@moxxy/cli 0.9.0 → 0.11.0

package/dist/bin.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { z as z$1, defineProvider, definePlugin, defineTool, MoxxyError, writeFileAtomic, asTurnId, defineMode, asPluginId, defineChannel, defineTunnelProvider, spawnCliTunnel, isCliTunnelAvailable, createMutex, defineWorkflowExecutor, toFriendlyError, estimateTextTokens, classifyHttpStatus, createStuckLoopDetector, runCompactionIfNeeded, runElisionIfNeeded, collectProviderStream, usageEventFields, isContextOverflowError, emitRequestsAndDetectStuck, executeToolUses, buildSystemPromptWithSkills, projectMessages, defineCompactor, defineCacheStrategy, denyByDefaultResolver, createAllowListResolver, moxxyPath, zodToJsonSchema, runSingleShotTurn, bearerTokenMatches, resolveChannelToken, rotateChannelToken, estimateContextTokens as estimateContextTokens$1, readRequestBody, MOXXY_WS_SUBPROTOCOL, defineEmbedder, bearerGuard, tokenFromWsProtocolHeader, skillFrontmatterSchema, asSkillId, getInstallHint, moxxyHome, defineTranscriber, summarizeTokensByModel, migrateModeName, createDeferredPermissionResolver, classifyNetworkError, addModelTotals, ISOLATION_RANK, moxxyPackageSchema, defineCommand, createCallbackResolver, autoAllowResolver, asSessionId, asToolCallId, defineViewRenderer, DEFAULT_VIEW_TAGS, isSafeViewUrl, evaluateToolRule, summarizeSessionTokensFromEvents, computeElisionState, toolResultStubbed, toolResultStub, toolResultBytes, conversationalStubbed, conversationalStub, asEventId } from '@moxxy/sdk';
+import { z as z$1, defineProvider, definePlugin, defineTool, MoxxyError, writeFileAtomic, asTurnId, defineMode, asPluginId, defineChannel, defineTunnelProvider, spawnCliTunnel, isCliTunnelAvailable, createMutex, defineWorkflowExecutor, toFriendlyError, estimateTextTokens, classifyHttpStatus, createStuckLoopDetector, runCompactionIfNeeded, runElisionIfNeeded, collectProviderStream, usageEventFields, isContextOverflowError, emitRequestsAndDetectStuck, executeToolUses, buildSystemPromptWithSkills, projectMessages, defineCompactor, defineCacheStrategy, denyByDefaultResolver, createAllowListResolver, moxxyPath, zodToJsonSchema, runSingleShotTurn, bearerTokenMatches, resolveChannelToken, rotateChannelToken, estimateContextTokens as estimateContextTokens$1, readRequestBody, MOXXY_WS_SUBPROTOCOL, defineEmbedder, migrateModeName, bearerGuard, tokenFromWsProtocolHeader, skillFrontmatterSchema, asSkillId, getInstallHint, moxxyHome, defineTranscriber, summarizeTokensByModel, createDeferredPermissionResolver, classifyNetworkError, addModelTotals, ISOLATION_RANK, moxxyPackageSchema, defineCommand, createCallbackResolver, autoAllowResolver, asSessionId, asToolCallId, defineViewRenderer, DEFAULT_VIEW_TAGS, isSafeViewUrl, evaluateToolRule, summarizeSessionTokensFromEvents, computeElisionState, toolResultStubbed, toolResultStub, toolResultBytes, conversationalStubbed, conversationalStub, asEventId } from '@moxxy/sdk';
 import * as fs27 from 'fs';
 import fs27__default, { existsSync, promises, ReadStream, readFileSync, statSync, readdirSync, mkdirSync, writeFileSync, unlinkSync, renameSync, watch, createReadStream } from 'fs';
 import * as path3 from 'path';
@@ -1376,6 +1376,13 @@ var init_providers = __esm({
       defs = /* @__PURE__ */ new Map();
       instances = /* @__PURE__ */ new Map();
       active = null;
+      /**
+       * Names the user disabled. Kept name-based (not def-based) so it can be
+       * seeded from preferences BEFORE the plugins register their defs — boot
+       * order doesn't matter. A disabled provider stays registered/listable but
+       * can't be activated.
+       */
+      disabled = /* @__PURE__ */ new Set();
       /**
        * Register a provider def. Throws on duplicate — use `replace()` for
        * explicit overwrite. Matches the semantics of `tools` and `channels`.
@@ -1404,10 +1411,32 @@ var init_providers = __esm({
       list() {
         return [...this.defs.values()];
       }
+      /**
+       * Enable/disable a provider by name. Disabling the ACTIVE provider is
+       * refused — switch first, then disable — so a session never ends up with an
+       * active-but-disabled provider. Unknown names are accepted (the set seeds
+       * from preferences before plugins register), except when disabling via a
+       * live toggle is meaningless because the provider is active.
