@noxsoft/anima 5.1.2 → 6.5.0

package/dist/{anthropic-direct-runner-CzQb7QkD.js → anthropic-direct-runner-C2Kwju-r.js}

@@ -4,13 +4,13 @@ import { c as escapeRegExp, d as isRecord, t as CONFIG_DIR, y as resolveUserPath
 import { n as runExec } from "./exec-BtBJICHE.js";
 import { t as resolveAnimaPackageRoot } from "./anima-root-CxtpOklc.js";
 import { C as loadWorkspaceBootstrapFiles, S as filterBootstrapFilesForSession, c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir, u as resolveSessionAgentIds } from "./agent-scope-Dm8IL1Ks.js";
-import { f as resolveDefaultModelForAgent, m as resolveModelRefFromString, r as buildModelAliasIndex } from "./model-selection-DFbDH9o2.js";
-import { c as listDeliverableMessageChannels } from "./message-channel-DdOBO6Qm.js";
+import { f as resolveDefaultModelForAgent, m as resolveModelRefFromString, r as buildModelAliasIndex } from "./model-selection-DcO3qJOu.js";
+import { c as listDeliverableMessageChannels } from "./message-channel-DIHHKJhk.js";
 import { n as SILENT_REPLY_TOKEN, t as HEARTBEAT_TOKEN } from "./tokens-CmlI2hSz.js";
 import { C as resolveBootstrapTotalMaxChars, S as resolveBootstrapMaxChars, x as buildBootstrapContextFiles } from "./pi-embedded-helpers-D2SLlgS4.js";
 import { c as getFileExtension, f as normalizeMimeType } from "./image-ops-BdrMmiG4.js";
 import { r as normalizeChannelId } from "./plugins-BOMS6J5A.js";
-import { r as requireApiKey, t as getApiKeyForModel } from "./model-auth-CxAB4iZ0.js";
+import { r as requireApiKey, t as getApiKeyForModel } from "./model-auth-KpsOXKDc.js";
 import { execSync, spawn } from "node:child_process";
 import os, { tmpdir } from "node:os";
 import path from "node:path";
@@ -2511,6 +2511,17 @@ async function resolveAnimaDocsPath(params) {
 	return fs.existsSync(packageDocs) ? packageDocs : null;
 }
 
+//#endregion
+//#region src/agents/runner-capabilities.ts
+const CAPABILITY_HINTS = {
+	"cli-native": "Use your native CLI capabilities when needed. Do not assume external MCP-style tools exist unless they are explicitly provided.",
+	"local-tools": "Use only the tools explicitly provided in this session. Do not assume any other external MCP-style tools exist.",
+	disabled: "Tools are disabled in this session. Do not call tools."
+};
+function appendRunnerCapabilityPrompt(prompt, mode) {
+	return [prompt?.trim(), CAPABILITY_HINTS[mode]].filter(Boolean).join("\n");
+}
+
 //#endregion
 //#region src/logging/redact-identifier.ts
 function sha256HexPrefix(value, len = 12) {
@@ -2580,6 +2591,18 @@ function resolveRunWorkspaceDir(params) {
 
 //#endregion
 //#region src/agents/anthropic-direct-runner.ts
+/**
+* Anthropic Direct API Runner
+*
+* Makes calls directly to api.anthropic.com without needing the claude CLI
+* binary to be installed or logged in. Works with any valid token:
+*
+*   sk-ant-api01-...  (Console API key)
+*   sk-ant-oat01-...  (Claude Code OAuth access token)
+*
+* This runner is automatically used when an `anthropic:default` token credential
+* is present in the auth store and the claude CLI is unavailable or not logged in.
+*/
 const log = createSubsystemLogger("agent/anthropic-direct");
 const MODEL_MAP = {
 	opus: "claude-opus-4-5",
@@ -2655,7 +2678,7 @@ async function runAnthropicDirectAgent(params) {
 		cwd: process.cwd(),
 		moduleUrl: import.meta.url
 	});
-	const extraSystemPrompt = [params.extraSystemPrompt?.trim(), "Tools are disabled in this session. Do not call tools."].filter(Boolean).join("\n");
+	const extraSystemPrompt = appendRunnerCapabilityPrompt(params.extraSystemPrompt, "disabled");
 	const systemPrompt = buildSystemPrompt({
 		workspaceDir,
 		config: params.config,
@@ -2695,7 +2718,7 @@ async function runAnthropicDirectAgent(params) {
 				"x-api-key": params.token,
 				"anthropic-version": "2023-06-01",
 				"content-type": "application/json",
-				"user-agent": `anima/3.0.5 (direct-runner; ${os.platform()})`
+				"user-agent": `anima/5.1.3 (direct-runner; ${os.platform()})`
 			},
 			body: JSON.stringify(requestBody),
 			signal: controller.signal
@@ -2728,7 +2751,6 @@ async function runAnthropicDirectAgent(params) {
 			stopReason: data.stop_reason,
 			contentTypes: (data.content ?? []).map((b) => b.type)
 		});
-		await params.onAssistantMessageStart?.();
 		if (outputText && params.onPartialReply) await params.onPartialReply({ text: outputText });
 		history.messages.push({
 			role: "assistant",
@@ -2813,4 +2835,4 @@ async function testAnthropicToken(token) {
 }
 
