@mutagent/cli 0.1.220 → 0.1.222

package/dist/bin/cli.js

@@ -58,6 +58,7 @@ function loadConfig() {
     apiKey: process.env.MUTAGENT_API_KEY ?? credentials?.apiKey ?? rcConfig?.apiKey,
     endpoint: process.env.MUTAGENT_ENDPOINT ?? credentials?.endpoint ?? rcConfig?.endpoint,
     defaultWorkspace: credentials?.defaultWorkspace ?? rcConfig?.defaultWorkspace,
+    defaultWorkspaceSource: credentials?.defaultWorkspace ? credentials.defaultWorkspaceSource ?? "login-inferred" : rcConfig?.defaultWorkspace ? "login-inferred" : undefined,
     defaultOrganization: credentials?.defaultOrganization ?? rcConfig?.defaultOrganization
   };
   return configSchema.parse(merged);
@@ -83,11 +84,15 @@ function saveFullCredentials(creds) {
       existingCredentials = JSON.parse(readFileSync(CREDENTIALS_FILE, "utf-8"));
     } catch {}
   }
+  const existingSource = existingCredentials.defaultWorkspaceSource;
+  const workspaceChanged = creds.workspaceId !== undefined && creds.workspaceId !== existingCredentials.defaultWorkspace;
+  const source = creds.workspaceId === undefined ? existingSource : workspaceChanged ? "login-inferred" : existingSource ?? "login-inferred";
   const credentials = {
     ...existingCredentials,
     apiKey: creds.apiKey,
     endpoint: creds.endpoint ?? existingCredentials.endpoint ?? "https://api.mutagent.io",
     defaultWorkspace: creds.workspaceId ?? existingCredentials.defaultWorkspace,
+    defaultWorkspaceSource: source,
     defaultOrganization: creds.organizationId ?? existingCredentials.defaultOrganization,
     expiresAt: creds.expiresAt
   };
@@ -109,7 +114,7 @@ function hasCredentials() {
 function getApiKey() {
   return process.env.MUTAGENT_API_KEY ?? loadConfig().apiKey;
 }
-function setDefaultWorkspace(workspaceId) {
+function setDefaultWorkspace(workspaceId, source = "user") {
   if (!existsSync(CREDENTIALS_DIR)) {
     mkdirSync(CREDENTIALS_DIR, { recursive: true });
   }
@@ -121,7 +126,8 @@ function setDefaultWorkspace(workspaceId) {
   }
   const updated = {
     ...existingCredentials,
-    defaultWorkspace: workspaceId
+    defaultWorkspace: workspaceId,
+    defaultWorkspaceSource: source
   };
   writeFileSync(CREDENTIALS_FILE, JSON.stringify(updated, null, 2));
 }
@@ -149,12 +155,14 @@ var init_config = __esm(() => {
     format: z.enum(["table", "json"]).default("table"),
     timeout: z.number().default(30000),
     defaultWorkspace: z.string().optional(),
+    defaultWorkspaceSource: z.enum(["user", "login-inferred"]).optional(),
     defaultOrganization: z.string().optional()
   });
   credentialsSchema = z.object({
     apiKey: z.string().optional(),
     endpoint: z.string().optional(),
     defaultWorkspace: z.string().optional(),
+    defaultWorkspaceSource: z.enum(["user", "login-inferred"]).optional(),
     defaultOrganization: z.string().optional(),
     expiresAt: z.string().optional()
   }).loose();
@@ -317,6 +325,25 @@ var init_errors = __esm(() => {
   };
 });
 
+// src/lib/provider-request.ts
+function buildCreateProviderBody(data) {
+  const body = {
+    name: data.name,
+    provider: data.provider,
+    isDefault: data.isDefault ?? false
+  };
+  if (data.apiKey)
+    body.apiKey = data.apiKey;
+  if (data.baseUrl)
+    body.baseUrl = data.baseUrl;
+  if (data.hostedFamily)
+    body.hostedFamily = data.hostedFamily;
+  if (data.credentialFields && Object.keys(data.credentialFields).length > 0) {
+    body.credentialFields = data.credentialFields;
+  }
+  return body;
+}
+
 // src/lib/sdk-client.ts
 var exports_sdk_client = {};
 __export(exports_sdk_client, {
@@ -335,11 +362,15 @@ class SDKClientWrapper {