+       */
+      setEnabled(name, enabled) {
+        if (!enabled && this.active === name) {
+          throw new Error(`Cannot disable the active provider "${name}" \u2014 switch providers first.`);
+        }
+        if (enabled)
+          this.disabled.delete(name);
+        else
+          this.disabled.add(name);
+      }
+      isEnabled(name) {
+        return !this.disabled.has(name);
+      }
       setActive(name, config) {
         const def = this.defs.get(name);
         if (!def)
           throw new Error(`Provider not registered: ${name}`);
+        if (this.disabled.has(name)) {
+          throw new Error(`Provider "${name}" is disabled \u2014 enable it first.`);
+        }
         let instance = this.instances.get(name);
         if (!instance) {
           instance = def.createClient(config ?? {});
@@ -3081,6 +3110,7 @@ var init_session = __esm({
       readyProviders;
       credentialResolver;
       mcpAdmin;
+      providerAdmin;
       workflows;
       pluginsAdmin;
       dispatcher;
@@ -3262,7 +3292,8 @@ var init_session = __esm({
             // are the ones the desktop's "Fetch live" affordance targets;
             // they advertise this via the provider-admin factory by
             // setting `supportsLiveModelDiscovery: true` on their def.
-            supportsLiveModelDiscovery: p3.supportsLiveModelDiscovery === true
+            supportsLiveModelDiscovery: p3.supportsLiveModelDiscovery === true,
+            enabled: this.providers.isEnabled(p3.name)
           })),
           activeMode,
           activeModeBadge,
@@ -119366,13 +119397,16 @@ function toAnthropicTools(tools, opts = {}) {
 
 // ../plugin-provider-anthropic/dist/provider.js
 var anthropicModels = [
+  { id: "claude-fable-5", contextWindow: 1e6, maxOutputTokens: 128e3, supportsTools: true, supportsStreaming: true, supportsImages: true, supportsDocuments: true },
+  { id: "claude-opus-4-8", contextWindow: 1e6, maxOutputTokens: 128e3, supportsTools: true, supportsStreaming: true, supportsImages: true, supportsDocuments: true },
   { id: "claude-opus-4-7", contextWindow: 1e6, maxOutputTokens: 128e3, supportsTools: true, supportsStreaming: true, supportsImages: true, supportsDocuments: true },
+  { id: "claude-opus-4-6", contextWindow: 1e6, maxOutputTokens: 128e3, supportsTools: true, supportsStreaming: true, supportsImages: true, supportsDocuments: true },
   { id: "claude-sonnet-4-6", contextWindow: 1e6, maxOutputTokens: 64e3, supportsTools: true, supportsStreaming: true, supportsImages: true, supportsDocuments: true },
   { id: "claude-haiku-4-5-20251001", contextWindow: 2e5, maxOutputTokens: 64e3, supportsTools: true, supportsStreaming: true, supportsImages: true, supportsDocuments: true }
 ];
 var AnthropicProvider = class {
   name;
-  models = anthropicModels;
+  models;
   // Mutable so OAuth-mode refresh can swap in a client carrying the new
   // bearer token; the plain apiKey client never changes after construction.
   client;
@@ -119384,6 +119418,7 @@ var AnthropicProvider = class {
   oauthExpiresAt;
   constructor(config = {}) {
     this.name = config.name ?? "anthropic";
+    this.models = config.models ?? anthropicModels;
     this.defaultModel = config.defaultModel ?? "claude-sonnet-4-6";
     if (config.baseURL)
       this.baseURL = config.baseURL;
@@ -127441,6 +127476,15 @@ function noteTemperatureUnsupported() {
     console.debug("[openai-codex] ProviderRequest.temperature is not supported by the Codex Responses backend (gpt-5 reasoning models reject sampling params); ignoring it.");
   }
 }
+var maxTokensNoteShown = false;
+function noteMaxTokensUnsupported() {
+  if (maxTokensNoteShown)
+    return;
+  maxTokensNoteShown = true;
+  if (process.env.MOXXY_DEBUG) {
+    console.debug("[openai-codex] ProviderRequest.maxTokens is not supported by the Codex Responses backend (400 Unsupported parameter: max_output_tokens); ignoring it.");
+  }
+}
 function toResponsesBody(req, opts = {}) {
   const instructions = extractSystemText(req.messages, req.system) || DEFAULT_INSTRUCTIONS;
   const body = {
@@ -127458,7 +127502,7 @@ function toResponsesBody(req, opts = {}) {
   if (opts.sessionHint)
     body.prompt_cache_key = opts.sessionHint;
   if (req.maxTokens !== void 0)
-    body.max_output_tokens = req.maxTokens;
+    noteMaxTokensUnsupported();
   if (req.temperature !== void 0)
     noteTemperatureUnsupported();
   return body;
@@ -128208,6 +128252,186 @@ var claudeCodePlugin = definePlugin({
   version: "0.0.0",
   providers: [claudeCodeProviderDef]
 });
+
+// ../plugin-provider-zai/dist/models.js
+var glmModels = [
+  // GLM-5 family: coding-first frontier. 5.2 carries a usable 1M context.