 //#endregion
-export { makeBootstrapWarn as $, getTtsMaxLength as A, resolveTtsPrefsPath as B, resolveUserTimeFormat as C, sanitizeBinaryOutput as D, killProcessTree as E, maybeApplyTtsToPayload as F, setTtsMaxLength as G, setLastTtsAttempt as H, normalizeTtsAutoMode as I, textToSpeechTelephony as J, setTtsProvider as K, resolveTtsApiKey as L, isSummarizationEnabled as M, isTtsEnabled as N, buildTtsSystemPromptHint as O, isTtsProviderConfigured as P, isVoiceCompatibleAudio as Q, resolveTtsAutoMode as R, formatUserTime as S, getShellConfig as T, setSummarizationEnabled as U, resolveTtsProviderOrder as V, setTtsEnabled as W, OPENAI_TTS_VOICES as X, OPENAI_TTS_MODELS as Y, resolveModel$1 as Z, resolveSessionIdToSend as _, sha256HexPrefix as a, DEFAULT_HEARTBEAT_ACK_MAX_CHARS as at, buildAgentSystemPrompt as b, buildCliArgs as c, resolveHeartbeatPrompt as ct, cleanupSuspendedCliProcesses as d, resolveBootstrapContextForRun as et, enqueueCliRun as f, resolvePromptInput as g, parseCliJsonl as h, resolveRunWorkspaceDir as i, triggerInternalHook as it, getTtsProvider as j, getLastTtsAttempt as k, buildSystemPrompt as l, stripHeartbeatToken as lt, parseCliJson as m, testAnthropicToken as n, createInternalHookEvent as nt, resolveAnimaDocsPath as o, DEFAULT_HEARTBEAT_EVERY as ot, normalizeCliModel as p, textToSpeech as q, redactRunIdentifier as r, registerInternalHook as rt, appendImagePathsToPrompt as s, isHeartbeatContentEffectivelyEmpty as st, runAnthropicDirectAgent as t, clearInternalHooks as tt, cleanupResumeProcesses as u, resolveSystemPromptUsage as v, resolveUserTimezone as w, buildSystemPromptParams as x, writeCliImages as y, resolveTtsConfig as z };
+export { isVoiceCompatibleAudio as $, getLastTtsAttempt as A, resolveTtsConfig as B, formatUserTime as C, killProcessTree as D, getShellConfig as E, isTtsProviderConfigured as F, setTtsEnabled as G, resolveTtsProviderOrder as H, maybeApplyTtsToPayload as I, textToSpeech as J, setTtsMaxLength as K, normalizeTtsAutoMode as L, getTtsProvider as M, isSummarizationEnabled as N, sanitizeBinaryOutput as O, isTtsEnabled as P, resolveModel$1 as Q, resolveTtsApiKey as R, buildSystemPromptParams as S, resolveUserTimezone as T, setLastTtsAttempt as U, resolveTtsPrefsPath as V, setSummarizationEnabled as W, OPENAI_TTS_MODELS as X, textToSpeechTelephony as Y, OPENAI_TTS_VOICES as Z, resolvePromptInput as _, sha256HexPrefix as a, triggerInternalHook as at, writeCliImages as b, appendImagePathsToPrompt as c, isHeartbeatContentEffectivelyEmpty as ct, cleanupResumeProcesses as d, makeBootstrapWarn as et, cleanupSuspendedCliProcesses as f, parseCliJsonl as g, parseCliJson as h, resolveRunWorkspaceDir as i, registerInternalHook as it, getTtsMaxLength as j, buildTtsSystemPromptHint as k, buildCliArgs as l, resolveHeartbeatPrompt as lt, normalizeCliModel as m, testAnthropicToken as n, clearInternalHooks as nt, appendRunnerCapabilityPrompt as o, DEFAULT_HEARTBEAT_ACK_MAX_CHARS as ot, enqueueCliRun as p, setTtsProvider as q, redactRunIdentifier as r, createInternalHookEvent as rt, resolveAnimaDocsPath as s, DEFAULT_HEARTBEAT_EVERY as st, runAnthropicDirectAgent as t, resolveBootstrapContextForRun as tt, buildSystemPrompt as u, stripHeartbeatToken as ut, resolveSessionIdToSend as v, resolveUserTimeFormat as w, buildAgentSystemPrompt as x, resolveSystemPromptUsage as y, resolveTtsAutoMode as z };

