider name for switch command.");
             }
+            if ((0, args_1.hasFlag)(parsed.commandOptions, "--install-copilot-sdk")) {
+                throw (0, errors_1.cliError)("INVALID_ARGUMENT", "--install-copilot-sdk is only supported with add --copilot.");
+            }
             return (0, switch_provider_1.switchProvider)({
                 codexDir: paths.codexDir,
                 backupsDir: paths.backupsDir,
@@ -115,7 +167,6 @@ async function handleRegisteredCommand(ctx, parsed, runtime = (0, prompt_1.creat
                 providersPath: paths.providersPath,
                 authPath: paths.authPath,
                 providerName,
-                noLogin: (0, args_1.hasFlag)(parsed.commandOptions, "--no-login"),
             });
         }
         case "import": {
@@ -130,6 +181,7 @@ async function handleRegisteredCommand(ctx, parsed, runtime = (0, prompt_1.creat
                 const imported = (0, providers_1.validateProvidersShape)(JSON.parse(fs.readFileSync(sourceFile, "utf8")));
                 const current = (0, providers_repo_1.readProvidersFileIfExists)(paths.providersPath);
                 const next = merge ? (0, providers_repo_1.mergeProviders)(current, imported) : imported;
+                // Precompute orphaned references during confirmation so the interactive path fails before mutation.
                 (0, config_1.buildManagedProfileViews)(document, next)
                     .filter((view) => view.source === "orphaned-reference")
                     .map((view) => view.name)
@@ -172,8 +224,23 @@ async function handleRegisteredCommand(ctx, parsed, runtime = (0, prompt_1.creat
             let model = (0, args_1.getSingleOption)(parsed.commandOptions, "--model", false);
             let note = (0, args_1.getSingleOption)(parsed.commandOptions, "--note", false);
             let tags = parsed.commandOptions.get("--tag") ?? [];
-            const createProfile = (0, args_1.hasFlag)(parsed.commandOptions, "--create-profile");
-            if (!providerName || !profile || !apiKey) {
+            let createProfile = (0, args_1.hasFlag)(parsed.commandOptions, "--create-profile");
+            const copilot = (0, args_1.hasFlag)(parsed.commandOptions, "--copilot");
+            const bridgeHost = (0, args_1.getSingleOption)(parsed.commandOptions, "--bridge-host", false);
+            const bridgePortValue = (0, args_1.getSingleOption)(parsed.commandOptions, "--bridge-port", false);
+            const bridgeApiKey = (0, args_1.getSingleOption)(parsed.commandOptions, "--bridge-api-key", false);
+            let installCopilotSdk = (0, args_1.hasFlag)(parsed.commandOptions, "--install-copilot-sdk");
+            const bridgePort = bridgePortValue ? Number(bridgePortValue) : null;
+            if (copilot && apiKey) {
+                throw (0, errors_1.cliError)("INVALID_ARGUMENT", "--copilot does not allow --api-key. Use --bridge-api-key for the local bridge secret.");
+            }
+            if (bridgePortValue && (!Number.isInteger(bridgePort) || bridgePort === null || bridgePort <= 0)) {
+                throw (0, errors_1.cliError)("INVALID_ARGUMENT", "--bridge-port must be a positive integer.");
+            }
+            if (copilot && !installCopilotSdk && (0, interactive_1.canPrompt)(runtime, ctx.options.json) && !(0, copilot_installer_1.probeCopilotSdkInstall)().installed) {
+                installCopilotSdk = await runtime.confirmAction("The optional Copilot SDK runtime is not installed. Install it now?");
+            }
+            if (!providerName || !profile || (!apiKey && !copilot)) {
                 if (ctx.options.json || !runtime.isInteractive()) {
                     throw (0, add_interactive_1.createNonInteractiveAddError)();
                 }