   endpoint;
   workspaceId;
   organizationId;
+  workspaceResolution = "none";
   constructor(opts) {
     this.apiKey = opts.apiKey;
     this.endpoint = opts.serverURL ?? "http://localhost:3003";
     this.workspaceId = opts.workspaceId;
     this.organizationId = opts.organizationId;
+    if (opts.workspaceId && opts.workspaceSource === "user") {
+      this.workspaceResolution = "configured";
+    }
     const httpClient = new HTTPClient;
     httpClient.addHook("beforeRequest", (req) => {
       if (this.workspaceId)
@@ -583,7 +614,8 @@ class SDKClientWrapper {
     return this.organizationId;
   }
   async ensureContext() {
-    if (this.organizationId && this.workspaceId)
+    const needsWorkspaceClassification = !this.workspaceId || this.workspaceResolution === "none";
+    if (this.organizationId && !needsWorkspaceClassification)
       return;
     if (!this.organizationId) {
       let orgs = await fetchOrganizations(this.apiKey, this.endpoint).catch(() => []);
@@ -595,18 +627,41 @@ class SDKClientWrapper {
         this.organizationId = orgs[0].id;
       }
     }
-    if (!this.workspaceId && this.organizationId) {
+    if (this.workspaceResolution === "none" && this.organizationId) {
       try {
         const response = await this.sdk.workspaces.listWorkspaces({ includeInactive: false });
         const workspaces = response.workspaces;
-        if (workspaces.length > 0) {
-          const defaultWs = workspaces.find((ws) => ws.isDefault) ?? workspaces[0];
-          if (defaultWs)
+        if (workspaces.length === 1 && workspaces[0]) {
+          this.workspaceId = String(workspaces[0].id);
+          this.workspaceResolution = "sole";
+        } else if (workspaces.length > 1) {
+          const defaultWs = workspaces.find((ws) => ws.isDefault);
+          if (defaultWs) {
             this.workspaceId = String(defaultWs.id);
+            this.workspaceResolution = "configured";
+          } else {
+            const first = workspaces[0] ?? undefined;
+            if (first) {
+              this.workspaceId = this.workspaceId ?? String(first.id);
+              this.workspaceResolution = "ambiguous";
+            }
+          }
         }
       } catch {}
     }
   }
+  getWorkspaceResolution() {
+    return this.workspaceResolution;
+  }
+  requireUnambiguousWorkspace() {
+    if (!this.workspaceId || this.workspaceResolution === "none") {
+      throw new MutagentError("WORKSPACE_REQUIRED", "No workspace configured.", "Set one with: mutagent config set workspace <workspace-id>  (list them with: mutagent workspaces list)");
+    }
+    if (this.workspaceResolution === "ambiguous") {
+      throw new MutagentError("WORKSPACE_AMBIGUOUS", "Several workspaces are available and none is marked default, so the target for this write is ambiguous.", "Choose one explicitly: mutagent config set workspace <workspace-id>  (list them with: mutagent workspaces list)");
+    }
+    return this.workspaceId;
+  }
   async testProvider(id) {
     try {
       const response = await this.sdk.providerConfigs.testProvider({
@@ -618,21 +673,20 @@ class SDKClientWrapper {
     }
   }
   async createProvider(data) {
+    this.requireUnambiguousWorkspace();
+    const body = buildCreateProviderBody(data);
     try {
-      const response = await this.sdk.providerConfigs.createProvider({
-        name: data.name,
-        provider: data.provider,
-        apiKey: data.apiKey,
-        scope: data.scope ?? {},
-        baseUrl: data.baseUrl,
-        isDefault: data.isDefault
+      const created = await this.request("/api/providers", {