package/dist/{audit-ByHmjh-G.js → audit-B05W5ckN.js}

@@ -1,23 +1,24 @@
 import { f as resolveOAuthDir, m as resolveStateDir, o as resolveConfigPath } from "./paths-zhVksOvm.js";
 import { l as normalizeAgentId } from "./session-key-DAZmp8ll.js";
-import { n as runExec } from "./exec-cazBMA02.js";
-import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-D3HZp64M.js";
-import { D as INCLUDE_KEY, O as MAX_INCLUDE_DEPTH, r as createConfigIO } from "./config-DqwH4y-D.js";
-import { a as MANIFEST_KEY, l as normalizePluginsConfig } from "./manifest-registry-D-DOtLzo.js";
-import { _ as resolveToolProfilePolicy, c as resolveSandboxConfigForAgent, u as resolveSandboxToolPolicyForAgent } from "./sandbox-B8Nza4lP.js";
+import { n as runExec } from "./exec-BylR5qWS.js";
+import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-CXxC8FFX.js";
+import { D as INCLUDE_KEY, O as MAX_INCLUDE_DEPTH, r as createConfigIO } from "./config-DaD4FsAn.js";
+import { a as MANIFEST_KEY, l as normalizePluginsConfig } from "./manifest-registry-qF960vMH.js";
+import { _ as resolveToolProfilePolicy, c as resolveSandboxConfigForAgent, u as resolveSandboxToolPolicyForAgent } from "./sandbox-pBHlfFdB.js";
 import { t as formatCliCommand } from "./command-format-BCtkuvqF.js";
-import { i as resolveGatewayAuth } from "./auth-DXrALxdm.js";
-import { a as resolveBrowserConfig, h as resolveBrowserControlAuth, o as resolveProfile } from "./server-context-BlJi7pjP.js";
-import { i as loadWorkspaceSkillEntries } from "./skills-CQoUYlGu.js";
+import { i as resolveGatewayAuth } from "./auth-DsC5pZ_0.js";
+import { a as resolveBrowserConfig, h as resolveBrowserControlAuth, o as resolveProfile } from "./server-context-Yx4pgBqJ.js";
+import { i as loadWorkspaceSkillEntries } from "./skills-4v6-kw0C.js";
 import { n as formatErrorMessage } from "./errors-Bv81hF2P.js";
-import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-DZYYDt1_.js";
-import { n as listChannelPlugins, r as normalizeChannelId } from "./plugins-DnJgmFJR.js";
-import { t as GatewayClient } from "./client-D9E5Wwb_.js";
-import { t as buildGatewayConnectionDetails } from "./call-DQjoz63V.js";
-import { n as isToolAllowedByPolicies, s as readChannelAllowFromStore } from "./pi-tools.policy-ox141hP6.js";
+import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-CMsexA3K.js";
+import { n as listChannelPlugins } from "./plugins-DYcg0qBW.js";
+import { t as GatewayClient } from "./client-BWkoTfOH.js";
+import { t as buildGatewayConnectionDetails } from "./call-CDPbPDAr.js";
+import { n as isToolAllowedByPolicies, s as readChannelAllowFromStore } from "./pi-tools.policy-WdTAfqbV.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-BCnOEYau.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-1MPChTcB.js";
-import { n as extensionUsesSkippedScannerPath, r as isPathInside, t as scanDirectoryWithSummary } from "./skill-scanner-DGoUYV22.js";
+import { t as inferParamBFromIdOrName } from "./model-param-b-C1QDqzQp.js";
+import { n as extensionUsesSkippedScannerPath, r as isPathInside, t as scanDirectoryWithSummary } from "./skill-scanner-5_Y3u6SU.js";
 import os from "node:os";
 import path from "node:path";
 import JSON5 from "json5";
@@ -260,12 +261,15 @@ function resolveGatewayProbeAuth(params) {
 