+  { id: "glm-5.2", contextWindow: 1e6, maxOutputTokens: 128e3, supportsTools: true, supportsStreaming: true },
+  { id: "glm-5.1", contextWindow: 2e5, maxOutputTokens: 128e3, supportsTools: true, supportsStreaming: true },
+  { id: "glm-5", contextWindow: 2e5, maxOutputTokens: 128e3, supportsTools: true, supportsStreaming: true },
+  // GLM-4.6: prior flagship, 200k context, strong agentic-coding scores.
+  { id: "glm-4.6", contextWindow: 2e5, maxOutputTokens: 128e3, supportsTools: true, supportsStreaming: true },
+  // GLM-4.5 tier: general (4.5), lightweight (-air), free/fast (-flash).
+  { id: "glm-4.5", contextWindow: 131072, maxOutputTokens: 98304, supportsTools: true, supportsStreaming: true },
+  { id: "glm-4.5-air", contextWindow: 131072, maxOutputTokens: 98304, supportsTools: true, supportsStreaming: true },
+  { id: "glm-4.5-flash", contextWindow: 131072, maxOutputTokens: 98304, supportsTools: true, supportsStreaming: true },
+  // Vision-capable variant.
+  { id: "glm-4.5v", contextWindow: 65536, maxOutputTokens: 16384, supportsTools: true, supportsStreaming: true, supportsImages: true }
+];
+
+// ../plugin-provider-zai/dist/index.js
+var ZAI_OPENAI_BASE_URL = "https://api.z.ai/api/paas/v4";
+var ZAI_ANTHROPIC_BASE_URL = "https://api.z.ai/api/anthropic";
+var ZAI_DEFAULT_MODEL = "glm-4.6";
+var zaiProviderDef = defineProvider({
+  name: "zai",
+  models: [...glmModels],
+  createClient: (config) => {
+    const cfg = config;
+    return new OpenAIProvider({
+      ...cfg,
+      name: "zai",
+      baseURL: cfg.baseURL ?? ZAI_OPENAI_BASE_URL,
+      defaultModel: cfg.defaultModel ?? ZAI_DEFAULT_MODEL,
+      models: glmModels
+    });
+  },
+  validateKey: (key) => validateKey2(key, { baseURL: ZAI_OPENAI_BASE_URL }),
+  auth: {
+    kind: "apiKey",
+    hint: "z.ai API key (pay-as-you-go) from https://z.ai/manage-apikey/apikey-list"
+  }
+});
+var zaiCodingPlanProviderDef = defineProvider({
+  name: "zai-coding-plan",
+  models: [...glmModels],
+  createClient: (config) => {
+    const cfg = config;
+    return new AnthropicProvider({
+      ...cfg,
+      name: "zai-coding-plan",
+      baseURL: cfg.baseURL ?? ZAI_ANTHROPIC_BASE_URL,
+      defaultModel: cfg.defaultModel ?? ZAI_DEFAULT_MODEL,
+      models: glmModels
+    });
+  },
+  auth: {
+    kind: "apiKey",
+    hint: "z.ai GLM Coding Plan key (Anthropic-compatible endpoint, like Claude Code)"
+  }
+});
+var zaiPlugin = definePlugin({
+  name: "@moxxy/plugin-provider-zai",
+  version: "0.0.0",
+  providers: [zaiProviderDef, zaiCodingPlanProviderDef]
+});
+
+// ../plugin-provider-xai/dist/models.js
+var grokModels = [
+  // grok-4 family: current frontier. 4.3 is the flagship (1M context).
+  { id: "grok-4.3", contextWindow: 1e6, supportsTools: true, supportsStreaming: true, supportsImages: true },
+  { id: "grok-4", contextWindow: 256e3, supportsTools: true, supportsStreaming: true, supportsImages: true },
+  { id: "grok-4-fast", contextWindow: 256e3, supportsTools: true, supportsStreaming: true, supportsImages: true },
+  // grok-code-fast-1: agentic-coding specialist (text-only).
+  { id: "grok-code-fast-1", contextWindow: 256e3, supportsTools: true, supportsStreaming: true },
+  // grok-3 tier: prior generation, still served.
