@minniexcode/codex-switch 0.0.8 → 0.0.10

package/README.AI.md

@@ -54,7 +54,8 @@ Shared flags:
 Operational model:
 
 - `providers.json` is the management-state source of truth
-- `config.toml` and `auth.json` are runtime mirrors
+- `config.toml` is the managed runtime-routing file
+- `auth.json` is the active auth projection file for direct providers and is also inspected by status/doctor
 - `backups/latest.json` tracks the latest rollback state
 - mutating commands should back up first and run under a lightweight file lock
 
@@ -93,12 +94,13 @@ codexs status --json
 Current package version in this repository:
 
 ```text
-0.0.7
+0.0.10
 ```
 
 Recent version summary:
 
-- `0.0.7`: command-surface refactor, env_key/auth-mirror model corrections, and the `setup` split into `init` plus `migrate`
+- `0.0.10`: `init` / `migrate` command split finalized, `setup` deprecated, and the managed provider model reduced to static profile plus `base_url` configuration
+- `0.0.7`: command-surface refactor, env_key/auth-mirror model corrections, and the initial `setup` split toward `init` plus `migrate`
 - `0.0.4`: setup/show/edit/backups list/specific rollback/import merge and clearer CLI semantics
 - `0.0.3`: interactive TTY flows and improved help
 - `0.0.2`: mutation orchestration, backups, rollback, locks, drift detection improvements

package/README.CN.md

@@ -17,30 +17,43 @@
 
 ## 现在可以做什么
 
-当前 MVP 命令如下：
+当前命令面如下：
 
 ```bash
+codexs init
+codexs migrate
 codexs list
+codexs show <provider>
 codexs current
-codexs switch <provider>
 codexs status
+codexs edit <provider>
+codexs switch <provider>
 codexs import <file>
 codexs export <file>
 codexs add <provider>
 codexs remove <provider>
+codexs backups list
 codexs doctor
 codexs rollback
+codexs setup
 ```
 
 对应能力包括：
 
+- 初始化空的受管 `providers.json`
+- 从已有 `config.toml` adopt 可管理的 runtime profile
 - 查看本地已管理的 provider
+- 查看单个 provider 详情
 - 查看当前激活的 profile
+- 查看本地运行态摘要
+- 编辑已有 provider
 - 安全切换 provider
 - 导入和导出 provider 映射
 - 新增和删除 provider
+- 查看备份列表
 - 检查配置漂移和常见本地问题
 - 在变更前自动备份，并在失败时回滚
+- 保留 `setup` 作为弃用入口，并引导到 `init` / `migrate`
 