 //#endregion
 //#region src/config/commands.ts
+const NATIVE_SKILLS_AUTO_ENABLED = new Set([
+	"noxsoft",
+	"discord",
+	"telegram"
+]);
 function resolveAutoDefault(providerId) {
-	const id = normalizeChannelId(providerId);
-	if (!id) return false;
-	if (id === "discord" || id === "telegram") return true;
-	if (id === "slack") return false;
-	return false;
+	const raw = providerId?.trim().toLowerCase();
+	if (!raw) return false;
+	return NATIVE_SKILLS_AUTO_ENABLED.has(raw);
 }
 function resolveNativeSkillsEnabled(params) {
 	const { providerId, providerSetting, globalSetting } = params;
@@ -581,21 +585,6 @@ async function collectChannelSecurityFindings(params) {
 	return findings;
 }
 
-//#endregion
-//#region src/shared/model-param-b.ts
-function inferParamBFromIdOrName(text) {
-	const matches = text.toLowerCase().matchAll(/(?:^|[^a-z0-9])[a-z]?(\d+(?:\.\d+)?)b(?:[^a-z0-9]|$)/g);
-	let best = null;
-	for (const match of matches) {
-		const numRaw = match[1];
-		if (!numRaw) continue;
-		const value = Number(numRaw);
-		if (!Number.isFinite(value) || value <= 0) continue;
-		if (best === null || value > best) best = value;
-	}
-	return best;
-}
-
 //#endregion
 //#region src/security/audit-extra.sync.ts
 const SMALL_MODEL_PARAM_B_MAX = 300;

package/dist/{audit-HJOpXfgY.js → audit-DDz7UOIx.js}

@@ -5,20 +5,20 @@ import { n as runExec } from "./exec-BtBJICHE.js";
 import { c as resolveDefaultAgentId, s as resolveAgentWorkspaceDir } from "./agent-scope-Dm8IL1Ks.js";
 import { i as loadWorkspaceSkillEntries } from "./skills-DtoVe1dS.js";
 import { p as MANIFEST_KEY, s as normalizePluginsConfig } from "./manifest-registry-W_OfCIRP.js";
-import { D as INCLUDE_KEY, O as MAX_INCLUDE_DEPTH, r as createConfigIO } from "./config-Ofh9gKvs.js";
-import { t as GatewayClient } from "./client-DzIcZx4J.js";
-import { t as buildGatewayConnectionDetails } from "./call-DHZ76BNg.js";
-import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-DdOBO6Qm.js";
-import { _ as resolveToolProfilePolicy, c as resolveSandboxConfigForAgent, u as resolveSandboxToolPolicyForAgent } from "./sandbox-DDOFuJU9.js";
+import { D as INCLUDE_KEY, O as MAX_INCLUDE_DEPTH, r as createConfigIO } from "./config-BrVuTQ8R.js";
+import { t as GatewayClient } from "./client-CfLiulzK.js";
+import { t as buildGatewayConnectionDetails } from "./call-B4lhqS6H.js";
+import { h as GATEWAY_CLIENT_NAMES, m as GATEWAY_CLIENT_MODES } from "./message-channel-DIHHKJhk.js";
+import { _ as resolveToolProfilePolicy, c as resolveSandboxConfigForAgent, u as resolveSandboxToolPolicyForAgent } from "./sandbox-D-N7M7lp.js";
 import { i as resolveGatewayAuth } from "./auth-Cp__MMeO.js";
-import { a as resolveBrowserConfig, h as resolveBrowserControlAuth, o as resolveProfile } from "./server-context-Dkz4Ce8z.js";
+import { a as resolveBrowserConfig, h as resolveBrowserControlAuth, o as resolveProfile } from "./server-context-Clykq0XU.js";
 import { n as formatErrorMessage } from "./errors-COFgygw8.js";
-import { n as listChannelPlugins, r as normalizeChannelId } from "./plugins-BOMS6J5A.js";
-import { l as readChannelAllowFromStore, n as isToolAllowedByPolicies } from "./pi-tools.policy-CDgjN_3f.js";
+import { n as listChannelPlugins } from "./plugins-BOMS6J5A.js";
+import { l as readChannelAllowFromStore, n as isToolAllowedByPolicies } from "./pi-tools.policy-D2FusuQa.js";
 import { n as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-Asx2qyrG.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-CVp8W9aa.js";
-import { t as inferParamBFromIdOrName } from "./model-param-b-BcBBSgiD.js";
-import { n as extensionUsesSkippedScannerPath, r as isPathInside, t as scanDirectoryWithSummary } from "./skill-scanner-FO7SyxAD.js";
+import { t as inferParamBFromIdOrName } from "./model-param-b-2KmFir_0.js";
+import { n as extensionUsesSkippedScannerPath, r as isPathInside, t as scanDirectoryWithSummary } from "./skill-scanner-Dld2ijVw.js";
 import os from "node:os";
 import path from "node:path";
 import JSON5 from "json5";
@@ -261,12 +261,15 @@ function resolveGatewayProbeAuth(params) {
 