+  { id: "grok-3", contextWindow: 131072, supportsTools: true, supportsStreaming: true },
+  { id: "grok-3-mini", contextWindow: 131072, supportsTools: true, supportsStreaming: true }
+];
+
+// ../plugin-provider-xai/dist/index.js
+var XAI_BASE_URL = "https://api.x.ai/v1";
+var XAI_DEFAULT_MODEL = "grok-4";
+var xaiProviderDef = defineProvider({
+  name: "xai",
+  models: [...grokModels],
+  createClient: (config) => {
+    const cfg = config;
+    return new OpenAIProvider({
+      ...cfg,
+      name: "xai",
+      baseURL: cfg.baseURL ?? XAI_BASE_URL,
+      defaultModel: cfg.defaultModel ?? XAI_DEFAULT_MODEL,
+      models: grokModels
+    });
+  },
+  validateKey: (key) => validateKey2(key, { baseURL: XAI_BASE_URL }),
+  auth: {
+    kind: "apiKey",
+    hint: "xAI API key (starts with `xai-`) from https://console.x.ai"
+  }
+});
+var xaiPlugin = definePlugin({
+  name: "@moxxy/plugin-provider-xai",
+  version: "0.0.0",
+  providers: [xaiProviderDef]
+});
+
+// ../plugin-provider-google/dist/models.js
+var geminiModels = [
+  // Gemini 3 family: current frontier.
+  { id: "gemini-3-pro", contextWindow: 1e6, maxOutputTokens: 65536, supportsTools: true, supportsStreaming: true, supportsImages: true },
+  { id: "gemini-3-flash", contextWindow: 1e6, maxOutputTokens: 65536, supportsTools: true, supportsStreaming: true, supportsImages: true },
+  // Gemini 2.5 family: widely available, strong price/performance.
+  { id: "gemini-2.5-pro", contextWindow: 1e6, maxOutputTokens: 65536, supportsTools: true, supportsStreaming: true, supportsImages: true, supportsDocuments: true },
+  { id: "gemini-2.5-flash", contextWindow: 1e6, maxOutputTokens: 65536, supportsTools: true, supportsStreaming: true, supportsImages: true },
+  { id: "gemini-2.5-flash-lite", contextWindow: 1e6, maxOutputTokens: 65536, supportsTools: true, supportsStreaming: true, supportsImages: true }
+];
+
+// ../plugin-provider-google/dist/index.js
+var GEMINI_BASE_URL = "https://generativelanguage.googleapis.com/v1beta/openai/";
+var GEMINI_DEFAULT_MODEL = "gemini-2.5-flash";
+var googleProviderDef = defineProvider({
+  name: "google",
+  models: [...geminiModels],
+  createClient: (config) => {
+    const cfg = config;
+    return new OpenAIProvider({
+      ...cfg,
+      name: "google",
+      baseURL: cfg.baseURL ?? GEMINI_BASE_URL,
+      defaultModel: cfg.defaultModel ?? GEMINI_DEFAULT_MODEL,
+      models: geminiModels
+    });
+  },
+  validateKey: (key) => validateKey2(key, { baseURL: GEMINI_BASE_URL }),
+  auth: {
+    kind: "apiKey",
+    hint: "Google AI Studio (Gemini) API key from https://aistudio.google.com/apikey"
+  }
+});
+var googlePlugin = definePlugin({
+  name: "@moxxy/plugin-provider-google",
+  version: "0.0.0",
+  providers: [googleProviderDef]
+});
+var DEFAULT_LOCAL_BASE_URL = "http://localhost:11434/v1";
+var LOCAL_DEFAULT_MODEL = "llama3.3";
+var LOCAL_PLACEHOLDER_KEY = "local";
+var localModels = [
+  { id: "llama3.3", contextWindow: 131072, supportsTools: true, supportsStreaming: true },
+  { id: "qwen3", contextWindow: 131072, supportsTools: true, supportsStreaming: true },
+  { id: "qwen2.5-coder", contextWindow: 131072, supportsTools: true, supportsStreaming: true },
+  { id: "deepseek-r1", contextWindow: 131072, supportsTools: true, supportsStreaming: true },
+  { id: "gpt-oss", contextWindow: 131072, supportsTools: true, supportsStreaming: true }
+];
+var localProviderDef = defineProvider({
+  name: "local",
+  models: [...localModels],
+  createClient: (config) => {
+    const cfg = config;
+    return new OpenAIProvider({
+      ...cfg,
+      name: "local",
+      apiKey: cfg.apiKey ?? process.env.LOCAL_API_KEY ?? LOCAL_PLACEHOLDER_KEY,
+      baseURL: cfg.baseURL ?? process.env.LOCAL_MODEL_BASE_URL ?? DEFAULT_LOCAL_BASE_URL,
+      defaultModel: cfg.defaultModel ?? LOCAL_DEFAULT_MODEL,
+      models: localModels
+    });
+  },
+  // No validateKey: there is no key to validate, and probing a local server
+  // that may be offline would surface confusing errors during setup.