 ## 简单用法
 
@@ -65,6 +78,8 @@ codexs --help
 典型使用方式：
 
 ```bash
+codexs init
+codexs migrate
 codexs list
 codexs current
 codexs add my-provider --profile my-provider --api-key sk-xxx
@@ -111,7 +126,8 @@ codexs status --json
 存储模型：
 
 - `providers.json` 是管理态的单一事实来源
-- `config.toml` 和 `auth.json` 是运行态文件
+- `config.toml` 是受管的运行时路由文件
+- `auth.json` 是独立的 Codex 认证状态文件，`status` / `doctor` 只读检查它
 - `backups/latest.json` 记录最近一次可回滚窗口
 
 注意：`providers.json` 可能包含 API key，应视为本地敏感文件。
@@ -128,6 +144,12 @@ codexs status --json
 
 ## 最近 3 个版本更新
 
+### 0.0.10
+
+- 正式拆分 `setup`：新增 `init` 和 `migrate`，`setup` 变为弃用命令
+- 增加 `show`、`edit`、`backups list` 等对当前命令面的整理
+- 清理 provider/runtime 管理语义，CLI 只负责静态 profile 与 `base_url` 层配置
+
 ### 0.0.3
 
 - 为 `add`、`switch`、`remove`、`import`、`export`、`rollback` 增加了交互式 TTY 流程

package/README.md

@@ -18,7 +18,7 @@ What it does:
 - Run diagnostics and detect local drift
 - List backups and roll back to a previous managed state
 
-Current version: `0.0.8`
+Current version: `0.0.10`
 
 ## Install
 
@@ -117,7 +117,8 @@ Managed files:
 Notes:
 
 - `providers.json` is the managed provider registry
-- `config.toml` and `auth.json` represent runtime state
+- `config.toml` is the managed runtime-routing file
+- `auth.json` is the active auth projection file; direct-provider switches rewrite `OPENAI_API_KEY`, while `status` and `doctor` inspect its state
 - mutating commands back up before writing
 - rollback is available after failed or undesired changes
 

package/dist/app/add-provider.js

@@ -41,7 +41,6 @@ const errors_1 = require("../domain/errors");
 const config_repo_1 = require("../storage/config-repo");
 const fs_utils_1 = require("../storage/fs-utils");
 const providers_repo_1 = require("../storage/providers-repo");
-const auth_repo_1 = require("../storage/auth-repo");
 const copilot_installer_1 = require("../runtime/copilot-installer");
 const run_mutation_1 = require("./run-mutation");
 /**
@@ -54,7 +53,7 @@ function addProvider(args) {
         throw (0, errors_1.cliError)("INVALID_IMPORT_FILE", `Provider "${args.providerName}" already exists.`);
     }
     const bridgeHost = args.bridgeHost ?? "127.0.0.1";
-    const bridgePort = args.bridgePort ?? 4141;
+    const bridgePort = args.bridgePort ?? 41415;
     const runtime = args.copilot
         ? {
             kind: "copilot-sdk-bridge",
@@ -102,14 +101,12 @@ function addProvider(args) {
         ? {
             [args.profile]: {
                 baseUrl: args.copilot ? (0, providers_1.buildCopilotBridgeBaseUrl)(runtime) : args.baseUrl ?? undefined,
-                envKey: (0, config_1.buildManagedProfileEnvKey)(args.profile),
             },
         }
         : undefined;
     if (existingProfile) {
         (0, config_repo_1.requireManagedProfileRuntime)(document, providers, args.profile);
     }
-    const envKey = existingModelProvider?.envKey ?? (0, config_1.buildManagedProfileEnvKey)(args.profile);
     const apiKey = args.copilot ? args.bridgeApiKey ?? crypto.randomBytes(24).toString("hex") : args.apiKey;
     const baseUrl = args.copilot ? (0, providers_1.buildCopilotBridgeBaseUrl)(runtime) : args.baseUrl ?? undefined;
     const next = {
@@ -118,7 +115,6 @@ function addProvider(args) {
             [args.providerName]: (0, providers_1.cleanProviderRecord)({
                 profile: args.profile,
                 apiKey,
-                envKey,
                 baseUrl,
                 note: args.note ?? undefined,
                 tags: args.tags,
@@ -134,7 +130,6 @@ function addProvider(args) {
         files: [
             { absolutePath: args.providersPath, relativePath: "providers.json" },
             { absolutePath: args.configPath, relativePath: "config.toml" },
-            { absolutePath: args.authPath, relativePath: "auth.json" },
         ],
         mutate: () => {
             const configPlan = (0, config_repo_1.createConfigMutationPlan)(document, {
@@ -144,15 +139,9 @@ function addProvider(args) {
             // Persist only the normalized provider payload so later reads are deterministic.