@@ -184,13 +251,15 @@ async function handleRegisteredCommand(ctx, parsed, runtime = (0, prompt_1.creat
                     baseUrl,
                     note,
                     tags,
-                }, (candidate) => Boolean((0, providers_repo_1.readProvidersFileIfExists)(paths.providersPath).providers[candidate]));
+                }, (candidate) => Boolean((0, providers_repo_1.readProvidersFileIfExists)(paths.providersPath).providers[candidate]), (candidate) => Boolean((0, config_repo_1.readStructuredConfig)(paths.configPath).profiles.find((profileView) => profileView.name === candidate)));
                 providerName = prompted.providerName;
                 profile = prompted.profile;
                 apiKey = prompted.apiKey;
+                model = prompted.model ?? null;
                 baseUrl = prompted.baseUrl ?? null;
                 note = prompted.note ?? null;
                 tags = prompted.tags;
+                createProfile = createProfile || prompted.createProfile;
             }
             return (0, add_provider_1.addProvider)({
                 codexDir: paths.codexDir,
@@ -198,14 +267,21 @@ async function handleRegisteredCommand(ctx, parsed, runtime = (0, prompt_1.creat
                 latestBackupPath: paths.latestBackupPath,
                 providersPath: paths.providersPath,
                 configPath: paths.configPath,
+                authPath: paths.authPath,
                 providerName,
                 profile,
-                apiKey,
+                apiKey: apiKey ?? "",
                 baseUrl,
                 model,
                 note,
                 tags,
                 createProfile,
+                copilot,
+                bridgeHost,
+                bridgePort,
+                bridgeApiKey,
+                installCopilotSdk,
+                interactive: (0, interactive_1.canPrompt)(runtime, ctx.options.json),
             });
         }
         case "edit": {
@@ -235,6 +311,7 @@ async function handleRegisteredCommand(ctx, parsed, runtime = (0, prompt_1.creat
                 if (!provider) {
                     throw (0, errors_1.cliError)("PROVIDER_NOT_FOUND", `Provider "${providerName}" was not found.`);
                 }
+                // Prompted edit starts from the stored record so blank answers can safely preserve current values.
                 const prompted = await (0, interactive_1.collectEditInput)(runtime, provider);
                 profile = prompted.profile;
                 apiKey = prompted.apiKey;
@@ -251,6 +328,7 @@ async function handleRegisteredCommand(ctx, parsed, runtime = (0, prompt_1.creat
                 latestBackupPath: paths.latestBackupPath,
                 providersPath: paths.providersPath,
                 configPath: paths.configPath,
+                authPath: paths.authPath,
                 providerName,
                 profile,
                 apiKey,
@@ -293,8 +371,9 @@ async function handleRegisteredCommand(ctx, parsed, runtime = (0, prompt_1.creat
                 codexDir: paths.codexDir,
                 configPath: paths.configPath,
                 providersPath: paths.providersPath,
+                authPath: paths.authPath,
             });
-        case "setup": {
+        case "migrate": {
             let codexDir = ctx.options.codexDir;
             const candidates = (0, config_repo_1.findCodexDirCandidates)(ctx.options.codexDirExplicit ? ctx.options.codexDir : null);
             if (!ctx.options.codexDirExplicit) {
@@ -304,6 +383,7 @@ async function handleRegisteredCommand(ctx, parsed, runtime = (0, prompt_1.creat
                             candidates,
                         });
                     }
+                    // Ambiguous auto-discovery must be resolved before path-dependent flags are interpreted.