+  auth: {
+    kind: "apiKey",
+    envVar: "LOCAL_API_KEY",
+    hint: "optional \u2014 local servers need no key; set LOCAL_MODEL_BASE_URL for a non-Ollama endpoint"
+  }
+});
+var localPlugin = definePlugin({
+  name: "@moxxy/plugin-provider-local",
+  version: "0.0.0",
+  providers: [localProviderDef]
+});
 var WHISPER_PROVIDER_ID = "openai";
 var DEFAULT_FILENAMES = {
   "audio/ogg": "audio.ogg",
@@ -134757,7 +134981,7 @@ function isRunnerUp(socketPath = runnerSocketPath()) {
 
 // ../runner/dist/server.js
 init_dist();
-var RUNNER_PROTOCOL_VERSION = 6;
+var RUNNER_PROTOCOL_VERSION = 7;
 var MIN_COMPATIBLE_PROTOCOL_VERSION = 1;
 var RunnerMethod = {
   /** client->server: handshake; returns the initial info snapshot. */
@@ -134782,6 +135006,12 @@ var RunnerMethod = {
   ModeSetActive: "mode.setActive",
   /** client->server: switch the active provider (server resolves credentials). */
   ProviderSetActive: "provider.setActive",
+  /** client->server: enable/disable a provider (v7; persists to preferences). */
+  ProviderSetEnabled: "provider.setEnabled",
+  /** client->server: re-probe every provider's credentials → readyProviders (v7). */
+  ProviderRefreshReady: "provider.refreshReady",
+  /** client->server: patch a stored (runtime-registered) provider's config (v7). */
+  ProviderConfigure: "provider.configure",
   /** client->server: persist an allow-always permission rule. */
   PermissionAddAllow: "permission.addAllow",
   /** client->server: run a registered slash command on the runner. */
@@ -134877,6 +135107,19 @@ var providerSetActiveParamsSchema = z.object({
   name: z.string(),
   config: z.record(z.unknown()).optional()
 });
+var providerSetEnabledParamsSchema = z.object({
+  name: z.string().min(1),
+  enabled: z.boolean()
+});
+var providerConfigureParamsSchema = z.object({
+  name: z.string().min(1),
+  patch: z.object({
+    baseURL: z.string().url().optional(),
+    defaultModel: z.string().min(1).optional(),
+    envVar: z.string().regex(/^[A-Z][A-Z0-9_]*$/).optional(),
+    models: z.array(z.object({ id: z.string().min(1), contextWindow: z.number() }).passthrough()).min(1).optional()
+  })
+});
 var permissionAddAllowParamsSchema = z.object({
   name: z.string(),
   reason: z.string().optional()
@@ -134983,6 +135226,9 @@ var RunnerServer = class {
     peer.handle(RunnerMethod.SetResolver, (raw) => this.handleSetResolver(client, raw));
     peer.handle(RunnerMethod.ModeSetActive, (raw) => this.handleModeSetActive(raw));
     peer.handle(RunnerMethod.ProviderSetActive, (raw) => this.handleProviderSetActive(raw));
+    peer.handle(RunnerMethod.ProviderSetEnabled, (raw) => this.handleProviderSetEnabled(raw));
+    peer.handle(RunnerMethod.ProviderRefreshReady, () => this.handleProviderRefreshReady());
+    peer.handle(RunnerMethod.ProviderConfigure, (raw) => this.handleProviderConfigure(raw));
     peer.handle(RunnerMethod.PermissionAddAllow, (raw) => this.handlePermissionAddAllow(raw));
     peer.handle(RunnerMethod.CommandRun, (raw) => this.handleCommandRun(raw));
     peer.handle(RunnerMethod.Transcribe, (raw) => this.handleTranscribe(raw));
@@ -135058,6 +135304,7 @@ var RunnerServer = class {
           turnId,
           ...error2 ? { error: error2 } : {}
         });
+        this.broadcastInfo();
       }
     });
     return { turnId };
@@ -135122,6 +135369,54 @@ var RunnerServer = class {
     this.broadcastInfo();
     return {};
   }
+  async handleProviderSetEnabled(raw) {
+    const { name, enabled } = providerSetEnabledParamsSchema.parse(raw);
+    if (!this.session.providers.list().some((p3) => p3.name === name)) {
+      throw new Error(`Provider not registered: ${name}`);
+    }
+    this.session.providers.setEnabled(name, enabled);
+    void (async () => {
+      const prefs = await loadPreferences();
+      const current = new Set(prefs.disabledProviders ?? []);