             (0, providers_repo_1.writeProvidersFile)(args.providersPath, next);
             (0, config_repo_1.applyConfigMutation)(args.configPath, document, configPlan);
-            if (document.activeProfile === args.profile) {
-                const activeProviderName = (0, config_repo_1.resolveActiveProviderName)(document, next);
-                const existingAuth = (0, auth_repo_1.readAuthFileIfExists)(args.authPath);
-                (0, auth_repo_1.writeAuthFile)(args.authPath, next.providers[activeProviderName], existingAuth ?? undefined);
-            }
             return {
                 provider: args.providerName,
                 profile: args.profile,
-                envKey,
                 runtimeKind: runtime?.kind ?? null,
                 createdProfileSections: configPlan.createdProfileSections,
                 createdModelProviderSections: configPlan.createdModelProviderSections,

package/dist/app/bridge.js

@@ -0,0 +1,295 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startBridge = startBridge;
+exports.stopBridge = stopBridge;
+exports.statusBridge = statusBridge;
+const errors_1 = require("../domain/errors");
+const providers_1 = require("../domain/providers");
+const config_repo_1 = require("../storage/config-repo");
+const providers_repo_1 = require("../storage/providers-repo");
+const interactive_1 = require("../interaction/interactive");
+const copilot_bridge_1 = require("../runtime/copilot-bridge");
+const runtime_state_repo_1 = require("../storage/runtime-state-repo");
+const copilot_installer_1 = require("../runtime/copilot-installer");
+const copilot_adapter_1 = require("../runtime/copilot-adapter");
+const DEFAULT_BRIDGE_PORT = 41415;
+/**
+ * Starts or reuses the managed Copilot bridge for one provider.
+ */
+async function startBridge(args) {
+    const providers = (0, providers_repo_1.readProvidersFile)(args.providersPath);
+    const target = await resolveBridgeTarget({
+        requestedProviderName: args.providerName ?? null,
+        providers,
+        configPath: args.configPath,
+        runtime: args.runtime,
+        json: args.json,
+        commandName: "start",
+        preferRuntimeState: false,
+    });
+    await requireBridgeRuntimeReadiness();
+    const bridge = await (0, copilot_bridge_1.ensureCopilotBridge)(target.providerName, target.provider);
+    const nextProvider = bridge.portChanged ? rewriteBridgeProviderPort(target.provider, bridge.port) : target.provider;
+    if (bridge.portChanged) {
+        try {
+            persistRecoveredBridgePort({
+                providersPath: args.providersPath,
+                configPath: args.configPath,
+                providers,
+                providerName: target.providerName,
+                previousProvider: target.provider,
+                provider: nextProvider,
+            });
+        }
+        catch (error) {
+            if (!bridge.reused) {
+                (0, copilot_bridge_1.stopCopilotBridge)();
+            }
+            throw error;
+        }
+    }
+    return {
+        data: {
+            provider: target.providerName,
+            profile: nextProvider.profile,
+            baseUrl: (0, providers_1.buildCopilotBridgeBaseUrl)(nextProvider.runtime),
+            host: bridge.host,
+            port: bridge.port,
+            reused: bridge.reused,
+            portChanged: bridge.portChanged,
+            defaultPort: DEFAULT_BRIDGE_PORT,
+        },
+    };
+}
+/**
+ * Stops the managed Copilot bridge.
+ */
+async function stopBridge(args) {
+    const providers = (0, providers_repo_1.readProvidersFile)(args.providersPath);
+    const state = (0, runtime_state_repo_1.readCopilotBridgeState)();
+    if (!state && !args.providerName) {
+        return {
+            data: {
+                provider: null,
+                stopped: true,
+                hadRuntimeState: false,
+            },
+        };
+    }
+    if (!state && args.providerName) {
+        resolveNamedBridgeProvider(providers, args.providerName);
+        return {
+            data: {
+                provider: args.providerName,