 //#endregion
 //#region src/config/commands.ts
+const NATIVE_SKILLS_AUTO_ENABLED = new Set([
+	"noxsoft",
+	"discord",
+	"telegram"
+]);
 function resolveAutoDefault(providerId) {
-	const id = normalizeChannelId(providerId);
-	if (!id) return false;
-	if (id === "discord" || id === "telegram") return true;
-	if (id === "slack") return false;
-	return false;
+	const raw = providerId?.trim().toLowerCase();
+	if (!raw) return false;
+	return NATIVE_SKILLS_AUTO_ENABLED.has(raw);
 }
 function resolveNativeSkillsEnabled(params) {
 	const { providerId, providerSetting, globalSetting } = params;

package/dist/{auth-DXrALxdm.js → auth-DsC5pZ_0.js}

@@ -1,5 +1,5 @@
-import { M as isYes, N as logVerbose, d as defaultRuntime, j as isVerbose } from "./subsystem-BMsbqSb4.js";
-import { n as runExec } from "./exec-cazBMA02.js";
+import { M as isYes, N as logVerbose, d as defaultRuntime, j as isVerbose } from "./subsystem-BAADN1B8.js";
+import { n as runExec } from "./exec-BylR5qWS.js";
 import { a as isTrustedProxyAddress, n as isLoopbackAddress, s as parseForwardedForClientIp, u as resolveGatewayClientIp } from "./ws-BapRHqfx.js";
 import { stdin, stdout } from "node:process";
 import { existsSync } from "node:fs";

package/dist/{prompts-CneQ6SeF.js → auth-choice-DY1saszS.js}

@@ -1,9 +1,11 @@
-import { lr as loadModelCatalog } from "./reply-BgPvB-gR.js";
-import { a as resolveAgentModelPrimary } from "./agent-scope-D3HZp64M.js";
-import { _ as DEFAULT_MODEL, c as normalizeProviderId, d as resolveConfiguredModelRef, o as modelKey, r as buildModelAliasIndex, t as buildAllowedModelSet, v as DEFAULT_PROVIDER } from "./model-selection-wCaVeFbb.js";
-import { _ as readCodexCliCredentialsCached, c as upsertAuthProfile, h as resolveAnimaAgentDir, l as ensureAuthProfileStore, s as listProfilesForProvider } from "./auth-profiles-DjCH4kWT.js";
-import { a as resolveEnvApiKey, n as getCustomProviderApiKey } from "./model-auth-DKhjNVHc.js";
-import { r as ensureAuthenticated } from "./noxsoft-auth-Bmict45b.js";
+import { dr as loadModelCatalog } from "./reply-DtHlnzOx.js";
+import { a as resolveAgentModelPrimary } from "./agent-scope-CXxC8FFX.js";
+import { _ as DEFAULT_MODEL, c as normalizeProviderId, d as resolveConfiguredModelRef, o as modelKey, r as buildModelAliasIndex, t as buildAllowedModelSet, v as DEFAULT_PROVIDER } from "./model-selection-CY6r_3wt.js";
+import { l as listProfilesForProvider, p as ensureAuthProfileStore, x as readCodexCliCredentialsCached } from "./auth-profiles-C-LuhW6c.js";
+import { n as getCustomProviderApiKey, o as resolveEnvApiKey } from "./model-auth-CHB3EySM.js";
+import { r as ensureAuthenticated } from "./noxsoft-auth-CE75mBXE.js";
+import { d as setAnthropicApiKey, f as setGeminiApiKey, i as formatTokenK, p as writeOAuthCredentials, u as applyAuthProfileConfig } from "./prompts-Bq4QGFQM.js";
+import { t as applyNoxsoftBootstrap } from "./noxsoft-bootstrap-CrlkSFzd.js";
 