+        method: "POST",
+        body: JSON.stringify(body)
       });
-      return response;
+      return created;
     } catch (error) {
       this.handleError(error);
     }
   }
   async updateProvider(id, data) {
+    const workspaceId = this.requireUnambiguousWorkspace();
     try {
       const response = await this.sdk.providerConfigs.updateProvider({
         id,
@@ -644,14 +698,16 @@ class SDKClientWrapper {
           baseUrl: data.baseUrl
         }
       });
-      return response;
+      return { ...response, workspaceId };
     } catch (error) {
       this.handleError(error);
     }
   }
   async deleteProvider(id) {
+    const workspaceId = this.requireUnambiguousWorkspace();
     try {
       await this.sdk.providerConfigs.deleteProvider({ id });
+      return { workspaceId };
     } catch (error) {
       this.handleError(error);
     }
@@ -668,7 +724,8 @@ async function getSDKClient() {
       apiKey,
       serverURL: config.endpoint,
       workspaceId: config.defaultWorkspace,
-      organizationId: config.defaultOrganization
+      organizationId: config.defaultOrganization,
+      workspaceSource: config.defaultWorkspaceSource
     });
     await sdkClient.ensureContext().catch((err) => {
       if (process.env.MUTAGENT_DEBUG) {
@@ -2192,80 +2249,118 @@ init_sdk_client();
 import { Command as Command5 } from "commander";
 import chalk11 from "chalk";
 init_errors();
+import { Provider as ProviderCatalogId } from "@mutagent/sdk/models";
 
 // src/commands/providers/add.ts
 init_sdk_client();
 import chalk8 from "chalk";
 init_errors();
-function resolveScope(scopeFlag, client) {
-  const scope = scopeFlag ?? "workspace";
-  if (scope === "workspace") {
-    const wsId = client.getCurrentWorkspaceId();
-    if (!wsId) {
-      throw new MutagentError("MISSING_WORKSPACE", "No workspace configured. Cannot create workspace-scoped provider.", "Run: mutagent config set defaultWorkspace <workspace-id>");
-    }
-    return { workspaceId: wsId };
-  }
-  if (scope === "org") {
-    const orgId = client.getCurrentOrgId();
-    if (!orgId) {
-      throw new MutagentError("MISSING_ORGANIZATION", "No organization configured. Cannot create org-scoped provider.", "Run: mutagent config set defaultOrganization <org-id>");
-    }
-    return { organizationId: orgId };
-  }
-  return {};
+var GATEWAY_HOSTED_FAMILIES = {
+  azure: ["openai", "anthropic"],
+  vertex: ["gemini", "anthropic"],
+  bedrock: ["anthropic"]
+};
+var GATEWAY_PROVIDERS = new Set(Object.keys(GATEWAY_HOSTED_FAMILIES));
+var HOSTED_FAMILIES = [
+  ...new Set(Object.values(GATEWAY_HOSTED_FAMILIES).flat())
+];
+var SECRET_WIRE_NAME = {
+  vertex: "serviceAccountKey"
+};
+function collectCredentialFields(options) {
+  const fields = {};
+  if (options.resourceEndpoint)
+    fields.resourceEndpoint = options.resourceEndpoint;
+  if (options.deploymentName)
+    fields.deploymentName = options.deploymentName;
+  if (options.apiVersion)
+    fields.apiVersion = options.apiVersion;
+  if (options.projectId)
+    fields.projectId = options.projectId;
+  if (options.region)
+    fields.region = options.region;
+  return fields;
 }
 function registerAddCommand(parent) {
-  parent.command("add").description("Add a new provider configuration").requiredOption("-p, --provider <type>", "Provider type (openai, anthropic, google, ...)").requiredOption("-n, --name <name>", "Display name for this provider").requiredOption("-k, --api-key <key>", "API key for the provider").option("-s, --scope <scope>", "Scope: workspace (default), org, user", "workspace").option("--base-url <url>", "Custom base URL for the provider API").option("--set-default", "Set as default provider for this scope").addHelpText("after", `