+      if (enabled)
+        current.delete(name);
+      else
+        current.add(name);
+      await savePreferences({ disabledProviders: [...current] });
+    })();
+    this.broadcastInfo();
+    return {};
+  }
+  async handleProviderRefreshReady() {
+    const resolver2 = this.session.credentialResolver;
+    if (resolver2) {
+      const ready = /* @__PURE__ */ new Set();
+      const active = this.session.providers.getActiveName();
+      if (active)
+        ready.add(active);
+      for (const p3 of this.session.providers.list()) {
+        if (ready.has(p3.name))
+          continue;
+        try {
+          await resolver2(p3.name);
+          ready.add(p3.name);
+        } catch {
+        }
+      }
+      this.session.readyProviders = ready;
+    }
+    this.broadcastInfo();
+    return {};
+  }
+  async handleProviderConfigure(raw) {
+    const { name, patch } = providerConfigureParamsSchema.parse(raw);
+    const admin = this.session.providerAdmin;
+    if (!admin)
+      throw new Error("provider admin not supported on this runner");
+    await admin.configure(name, patch);
+    this.broadcastInfo();
+    return {};
+  }
   async handlePermissionAddAllow(raw) {
     const { name, reason } = permissionAddAllowParamsSchema.parse(raw);
     await this.session.permissions.addAllow({ name, ...reason ? { reason } : {} });
@@ -135397,6 +135692,7 @@ var RemoteSession = class {
   requirements;
   permissions;
   mcpAdmin;
+  providerAdmin;
   workflows;
   /**
    * Turns that completed before their `runTurn` stream was registered. A fast
@@ -135410,6 +135706,8 @@ var RemoteSession = class {
   permissionResolver = null;
   approvalResolver = null;
   info = null;
+  /** Subscribers to `info.changed` pushes (see {@link onInfoChanged}). */
+  infoListeners = /* @__PURE__ */ new Set();
   /**
    * The protocol version the SERVER reported at attach. Defaults to our own
    * version until the handshake resolves. Version-specific client methods (the
@@ -135435,6 +135733,12 @@ var RemoteSession = class {
     });
     this.peer.on(RunnerNotification.InfoChanged, (params) => {
       this.info = params.info;
+      for (const fn of this.infoListeners) {
+        try {
+          fn(this.info);
+        } catch {
+        }
+      }
     });
     this.peer.on(RunnerNotification.ReplayStart, (params) => {
       const { fromSeq } = params;
@@ -135472,6 +135776,7 @@ var RemoteSession = class {
     this.requirements = { check: () => ({ ready: false, issues: [] }) };
     this.permissions = this.makePermissionsView();
     this.mcpAdmin = this.makeMcpAdminView();
+    this.providerAdmin = this.makeProviderAdminView();
     this.workflows = this.makeWorkflowsView();
   }
   /**
@@ -135537,6 +135842,16 @@ var RemoteSession = class {
   getInfo() {
     return this.requireInfo();
   }
+  /**
+   * Subscribe to runner `info.changed` pushes (registry snapshot changes —
+   * provider/mode/MCP/workflow mutations, including ones made by tools inside
+   * a turn). Fires after the local `getInfo()` mirror has been updated, so a
+   * listener can re-read it synchronously. Returns an unsubscribe fn.
+   */
+  onInfoChanged(fn) {
+    this.infoListeners.add(fn);
+    return () => this.infoListeners.delete(fn);
+  }
   async *runTurn(prompt, opts = {}) {
     const result = await this.peer.request(RunnerMethod.RunTurn, {
       prompt,
@@ -135740,6 +136055,27 @@ var RemoteSession = class {
       detach: (name) => this.peer.request(RunnerMethod.McpDetach, { name })
     };
   }
+  // Provider management (protocol v7): backs the desktop's interactive
+  // Settings → Providers tab. Gated on the SERVER's reported version so a v7
+  // client attached to an older runner (a desktop whose JS hot-update outran
+  // its bundled CLI) gets a clear "update the CLI" error instead of a raw
+  // method-not-found.