+                stopped: true,
+                hadRuntimeState: false,
+            },
+        };
+    }
+    const target = await resolveBridgeTarget({
+        requestedProviderName: args.providerName ?? null,
+        providers,
+        configPath: args.configPath,
+        runtime: args.runtime,
+        json: args.json,
+        commandName: "stop",
+        preferRuntimeState: true,
+    });
+    if (args.providerName && state?.provider && state.provider !== args.providerName) {
+        throw (0, errors_1.cliError)("BRIDGE_PROVIDER_MISMATCH", `Bridge runtime state belongs to "${state.provider}" not "${args.providerName}".`, {
+            stateProvider: state.provider,
+            requestedProvider: args.providerName,
+        });
+    }
+    (0, copilot_bridge_1.stopCopilotBridge)();
+    return {
+        data: {
+            provider: target.providerName,
+            stopped: true,
+            hadRuntimeState: Boolean(state),
+        },
+    };
+}
+/**
+ * Reports the managed Copilot bridge state.
+ */
+async function statusBridge(args) {
+    const providers = (0, providers_repo_1.readProvidersFile)(args.providersPath);
+    const state = (0, runtime_state_repo_1.readCopilotBridgeState)();
+    const target = await resolveBridgeTarget({
+        requestedProviderName: args.providerName ?? null,
+        providers,
+        configPath: args.configPath,
+        runtime: args.runtime,
+        json: args.json,
+        commandName: "status",
+        preferRuntimeState: true,
+    });
+    const provider = target.provider;
+    const runtimeStatus = await (0, copilot_bridge_1.probeCopilotBridgeRuntime)(provider);
+    const expectedBaseUrl = (0, providers_1.buildCopilotBridgeBaseUrl)(provider.runtime);
+    if (args.providerName && state?.provider && state.provider !== args.providerName) {
+        throw (0, errors_1.cliError)("BRIDGE_PROVIDER_MISMATCH", `Bridge runtime state belongs to "${state.provider}" not "${args.providerName}".`, {
+            stateProvider: state.provider,
+            requestedProvider: args.providerName,
+        });
+    }
+    return {
+        data: {
+            provider: target.providerName,
+            profile: provider.profile,
+            runtimeState: state,
+            expectedBaseUrl,
+            matches: Boolean(state && state.provider === target.providerName && state.baseUrl === expectedBaseUrl),
+            active: runtimeStatus.ok,
+            health: runtimeStatus,
+        },
+    };
+}
+/**
+ * Resolves the Copilot provider target for one bridge command.
+ */
+async function resolveBridgeTarget(args) {
+    if (args.requestedProviderName) {
+        return resolveNamedBridgeProvider(args.providers, args.requestedProviderName);
+    }
+    if (args.preferRuntimeState) {
+        const runtimeState = (0, runtime_state_repo_1.readCopilotBridgeState)();
+        if (runtimeState?.provider && args.providers.providers[runtimeState.provider]) {
+            return resolveNamedBridgeProvider(args.providers, runtimeState.provider);
+        }
+    }
+    const activeTarget = resolveActiveCopilotBridgeProvider(args.providers, args.configPath);
+    if (activeTarget) {
+        return activeTarget;
+    }
+    const copilotTargets = listCopilotBridgeProviders(args.providers);
+    if (copilotTargets.length === 1) {
+        return copilotTargets[0];
+    }
+    if ((0, interactive_1.canPrompt)(args.runtime, args.json)) {
+        const selected = await promptForCopilotBridgeSelection(args.runtime, copilotTargets, args.commandName);
+        return resolveNamedBridgeProvider(args.providers, selected);
+    }
+    throw (0, errors_1.cliError)("BRIDGE_TARGET_UNRESOLVED", `Unable to resolve a Copilot provider for bridge ${args.commandName}.`, {
+        availableProviders: copilotTargets.map((entry) => entry.providerName),
+    });
+}
+/**
+ * Resolves the active provider when the current top-level profile maps to one Copilot bridge provider.
+ */
+function resolveActiveCopilotBridgeProvider(providers, configPath) {
+    try {