+  parent.command("add").description("Add a new provider configuration").requiredOption("-p, --provider <type>", "Provider type (openai, anthropic, azure, ...)").requiredOption("-n, --name <name>", "Display name for this provider").option("-k, --api-key <key>", "API key for the provider (every entry except Google Vertex)").option("--service-account-key <json>", "Google Vertex service-account credential JSON").option("--hosted-family <family>", `Hosted model family for gateway providers: ${HOSTED_FAMILIES.join(", ")}`).option("--base-url <url>", "Custom base URL for the provider API").option("--resource-endpoint <url>", "Azure resource endpoint").option("--deployment-name <name>", "Azure deployment name").option("--api-version <version>", "Azure API version (e.g. 2024-08-01-preview)").option("--project-id <id>", "Google Vertex project ID").option("--region <region>", "Region (Vertex location, or AWS Bedrock region)").option("--set-default", "Set as the default provider of its kind").addHelpText("after", `
 Examples:
   ${chalk8.dim("$")} mutagent providers add --provider openai --name "My OpenAI" --api-key $OPENAI_API_KEY
-  ${chalk8.dim("$")} mutagent providers add --provider anthropic --name "Team Claude" --api-key $KEY --scope org
-  ${chalk8.dim("$")} mutagent providers add --provider openai --name "Personal" --api-key $KEY --scope user --set-default
-  ${chalk8.dim("$")} mutagent providers add --provider custom --name "Ollama" --api-key none --base-url http://localhost:11434 --json
+  ${chalk8.dim("$")} mutagent providers add --provider azure --name "Azure GPT" --api-key $KEY \\
+      --hosted-family openai --resource-endpoint https://my.openai.azure.com --deployment-name gpt-5
+  ${chalk8.dim("$")} mutagent providers add --provider bedrock --name "Bedrock Claude" --api-key $KEY \\
+      --hosted-family anthropic --region us-east-1
+  ${chalk8.dim("$")} mutagent providers add --provider custom --name "Ollama" --api-key none --base-url https://ollama.internal --json
+
+Gateway providers (${[...GATEWAY_PROVIDERS].join(", ")}) serve another vendor's models and
+require --hosted-family. Direct providers must not set it.
 
-Scope Resolution:
-  workspace (default)   Uses your configured workspace
-  org                   Uses your configured organization
-  user                  Personal provider config
+Providers are configured for your workspace. Set the target with:
+  ${chalk8.dim("$")} mutagent config set workspace <workspace-id>
 
 The API key is encrypted server-side and never returned in plain text.
+
+AI Agent Directive:
+  Run 'mutagent providers list --json' first to check whether the provider already exists.
+  This command writes a credential — confirm with the user before running it.
     `).action(async (options) => {
     const isJson = getJsonFlag(parent);
     const output = new OutputFormatter(isJson ? "json" : "table");
     try {
       const providerType = validateProviderType(options.provider);
-      if (!options.apiKey || options.apiKey.trim() === "") {
-        throw new MutagentError("MISSING_API_KEY", "API key cannot be empty", "Provide a valid API key with --api-key");
+      const secretWireName = SECRET_WIRE_NAME[providerType] ?? "apiKey";
+      const secret = secretWireName === "apiKey" ? options.apiKey : options.serviceAccountKey;
+      const secretFlag = secretWireName === "apiKey" ? "--api-key" : "--service-account-key";
+      if (!secret || secret.trim() === "") {