                     codexDir = await (0, interactive_1.chooseCodexDir)(runtime, candidates);
                 }
                 else if (candidates.length === 0) {
@@ -320,7 +400,7 @@ async function handleRegisteredCommand(ctx, parsed, runtime = (0, prompt_1.creat
             const overwrite = (0, args_1.hasFlag)(parsed.commandOptions, "--overwrite");
             const merge = (0, args_1.hasFlag)(parsed.commandOptions, "--merge");
             if (overwrite && merge) {
-                throw (0, errors_1.cliError)("INVALID_ARGUMENT", "setup does not allow both --merge and --overwrite.");
+                throw (0, errors_1.cliError)("INVALID_ARGUMENT", "migrate does not allow both --merge and --overwrite.");
             }
             let strategy = overwrite ? "overwrite" : merge ? "merge" : null;
             const providersExists = fs.existsSync(setupPaths.providersPath);
@@ -338,11 +418,12 @@ async function handleRegisteredCommand(ctx, parsed, runtime = (0, prompt_1.creat
             }
             const document = (0, config_repo_1.readStructuredConfig)(setupPaths.configPath);
             const adoptableProfiles = (0, config_1.buildManagedProfileViews)(document, null)
-                .filter((view) => view.source === "unmanaged" && view.model && view.modelProvider === view.name && view.baseUrl)
+                .filter((view) => view.source === "unmanaged" && view.model && view.modelProvider === view.name && view.baseUrl && view.envKey)
                 .map((view) => ({
                 name: view.name,
                 model: view.model,
                 baseUrl: view.baseUrl,
+                envKey: view.envKey,
             }))
                 .sort((left, right) => left.name.localeCompare(right.name));
             const selectedProfiles = Array.from((0, config_repo_1.listConfigProfiles)(setupPaths.configPath)).sort();
@@ -350,20 +431,29 @@ async function handleRegisteredCommand(ctx, parsed, runtime = (0, prompt_1.creat
             let providerDetailsByProfile = {};
             if ((0, interactive_1.canPrompt)(runtime, ctx.options.json)) {
                 adoptProfiles = await (0, interactive_1.chooseSetupProfiles)(runtime, adoptableProfiles);
-                providerDetailsByProfile = await (0, interactive_1.collectSetupProviderDetails)(runtime, adoptProfiles);
+                // Defaults are derived from config.toml so interactive setup only asks for missing provider metadata.
+                providerDetailsByProfile = await (0, interactive_1.collectSetupProviderDetails)(runtime, adoptProfiles, adoptableProfiles.reduce((accumulator, profile) => {
+                    accumulator[profile.name] = {
+                        providerName: profile.name,
+                        envKey: profile.envKey,
+                        baseUrl: profile.baseUrl,
+                    };
+                    return accumulator;
+                }, {}));
             }
             else {
-                throw (0, errors_1.cliError)("INVALID_ARGUMENT", "setup currently requires an interactive TTY to choose adoptable profiles and collect provider details.", {
+                throw (0, errors_1.cliError)("INVALID_ARGUMENT", "migrate currently requires an interactive TTY to choose adoptable profiles and collect provider details.", {
                     adoptableProfiles,
                     availableProfiles: selectedProfiles,
-                    suggestion: "Run `codexs setup` in an interactive terminal. Non-interactive setup input flags are not available in 0.0.6.",
+                    suggestion: "Run `codexs migrate` in an interactive terminal. Non-interactive migrate flags for profile selection and provider secrets are not available in this release.",
                 });
             }
-            return (0, setup_codex_1.setupCodex)({
+            return (0, setup_codex_1.migrateCodex)({
                 codexDirOption: ctx.options.codexDir,
                 codexDir: setupPaths.codexDir,
                 configPath: setupPaths.configPath,
                 providersPath: setupPaths.providersPath,
+                authPath: setupPaths.authPath,
                 backupsDir: setupPaths.backupsDir,
                 latestBackupPath: setupPaths.latestBackupPath,
                 strategy: strategy ?? "overwrite",
@@ -371,6 +461,10 @@ async function handleRegisteredCommand(ctx, parsed, runtime = (0, prompt_1.creat
                 providerDetailsByProfile,
             });
         }
+        case "setup":
+            throw (0, errors_1.cliError)("COMMAND_DEPRECATED", "setup has been split into init and migrate.", {
+                replacements: ["init", "migrate"],
+            });
         case "backups-list":
             return (0, list_backups_1.listBackupEntries)(paths.backupsDir);
         case "rollback":

package/dist/commands/help.js

@@ -59,7 +59,8 @@ function buildHelpText(commandName) {
             "  rollback restores files from a managed backup.",
             "",
             "Examples:",
-            "  codexs setup",
+            "  codexs init",
+            "  codexs migrate",
             "  codexs list",
             "  codexs switch",
             "  codexs add packycode --profile packycode --api-key sk-xxx",