+        const currentProfile = (0, config_repo_1.readCurrentProfile)(configPath);
+        const matches = Object.entries(providers.providers)
+            .filter(([, provider]) => provider.profile === currentProfile && (0, providers_1.isCopilotBridgeProvider)(provider))
+            .sort(([left], [right]) => left.localeCompare(right));
+        if (matches.length === 1) {
+            return {
+                providerName: matches[0][0],
+                provider: matches[0][1],
+            };
+        }
+    }
+    catch {
+        return null;
+    }
+    return null;
+}
+/**
+ * Resolves one named provider and enforces the Copilot bridge runtime kind.
+ */
+function resolveNamedBridgeProvider(providers, providerName) {
+    const provider = providers.providers[providerName];
+    if (!provider) {
+        throw (0, errors_1.cliError)("PROVIDER_NOT_FOUND", `Provider "${providerName}" was not found.`, {
+            provider: providerName,
+        });
+    }
+    if (!(0, providers_1.isCopilotBridgeProvider)(provider)) {
+        throw (0, errors_1.cliError)("BRIDGE_PROVIDER_MISMATCH", `Provider "${providerName}" is not a Copilot bridge provider.`, {
+            provider: providerName,
+        });
+    }
+    return { providerName, provider };
+}
+/**
+ * Lists all configured Copilot bridge providers in stable order.
+ */
+function listCopilotBridgeProviders(providers) {
+    return Object.entries(providers.providers)
+        .filter(([, provider]) => (0, providers_1.isCopilotBridgeProvider)(provider))
+        .sort(([left], [right]) => left.localeCompare(right))
+        .map(([providerName, provider]) => ({ providerName, provider }));
+}
+/**
+ * Uses a Copilot-only provider picker instead of the generic provider selector.
+ */
+async function promptForCopilotBridgeSelection(runtime, targets, commandName) {
+    if (targets.length === 0) {
+        throw (0, errors_1.cliError)("BRIDGE_TARGET_UNRESOLVED", `No Copilot bridge providers are configured for bridge ${commandName}.`);
+    }
+    return runtime.selectOne(`Choose a Copilot provider to ${commandName}`, targets.map((target) => ({
+        value: target.providerName,
+        label: target.providerName,
+        hint: target.provider.profile,
+    })));
+}
+/**
+ * Verifies that the local Copilot bridge prerequisites are available before startup.
+ */
+async function requireBridgeRuntimeReadiness() {
+    const installStatus = (0, copilot_installer_1.probeCopilotSdkInstall)();
+    if (!installStatus.installed) {
+        throw (0, errors_1.cliError)("COPILOT_SDK_MISSING", "The optional Copilot SDK runtime is not installed.", {
+            installDir: installStatus.installDir,
+            packageName: installStatus.packageName,
+        });
+    }
+    await (0, copilot_adapter_1.readCopilotAuthState)();
+}
+/**
+ * Rewrites one Copilot bridge provider record with a recovered runtime port.
+ */
+function rewriteBridgeProviderPort(provider, port) {
+    return (0, providers_1.cleanProviderRecord)({
+        ...provider,
+        baseUrl: `http://${provider.runtime.bridgeHost}:${port}${provider.runtime.bridgePath}`,
+        runtime: {
+            ...provider.runtime,
+            bridgePort: port,
+        },
+    });
+}
+/**
+ * Persists the recovered bridge port to both providers.json and config.toml.
+ */
+function persistRecoveredBridgePort(args) {
+    const previousProviders = {
+        providers: {
+            ...args.providers.providers,
+        },
+    };
+    const nextProviders = {
+        providers: {
+            ...args.providers.providers,
+            [args.providerName]: args.provider,
+        },
+    };
+    (0, providers_repo_1.writeProvidersFile)(args.providersPath, nextProviders);
+    try {
+        const document = (0, config_repo_1.readStructuredConfig)(args.configPath);
+        const configPlan = (0, config_repo_1.createConfigMutationPlan)(document, {
+            upsertModelProviders: {
+                [args.provider.profile]: {
+                    baseUrl: (0, providers_1.buildCopilotBridgeBaseUrl)(args.provider.runtime),
+                },