+        throw new MutagentError("MISSING_CREDENTIAL", `${providerType} requires a credential and none was provided.`, `Provide it with ${secretFlag}`);
+      }
+      if (secretWireName !== "apiKey" && options.apiKey) {
+        throw new MutagentError("WRONG_CREDENTIAL_FLAG", `'${providerType}' does not take an API key.`, `Use ${secretFlag} instead of --api-key`);
       }
-      const validScopes = ["workspace", "org", "user"];
-      if (options.scope && !validScopes.includes(options.scope)) {
-        throw new MutagentError("INVALID_SCOPE", `Invalid scope: ${options.scope}`, `Valid scopes: ${validScopes.join(", ")}`);
+      const allowedFamilies = GATEWAY_HOSTED_FAMILIES[providerType];
+      const isGateway = allowedFamilies !== undefined;
+      if (options.hostedFamily) {
+        if (!isGateway) {
+          throw new MutagentError("HOSTED_FAMILY_NOT_APPLICABLE", `'${providerType}' serves its own models, so it has no hosted family.`, `Drop --hosted-family, or pick a gateway provider: ${[...GATEWAY_PROVIDERS].join(", ")}`);
+        }
+        if (!allowedFamilies.includes(options.hostedFamily)) {
+          throw new MutagentError("INVALID_HOSTED_FAMILY", `'${providerType}' does not host '${options.hostedFamily}'.`, `${providerType} hosts: ${allowedFamilies.join(", ")}`);
+        }
+      } else if (isGateway && allowedFamilies.length > 1) {
+        throw new MutagentError("MISSING_HOSTED_FAMILY", `'${providerType}' is a gateway and needs to know which model family it serves.`, `Add --hosted-family <${allowedFamilies.join("|")}>`);
       }
       const client = await getSDKClient();
-      const scope = resolveScope(options.scope, client);
+      const workspaceId = client.requireUnambiguousWorkspace();
+      const credentialFields = collectCredentialFields(options);
+      if (secretWireName !== "apiKey")
+        credentialFields[secretWireName] = secret;
       const created = await client.createProvider({
         name: options.name,
         provider: providerType,
-        apiKey: options.apiKey,
-        scope,
+        apiKey: secretWireName === "apiKey" ? secret : undefined,
         baseUrl: options.baseUrl,
-        isDefault: options.setDefault
+        isDefault: options.setDefault,
+        hostedFamily: options.hostedFamily,
+        credentialFields
       });
       if (isJson) {
-        const directive = buildProviderCreatedDirective(created, options.scope ?? "workspace");
+        const directive = buildProviderCreatedDirective(created, workspaceId);
         echoDirectiveToStderr(directive);
         output.output({
           success: true,
           ...created,
+          workspaceId,
           _links: providerLinks(created.id),
           _directive: directive
         });
       } else {
         output.success(`Provider created: ${created.name ?? options.name}`);
-        console.log(`  ID:    ${String(created.id)}`);
-        console.log(`  Type:  ${providerType}`);
-        console.log(`  Scope: ${options.scope ?? "workspace"}`);
-        console.log(`  URL:   ${providerLink(created.id)}`);
+        console.log(`  ID:        ${String(created.id)}`);
+        console.log(`  Type:      ${providerType}`);
+        if (options.hostedFamily) {
+          console.log(`  Serves:    ${options.hostedFamily}`);
+        }
+        console.log(`  Workspace: ${workspaceId}`);
+        console.log(`  URL:       ${providerLink(created.id)}`);
         if (options.setDefault) {
           console.log(chalk8.green("  Set as default provider"));
         }
@@ -2277,14 +2372,14 @@ The API key is encrypted server-side and never returned in plain text.