 //#region src/commands/auth-choice-options.ts
 const AUTH_CHOICE_GROUP_DEFS = [
@@ -41,7 +43,7 @@ const BASE_AUTH_CHOICE_OPTIONS = [
 	{
 		value: "openaiCodex",
 		label: "OpenAI Codex OAuth",
-		hint: "Use Codex CLI credentials (gpt-5.3-codex)"
+		hint: "Use Codex CLI credentials (gpt-5.2-codex)"
 	},
 	{
 		value: "apiKey",
@@ -144,77 +146,6 @@ function formatApiKeyPreview(raw, opts = {}) {
 	return `${trimmed.slice(0, head)}…${trimmed.slice(-tail)}`;
 }
 
-//#endregion
-//#region src/agents/cloudflare-ai-gateway.ts
-const CLOUDFLARE_AI_GATEWAY_PROVIDER_ID = "cloudflare-ai-gateway";
-const CLOUDFLARE_AI_GATEWAY_DEFAULT_MODEL_ID = "claude-sonnet-4-5";
-const CLOUDFLARE_AI_GATEWAY_DEFAULT_MODEL_REF = `${CLOUDFLARE_AI_GATEWAY_PROVIDER_ID}/${CLOUDFLARE_AI_GATEWAY_DEFAULT_MODEL_ID}`;
-
-//#endregion
-//#region src/commands/onboard-auth.credentials.ts
-const resolveAuthAgentDir = (agentDir) => agentDir ?? resolveAnimaAgentDir();
-async function writeOAuthCredentials(provider, creds, agentDir) {
-	upsertAuthProfile({
-		profileId: `${provider}:${typeof creds.email === "string" && creds.email.trim() ? creds.email.trim() : "default"}`,
-		credential: {
-			type: "oauth",
-			provider,
-			...creds
-		},
-		agentDir: resolveAuthAgentDir(agentDir)
-	});
-}
-async function setAnthropicApiKey(key, agentDir) {
-	upsertAuthProfile({
-		profileId: "anthropic:default",
-		credential: {
-			type: "api_key",
-			provider: "anthropic",
-			key
-		},
-		agentDir: resolveAuthAgentDir(agentDir)
-	});
-}
-async function setGeminiApiKey(key, agentDir) {
-	upsertAuthProfile({
-		profileId: "google:default",
-		credential: {
-			type: "api_key",
-			provider: "google",
-			key
-		},
-		agentDir: resolveAuthAgentDir(agentDir)
-	});
-}
-
-//#endregion
-//#region src/commands/onboard-auth.config-core.ts
-function applyAuthProfileConfig(cfg, params) {
-	const profiles = {
-		...cfg.auth?.profiles,
-		[params.profileId]: {
-			provider: params.provider,
-			mode: params.mode,
-			...params.email ? { email: params.email } : {}
-		}
-	};
-	const existingProviderOrder = cfg.auth?.order?.[params.provider];
-	const preferProfileFirst = params.preferProfileFirst ?? true;
-	const reorderedProviderOrder = existingProviderOrder && preferProfileFirst ? [params.profileId, ...existingProviderOrder.filter((profileId) => profileId !== params.profileId)] : existingProviderOrder;
-	const order = existingProviderOrder !== void 0 ? {
-		...cfg.auth?.order,
-		[params.provider]: reorderedProviderOrder?.includes(params.profileId) ? reorderedProviderOrder : [...reorderedProviderOrder ?? [], params.profileId]
-	} : cfg.auth?.order;
-	return {
-		...cfg,
-		auth: {
-			...cfg.auth,
-			profiles,
-			...order ? { order } : {}
-		}
-	};
-}
-
 //#endregion
 //#region src/commands/auth-choice.apply.anthropic.ts
 async function applyAuthChoiceAnthropic(params) {
@@ -291,23 +222,6 @@ async function applyAuthChoiceGemini(params) {
 	return null;
 }
 