+  makeProviderAdminView() {
+    return {
+      setEnabled: async (name, enabled) => {
+        this.requireServerProtocol(7, "Enabling/disabling a provider");
+        await this.peer.request(RunnerMethod.ProviderSetEnabled, { name, enabled });
+      },
+      refreshReady: async () => {
+        this.requireServerProtocol(7, "Re-probing provider credentials");
+        await this.peer.request(RunnerMethod.ProviderRefreshReady, {});
+      },
+      configure: async (name, patch) => {
+        this.requireServerProtocol(7, "Configuring a provider");
+        await this.peer.request(RunnerMethod.ProviderConfigure, { name, patch });
+      }
+    };
+  }
   makeWorkflowsView() {
     return {
       list: () => this.peer.request(RunnerMethod.WorkflowList),
@@ -136058,6 +136394,7 @@ var ipcInputSchemas = {
   "app.updateInfo": z.undefined(),
   "app.checkUpdate": z.undefined(),
   "app.updateDashboard": z.undefined(),
+  "app.updateShell": z.undefined(),
   "app.relaunch": z.undefined(),
   "app.appBooted": z.undefined(),
   "app.updateDiagnostics": z.undefined(),
@@ -138037,6 +138374,51 @@ var testProviderInput = z$1.object({
   baseURL: z$1.string().url().describe("Vendor API base URL to probe, e.g. https://api.deepseek.com."),
   keyName: z$1.string().regex(/^[A-Z][A-Z0-9_]*$/).describe("NAME of the vault secret holding the API key (e.g. DEEPSEEK_API_KEY). The key is resolved from the vault inside the tool \u2014 never ask the user for the plaintext key and never pass one as a tool argument. Have them store it first: /vault set <NAME> <key>.")
 });
+function buildProviderAdminPluginWithApi(opts) {
+  const { providerRegistry, configPath } = opts;
+  const api = {
+    configure: async (name, patch) => {
+      const cfg = await readProvidersConfig(configPath);
+      const entry = cfg.providers.find((p3) => p3.name === name);
+      if (!entry) {
+        throw new MoxxyError({
+          code: "CONFIG_INVALID",
+          message: `provider-admin: no stored provider named "${name}" \u2014 only runtime-registered (providers.json) providers are configurable; built-ins are code.`
+        });
+      }
+      const next = {
+        ...entry,
+        ...patch.baseURL ? { baseURL: patch.baseURL } : {},
+        ...patch.defaultModel ? { defaultModel: patch.defaultModel } : {},
+        ...patch.envVar ? { envVar: patch.envVar } : {},
+        ...patch.models && patch.models.length > 0 ? { models: patch.models } : {}
+      };
+      if (!next.models.some((m3) => m3.id === next.defaultModel)) {
+        throw new MoxxyError({
+          code: "CONFIG_INVALID",
+          message: `provider-admin: defaultModel "${next.defaultModel}" is not in the models list (${next.models.map((m3) => m3.id).join(", ")}).`
+        });
+      }
+      const def = buildProviderDef(next);
+      const hadDef = providerRegistry.list().some((p3) => p3.name === name);
+      if (hadDef)
+        providerRegistry.replace(def);
+      else
+        providerRegistry.register(def);
+      try {
+        await upsertStoredProvider(next, configPath);
+      } catch (err) {
+        const prev = buildProviderDef(entry);
+        if (hadDef)
+          providerRegistry.replace(prev);
+        else
+          providerRegistry.unregister(name);
+        throw err;
+      }
+    }
+  };
+  return { plugin: buildProviderAdminPlugin(opts), api };
+}
 function buildProviderAdminPlugin(opts) {
   const { providerRegistry, configPath } = opts;
   return definePlugin({
@@ -144027,20 +144409,25 @@ function formatCatalog(entries, emptyLabel) {
 }
 async function draftWorkflow(provider, model, intent, signal, opts = {}) {
   let accumulated = "";
+  let truncated = false;
+  const ceiling = provider.models.find((m3) => m3.id === model)?.maxOutputTokens;
+  const budget = Math.min(opts.maxTokens ?? DEFAULT_MAX_TOKENS, ceiling ?? Number.POSITIVE_INFINITY);
   for await (const event of provider.stream({
     model,
     system: buildSystemPrompt(opts),
     messages: [{ role: "user", content: [{ type: "text", text: `Build a workflow for: ${intent}` }] }],
-    maxTokens: opts.maxTokens ?? DEFAULT_MAX_TOKENS,
+    maxTokens: budget,
     signal
   })) {
     if (event.type === "text_delta")
       accumulated += event.delta;
+    if (event.type === "message_end")
+      truncated = event.stopReason === "max_tokens";
     if (event.type === "error")
       throw new Error(`workflow_create: provider error: ${event.message}`);
   }
   const raw = extractYamlBlock(accumulated);
-  return { raw, parse: parseWorkflowYaml(raw) };
+  return { raw, parse: parseWorkflowYaml(raw), truncated };
 }
 function extractYamlBlock(s2) {
   const fence = /```(?:ya?ml)?\n([\s\S]*?)```/.exec(s2);
@@ -144119,7 +144506,7 @@ function createTool(deps) {
       if (!drafted.parse.ok || !drafted.parse.workflow) {
         throw new MoxxyError({
           code: "TOOL_ERROR",
-          message: `workflow_create: the model did not produce a valid workflow (${drafted.parse.errors.join("; ")}). Try a more specific intent.`
+          message: drafted.truncated ? "workflow_create: the draft hit the output-token limit before the YAML was complete. Try a simpler intent, or split the workflow into smaller ones." : `workflow_create: the model did not produce a valid workflow (${drafted.parse.errors.join("; ")}). Try a more specific intent.`
         });
       }
       const created = await deps.store.create(drafted.parse.workflow, scope);
@@ -145076,6 +145463,14 @@ function buildBuiltinsCore(args) {
     { name: "@moxxy/plugin-provider-openai", plugin: openaiPlugin },
     { name: "@moxxy/plugin-provider-openai-codex", plugin: openaiCodexPlugin },
     { name: "@moxxy/plugin-provider-claude-code", plugin: claudeCodePlugin },
+    // OpenAI-compatible vendors (z.ai api-key mode, xAI, Google Gemini, local
+    // servers) + z.ai's GLM Coding Plan (Anthropic-compatible). Each reuses the
+    // shared OpenAIProvider/AnthropicProvider with its own slug + base URL +
+    // model catalog; see the respective plugin packages.