     }
   });
 }
-function buildProviderCreatedDirective(provider, scope) {
+function buildProviderCreatedDirective(provider, workspaceId) {
   const title = `Provider Created — ${provider.name ?? "Unknown"}`;
   const dashboardUrl = providerLink(provider.id);
   const apiUrl = `/api/providers/${String(provider.id)}`;
   const rows = [
     { label: "Name", value: provider.name ?? "Unknown" },
     { label: "Provider ID", value: String(provider.id) },
-    { label: "Scope", value: scope }
+    { label: "Workspace", value: workspaceId }
   ];
   const links = [
     { label: "Settings", url: dashboardUrl },
@@ -2298,7 +2393,7 @@ function buildProviderCreatedDirective(provider, scope) {
     display: "status_card",
     template: "provider_created",
     title,
-    fields: { providerId: String(provider.id), name: provider.name, scope },
+    fields: { providerId: String(provider.id), name: provider.name, workspaceId },
     links: { settings: dashboardUrl, api: apiUrl },
     next,
     instruction: "MANDATORY: Display this card to the user before proceeding.",
@@ -2311,7 +2406,7 @@ init_sdk_client();
 import chalk9 from "chalk";
 init_errors();
 function registerUpdateCommand(parent) {
-  parent.command("update").description("Update an existing provider configuration").argument("<id>", "Provider ID (from: mutagent providers list)").option("-n, --name <name>", "Updated display name").option("-k, --api-key <key>", "Updated API key (will be re-encrypted)").option("--active <bool>", "Activate or deactivate (true|false)").option("--set-default", "Set as default provider for its scope").option("--base-url <url>", 'Updated base URL (use "" to clear)').addHelpText("after", `
+  parent.command("update").description("Update an existing provider configuration").argument("<id>", "Provider ID (from: mutagent providers list)").option("-n, --name <name>", "Updated display name").option("-k, --api-key <key>", "Updated API key (will be re-encrypted)").option("--active <bool>", "Activate or deactivate (true|false)").option("--set-default", "Set as the default provider of its kind").option("--base-url <url>", 'Updated base URL (use "" to clear)').addHelpText("after", `
 Examples:
   ${chalk9.dim("$")} mutagent providers update <id> --name "New Name"
   ${chalk9.dim("$")} mutagent providers update <id> --api-key $NEW_KEY --json
@@ -2364,8 +2459,11 @@ PATCH semantics — only provided fields are updated.
         });
       } else {
         output.success(`Provider updated: ${String(updated.name ?? id)}`);
-        console.log(`  ID:  ${String(updated.id ?? id)}`);
-        console.log(`  URL: ${providerLink(updated.id ?? id)}`);
+        console.log(`  ID:        ${String(updated.id ?? id)}`);
+        if (updated.workspaceId) {
+          console.log(`  Workspace: ${updated.workspaceId}`);
+        }
+        console.log(`  URL:       ${providerLink(updated.id ?? id)}`);
         if (options.apiKey) {
           console.log(chalk9.dim("  API key re-encrypted server-side."));
         }
@@ -2427,8 +2525,9 @@ ${chalk10.dim("Warning: API keys are AES-256-GCM encrypted and irrecoverable aft
 ` + `Use --force to confirm: mutagent providers delete ${id} --force`);
       }
       const client = await getSDKClient();
+      let deletedFrom;
       try {
-        await client.deleteProvider(id);
+        deletedFrom = (await client.deleteProvider(id)).workspaceId;
       } catch (error) {
         if (error instanceof ApiError && error.statusCode === 404) {
           if (isJson) {
@@ -2458,7 +2557,10 @@ ${chalk10.dim("Warning: API keys are AES-256-GCM encrypted and irrecoverable aft
         });
       } else {
         output.success(`Deleted provider: ${id}`);
-        console.log(`  Settings: ${providerSettingsLink()}`);
+        if (deletedFrom) {
+          console.log(`  Workspace: ${deletedFrom}`);
+        }
+        console.log(`  Settings:  ${providerSettingsLink()}`);
       }
     } catch (error) {
       handleError(error, isJson);
@@ -2484,24 +2586,13 @@ function buildProviderDeletedDirective(id) {
 }
 
 // src/commands/providers/index.ts
-var VALID_PROVIDER_TYPES = [
-  "openai",
-  "anthropic",
-  "google",
-  "azure",
-  "bedrock",
-  "cohere",