+            },
+        });
+        (0, config_repo_1.applyConfigMutation)(args.configPath, document, configPlan);
+    }
+    catch (error) {
+        (0, providers_repo_1.writeProvidersFile)(args.providersPath, previousProviders);
+        throw error;
+    }
+}

package/dist/app/edit-provider.js

@@ -7,7 +7,6 @@ const providers_1 = require("../domain/providers");
 const config_repo_1 = require("../storage/config-repo");
 const fs_utils_1 = require("../storage/fs-utils");
 const providers_repo_1 = require("../storage/providers-repo");
-const auth_repo_1 = require("../storage/auth-repo");
 const run_mutation_1 = require("./run-mutation");
 /**
  * Updates selected fields on a single managed provider.
@@ -63,23 +62,15 @@ function editProvider(args) {
         upsertModelProviders = {
             [newProfile]: {
                 baseUrl: args.baseUrl ?? undefined,
-                envKey: (0, config_1.buildManagedProfileEnvKey)(newProfile),
             },
         };
     }
     else {
         (0, config_repo_1.requireManagedProfileRuntime)(document, providers, newProfile);
     }
-    const nextEnvKey = args.profile !== undefined && args.profile !== current.profile
-        ? targetModelProviderSection?.envKey ?? (0, config_1.buildManagedProfileEnvKey)(newProfile)
-        : current.envKey;
-    if (nextEnvKey !== current.envKey) {
-        updatedFields.push("envKey");
-    }
     const nextRecord = (0, providers_1.cleanProviderRecord)({
         profile: newProfile,
         apiKey: args.apiKey ?? current.apiKey,
-        envKey: nextEnvKey,
         baseUrl: args.baseUrl === null ? undefined : args.baseUrl ?? current.baseUrl,
         note: args.note === null ? undefined : args.note ?? current.note,
         tags: args.tags ?? current.tags,
@@ -90,7 +81,7 @@ function editProvider(args) {
                 ...(args.model !== undefined && args.model !== null ? { model: args.model } : {}),
             },
         };
-        if (args.model !== undefined && (targetSection?.model !== args.model) && !updatedFields.includes("model")) {
+        if (args.model !== undefined && targetSection?.model !== args.model && !updatedFields.includes("model")) {
             updatedFields.push("model");
         }
     }
@@ -125,7 +116,6 @@ function editProvider(args) {
         files: [
             { absolutePath: args.providersPath, relativePath: "providers.json" },
             { absolutePath: args.configPath, relativePath: "config.toml" },
-            { absolutePath: args.authPath, relativePath: "auth.json" },
         ],
         mutate: () => {
             const configPlan = (0, config_repo_1.createConfigMutationPlan)(document, {
@@ -143,12 +133,6 @@ function editProvider(args) {
             // Write providers first so the registry and config move together inside the managed backup boundary.
             (0, providers_repo_1.writeProvidersFile)(args.providersPath, nextProviders);
             (0, config_repo_1.applyConfigMutation)(args.configPath, document, configPlan);
-            const updatedDocument = (0, config_repo_1.readStructuredConfig)(args.configPath);
-            if (updatedDocument.activeProfile) {
-                const activeProviderName = (0, config_repo_1.resolveActiveProviderName)(updatedDocument, nextProviders);
-                const existingAuth = (0, auth_repo_1.readAuthFileIfExists)(args.authPath);
-                (0, auth_repo_1.writeAuthFile)(args.authPath, nextProviders.providers[activeProviderName], existingAuth ?? undefined);
-            }
             return {
                 provider: args.providerName,
                 updatedFields,

package/dist/app/get-status.js

@@ -44,6 +44,7 @@ const auth_repo_1 = require("../storage/auth-repo");
 const copilot_installer_1 = require("../runtime/copilot-installer");
 const copilot_bridge_1 = require("../runtime/copilot-bridge");
 const copilot_adapter_1 = require("../runtime/copilot-adapter");
+const runtime_state_repo_1 = require("../storage/runtime-state-repo");
 /**
  * Reports the current on-disk runtime state and how it maps back to managed providers.