+    { name: "@moxxy/plugin-provider-zai", plugin: zaiPlugin },
+    { name: "@moxxy/plugin-provider-xai", plugin: xaiPlugin },
+    { name: "@moxxy/plugin-provider-google", plugin: googlePlugin },
+    { name: "@moxxy/plugin-provider-local", plugin: localPlugin },
     { name: "@moxxy/tools-builtin", plugin: builtinToolsPlugin },
     { name: "@moxxy/mode-default", plugin: defaultModePlugin },
     { name: "@moxxy/mode-goal", plugin: goalModePlugin },
@@ -145292,10 +145687,11 @@ function buildBuiltinsCore(args) {
     // ~/.moxxy/providers.json; the plugin's onInit re-registers them on
     // every boot. Pairs with the `add-provider` skill which walks the
     // model through gathering baseURL + models + key.
-    {
-      name: "@moxxy/plugin-provider-admin",
-      plugin: buildProviderAdminPlugin({ providerRegistry: session.providers })
-    },
+    (() => {
+      const { plugin: plugin4, api } = buildProviderAdminPluginWithApi({ providerRegistry: session.providers });
+      session.providerAdmin = api;
+      return { name: "@moxxy/plugin-provider-admin", plugin: plugin4 };
+    })(),
     // Admin tools (mcp_add_server, mcp_list_servers, mcp_remove_server,
     // mcp_test_server) plus the boot-time lazy attach. Passing the
     // session's live tool registry enables both hot-attach for runtime
@@ -145722,6 +146118,13 @@ async function defaultPrompt2(label3) {
 async function resolveProviderCredentials(providerName2, vault, opts = {}) {
   if (providerName2 === "openai-codex") return resolveOAuthCodex(vault, opts);
   if (providerName2 === CLAUDE_CODE_PROVIDER_ID) return resolveClaudeCode(vault);
+  if (providerName2 === "local") {
+    return {
+      ...opts.providerConfig ?? {},
+      apiKey: process.env.LOCAL_API_KEY ?? "local",
+      ...process.env.LOCAL_MODEL_BASE_URL ? { baseURL: process.env.LOCAL_MODEL_BASE_URL } : {}
+    };
+  }
   const storedKeyName = await storedProviderApiKeyName(providerName2).catch(() => null);
   const { providerConfig } = await resolveProviderApiKey(providerName2, vault, {
     ...opts,
@@ -145794,6 +146197,10 @@ async function activateProvider(args) {
   } else {
     for (let i2 = 0; i2 < candidates.length; i2++) {
       const candidate = candidates[i2];
+      if (!session.providers.isEnabled(candidate)) {
+        logger.warn("skipping disabled provider", { provider: candidate });
+        continue;
+      }
       const interactive = i2 === 0 && !skipKeyPrompt && process.stdin.isTTY === true;
       try {
         const resolved = await resolveProviderCredentials(candidate, vault, {
@@ -146002,6 +146409,13 @@ async function setupSessionWithConfig(opts) {
   });
   await selectEmbedder(session, rawConfig.embeddings, logger);
   for (const iso2 of session.isolators.list()) security.registry.register(iso2);
+  try {
+    const bootPrefs = await loadPreferences();
+    for (const name of bootPrefs.disabledProviders ?? []) {
+      session.providers.setEnabled(name, false);
+    }
+  } catch {
+  }
   const { credentialResolver } = await activateProvider({
     session,
     config,