-  "mistral",
-  "groq",
-  "together",
-  "replicate",
-  "custom"
-];
+var VALID_PROVIDER_TYPES = Object.values(ProviderCatalogId);
 function validateProviderType(type) {
-  if (!VALID_PROVIDER_TYPES.includes(type)) {
+  const match = VALID_PROVIDER_TYPES.find((entry) => entry === type);
+  if (!match) {
     throw new MutagentError("INVALID_PROVIDER_TYPE", `Invalid provider type: ${type}`, `Valid types: ${VALID_PROVIDER_TYPES.join(", ")}`);
   }
-  return type;
+  return match;
 }
 function createProvidersCommand() {
   const providers = new Command5("providers").description("Manage LLM provider configurations (BYOK)").addHelpText("after", `
@@ -2514,7 +2605,7 @@ Examples:
   ${chalk11.dim("$")} mutagent providers test <provider-id>
 
 Provider Types:
-  openai, anthropic, google, azure, bedrock, cohere, mistral, groq, together, replicate, custom
+  ${VALID_PROVIDER_TYPES.join(", ")}
 
 Subcommands:
   list, get, add, update, delete, test
@@ -2567,10 +2658,10 @@ Examples:
         const withLinks = result.data.map((p) => ({
           id: p.id,
           name: p.name,
-          type: p.type,
+          provider: p.provider,
           isActive: p.isActive,
           updatedAt: p.updatedAt,
-          ...options.models ? { models: catalogByKind[p.type] ?? [] } : {},
+          ...options.models ? { models: catalogByKind[p.provider] ?? [] } : {},
           _links: providerLinks(p.id)
         }));
         output.output({ ...result, data: withLinks });
@@ -2582,11 +2673,11 @@ Examples:
           const formatted = result.data.map((p) => ({
             id: p.id,
             name: p.name,
-            type: p.type,
+            provider: p.provider,
             baseUrl: p.baseUrl ?? "default",
             active: p.isActive ? "Yes" : "No",
             updated: p.updatedAt ? new Date(p.updatedAt).toLocaleDateString() : "N/A",
-            ...options.models ? { models: formatModels(p.type) } : {},
+            ...options.models ? { models: formatModels(p.provider) } : {},
             url: providerLink(p.id)
           }));
           output.output(formatted);
@@ -2612,7 +2703,7 @@ Examples:
         const formatted = {
           id: provider.id,
           name: provider.name,
-          type: provider.type,
+          provider: provider.provider,
           baseUrl: provider.baseUrl ?? "default",
           isActive: provider.isActive ? "Yes" : "No",
           createdBy: provider.createdBy ?? "N/A",
@@ -2645,12 +2736,13 @@ ${chalk11.dim("Tests connectivity and lists available models for the provider.")
         output.output({ ...result, _links: providerLinks(id) });
       } else {
         if (result.success) {
-          output.success(`Provider test passed (${String(result.responseTimeMs)}ms)`);
+          const latency = typeof result.latencyMs === "number" ? ` (${String(result.latencyMs)}ms)` : "";
+          output.success(`Provider test passed${latency}`);
           console.log(chalk11.green(`Message: ${result.message}`));
-          if (result.availableModels && result.availableModels.length > 0) {
+          if (result.models && result.models.length > 0) {
             console.log(chalk11.bold(`
 Available Models:`));
-            result.availableModels.forEach((model) => {
+            result.models.forEach((model) => {
               console.log(`  - ${model}`);
             });
           }
@@ -3464,7 +3556,7 @@ What it does:
                   workspaceValidation = { id: found.id, name: found.name, validated: true, corrected: false };
                 } else if (workspaces[0]) {
                   const first = workspaces[0];
-                  (deps.setDefaultWorkspace ?? setDefaultWorkspace)(first.id);
+                  (deps.setDefaultWorkspace ?? setDefaultWorkspace)(first.id, "login-inferred");
                   workspace = first.id;
                   workspaceValidation = { id: first.id, name: first.name, validated: true, corrected: true };
                 }
@@ -5044,5 +5136,5 @@ program.addCommand(createInstallCommand());
 program.addCommand(createFeedbackCommand());
 program.parse();
 
-//# debugId=EC56D6215B8176D364756E2164756E21
+//# debugId=EF6771B96785663564756E2164756E21
 //# sourceMappingURL=cli.js.map