  */
@@ -55,7 +56,7 @@ async function getStatus(codexDir, configPath, providersPath, authPath) {
     const providers = providersExists ? (0, providers_repo_1.readProvidersFile)(providersPath) : null;
     let configViews = [];
     let consistencyIssues = [];
-    const authState = (0, auth_repo_1.readManagedAuthState)(authPath);
+    const authState = (0, auth_repo_1.readAuthFileState)(authPath);
     if (configExists) {
         const document = (0, config_repo_1.readStructuredConfig)(configPath);
         currentProfile = document.activeProfile;
@@ -69,7 +70,32 @@ async function getStatus(codexDir, configPath, providersPath, authPath) {
     const activeProviderCandidates = currentProfile && providers ? (0, providers_1.findProvidersByProfile)(providers, currentProfile) : [];
     const activeProvider = activeProviderCandidates.length === 1 && providers ? providers.providers[activeProviderCandidates[0]] : null;
     const copilotInstall = (0, copilot_installer_1.probeCopilotSdkInstall)();
-    const copilotBridge = activeProvider && (0, providers_1.isCopilotBridgeProvider)(activeProvider) ? await (0, copilot_bridge_1.probeCopilotBridgeRuntime)(activeProvider) : null;
+    const runtimeStateInspection = (0, runtime_state_repo_1.inspectCopilotBridgeState)();
+    const runtimeState = runtimeStateInspection.state;
+    const runtimeStateProvider = runtimeState && providers ? providers.providers[runtimeState.provider] ?? null : null;
+    const bridgeProbeTarget = activeProvider && (0, providers_1.isCopilotBridgeProvider)(activeProvider)
+        ? activeProvider
+        : runtimeStateProvider && (0, providers_1.isCopilotBridgeProvider)(runtimeStateProvider)
+            ? runtimeStateProvider
+            : null;
+    const copilotBridge = !runtimeStateInspection.valid && runtimeStateInspection.exists
+        ? {
+            ok: false,
+            runtime: "copilot-bridge",
+            reason: "failed",
+            cause: runtimeStateInspection.parseError ?? "Failed to parse Copilot bridge runtime state.",
+        }
+        : bridgeProbeTarget
+            ? await (0, copilot_bridge_1.probeCopilotBridgeRuntime)(bridgeProbeTarget, runtimeState)
+            : runtimeState
+                ? {
+                    ok: false,
+                    runtime: "copilot-bridge",
+                    reason: "failed",
+                    cause: "Copilot bridge runtime state exists but no matching managed Copilot provider is active.",
+                    details: runtimeState,
+                }
+                : null;
     const copilotAuth = activeProvider && (0, providers_1.isCopilotBridgeProvider)(activeProvider)
         ? await (0, copilot_adapter_1.readCopilotAuthState)().catch((error) => ({
             ready: false,
@@ -82,6 +108,9 @@ async function getStatus(codexDir, configPath, providersPath, authPath) {
         // Surface unmanaged live state without mutating anything during a read-only status call.
         warnings.push("Current config profile is not mapped in providers.json. Backfill would be required before treating live state as managed.");
     }
+    if (runtimeStateInspection.exists && !runtimeStateInspection.valid) {
+        warnings.push(`Copilot bridge runtime state is unreadable: ${runtimeStateInspection.parseError ?? "unknown parse failure"}`);
+    }
     return {
         warnings,
         data: {
@@ -103,6 +132,7 @@ async function getStatus(codexDir, configPath, providersPath, authPath) {
             },
             copilotAuth,
             copilotBridge,
+            copilotRuntimeState: runtimeState,
             liveState,
             auth: authState,
             configProfiles: configViews,

package/dist/app/list-providers.js

@@ -11,7 +11,6 @@ function listProviders(providersPath) {
     const items = names.map((name) => ({
         name,
         profile: providers.providers[name].profile,
-        envKey: providers.providers[name].envKey,
         note: providers.providers[name].note ?? null,
         tags: providers.providers[name].tags ?? [],
     }));