-//#endregion
-//#region src/commands/models/shared.ts
-const formatTokenK = (value) => {
-	if (!value || !Number.isFinite(value)) return "-";
-	if (value < 1024) return `${Math.round(value)}`;
-	return `${Math.round(value / 1024)}k`;
-};
-/**
-* Model key format: "provider/model"
-*
-* The model key is displayed in `/model status` and used to reference models.
-* When using `/model <key>`, use the exact format shown (e.g., "openrouter/moonshotai/kimi-k2").
-*
-* For providers with hierarchical model IDs (e.g., OpenRouter), the model ID may include
-* sub-providers (e.g., "moonshotai/kimi-k2"), resulting in a key like "openrouter/moonshotai/kimi-k2".
-*/
-
 //#endregion
 //#region src/commands/model-picker.ts
 const KEEP_VALUE = "__keep__";
@@ -646,7 +560,7 @@ function applyModelFallbacksFromSelection(cfg, selection) {
 //#region src/commands/auth-choice.apply.openai-codex.ts
 const OPENAI_CODEX_PROVIDER = "openai-codex";
 const OPENAI_CODEX_PROFILE_ID = "openai-codex:default";
-const OPENAI_CODEX_DEFAULT_MODEL = "openai-codex/gpt-5.3-codex";
+const OPENAI_CODEX_DEFAULT_MODEL = "openai-codex/gpt-5.2-codex";
 const OPENAI_CODEX_LOGIN_COMMAND = "anima models auth login --provider openai-codex";
 async function applyAuthChoiceOpenAICodex(params) {
 	if (params.authChoice !== "openaiCodex") return null;
@@ -679,7 +593,7 @@ async function applyAuthChoice(params) {
 	if (params.authChoice === "noxsoft") {
 		const auth = await ensureAuthenticated({ description: "ANIMA auth profile selection" });
 		params.runtime.log(`NoxSoft ${auth.registered ? "registered" : "authenticated"}: ${auth.agent.display_name} (@${auth.agent.name})`);
-		return { config: params.config };
+		return { config: applyNoxsoftBootstrap(params.config, auth.agent) };
 	}
 	const codexResult = await applyAuthChoiceOpenAICodex(params);
 	if (codexResult) return codexResult;
@@ -740,13 +654,4 @@ function resolvePreferredProviderForAuthChoice(choice) {
 }
 
 //#endregion
-//#region src/wizard/prompts.ts
-var WizardCancelledError = class extends Error {
-	constructor(message = "wizard cancelled") {
-		super(message);
-		this.name = "WizardCancelledError";
-	}
-};
-
-//#endregion
-export { applyModelAllowlist as a, promptDefaultModel as c, setAnthropicApiKey as d, writeOAuthCredentials as f, applyAuthChoice as i, promptModelAllowlist as l, resolvePreferredProviderForAuthChoice as n, applyModelFallbacksFromSelection as o, promptAuthChoiceGrouped as p, warnIfModelConfigLooksOff as r, applyPrimaryModel as s, WizardCancelledError as t, applyAuthProfileConfig as u };
+export { applyModelFallbacksFromSelection as a, promptModelAllowlist as c, applyModelAllowlist as i, promptAuthChoiceGrouped as l, warnIfModelConfigLooksOff as n, applyPrimaryModel as o, applyAuthChoice as r, promptDefaultModel as s, resolvePreferredProviderForAuthChoice as t };

package/dist/{auth-choice-DPWnLV_w.js → auth-choice-Dc5TAJwT.js}

@@ -1,10 +1,11 @@
-import { g as readCodexCliCredentialsCached, l as ensureAuthProfileStore, s as listProfilesForProvider } from "./auth-profiles-BF5x9Ej0.js";
+import { b as readCodexCliCredentialsCached, l as listProfilesForProvider, p as ensureAuthProfileStore } from "./auth-profiles-Brxz2ojJ.js";
 import { a as resolveAgentModelPrimary } from "./agent-scope-Dm8IL1Ks.js";
-import { _ as DEFAULT_MODEL, c as normalizeProviderId, d as resolveConfiguredModelRef, o as modelKey, r as buildModelAliasIndex, t as buildAllowedModelSet, v as DEFAULT_PROVIDER } from "./model-selection-DFbDH9o2.js";
-import { Rn as loadModelCatalog } from "./subagent-registry-MZIxVf8W.js";
-import { n as getCustomProviderApiKey, o as resolveEnvApiKey } from "./model-auth-CxAB4iZ0.js";
-import { r as ensureAuthenticated } from "./noxsoft-auth-DpwLJIW0.js";
-import { c as setAnthropicApiKey, i as formatTokenK, l as setGeminiApiKey, s as applyAuthProfileConfig, u as writeOAuthCredentials } from "./prompts-D6b3zLVO.js";
+import { _ as DEFAULT_MODEL, c as normalizeProviderId, d as resolveConfiguredModelRef, o as modelKey, r as buildModelAliasIndex, t as buildAllowedModelSet, v as DEFAULT_PROVIDER } from "./model-selection-DcO3qJOu.js";
+import { zn as loadModelCatalog } from "./subagent-registry-CPtElVX0.js";
+import { n as getCustomProviderApiKey, o as resolveEnvApiKey } from "./model-auth-KpsOXKDc.js";
+import { r as ensureAuthenticated } from "./noxsoft-auth-CgCk5707.js";
+import { d as setAnthropicApiKey, f as setGeminiApiKey, i as formatTokenK, p as writeOAuthCredentials, u as applyAuthProfileConfig } from "./prompts-BmgT_kkv.js";
+import { t as applyNoxsoftBootstrap } from "./noxsoft-bootstrap-C4dSx7K_.js";
 
 //#region src/commands/auth-choice-options.ts
 const AUTH_CHOICE_GROUP_DEFS = [
@@ -42,7 +43,7 @@ const BASE_AUTH_CHOICE_OPTIONS = [
 	{
 		value: "openaiCodex",
 		label: "OpenAI Codex OAuth",
-		hint: "Use Codex CLI credentials (gpt-5.3-codex)"
+		hint: "Use Codex CLI credentials (gpt-5.2-codex)"
 	},
 	{
 		value: "apiKey",
@@ -559,7 +560,7 @@ function applyModelFallbacksFromSelection(cfg, selection) {
 //#region src/commands/auth-choice.apply.openai-codex.ts
 const OPENAI_CODEX_PROVIDER = "openai-codex";
 const OPENAI_CODEX_PROFILE_ID = "openai-codex:default";
-const OPENAI_CODEX_DEFAULT_MODEL = "openai-codex/gpt-5.3-codex";
+const OPENAI_CODEX_DEFAULT_MODEL = "openai-codex/gpt-5.2-codex";
 const OPENAI_CODEX_LOGIN_COMMAND = "anima models auth login --provider openai-codex";
 async function applyAuthChoiceOpenAICodex(params) {
 	if (params.authChoice !== "openaiCodex") return null;
@@ -592,7 +593,7 @@ async function applyAuthChoice(params) {
 	if (params.authChoice === "noxsoft") {
 		const auth = await ensureAuthenticated({ description: "ANIMA auth profile selection" });
 		params.runtime.log(`NoxSoft ${auth.registered ? "registered" : "authenticated"}: ${auth.agent.display_name} (@${auth.agent.name})`);
-		return { config: params.config };
+		return { config: applyNoxsoftBootstrap(params.config, auth.agent) };
 	}
 	const codexResult = await applyAuthChoiceOpenAICodex(params);
 	if (codexResult) return codexResult;

package/dist/{auth-health-DmrnGklu.js → auth-health-Cc8-vy8y.js}

@@ -1,4 +1,4 @@
-import { S as resolveAuthProfileDisplayLabel } from "./auth-profiles-BF5x9Ej0.js";
+import { w as resolveAuthProfileDisplayLabel } from "./auth-profiles-C-LuhW6c.js";
 
 //#region src/agents/auth-health.ts
 const DEFAULT_OAUTH_WARN_MS = 1440 * 60 * 1e3;

package/dist/auth-health-Dhr8p2SD.js

@@ -0,0 +1,149 @@
+import { T as resolveAuthProfileDisplayLabel } from "./auth-profiles-Brxz2ojJ.js";
+
+//#region src/agents/auth-health.ts
+const DEFAULT_OAUTH_WARN_MS = 1440 * 60 * 1e3;
+function resolveAuthProfileSource(_profileId) {
+	return "store";
+}
+function formatRemainingShort(remainingMs) {
+	if (remainingMs === void 0 || Number.isNaN(remainingMs)) return "unknown";
+	if (remainingMs <= 0) return "0m";
+	const minutes = Math.max(1, Math.round(remainingMs / 6e4));
+	if (minutes < 60) return `${minutes}m`;
+	const hours = Math.round(minutes / 60);
+	if (hours < 48) return `${hours}h`;
+	return `${Math.round(hours / 24)}d`;
+}
+function resolveOAuthStatus(expiresAt, now, warnAfterMs) {
+	if (!expiresAt || !Number.isFinite(expiresAt) || expiresAt <= 0) return { status: "missing" };
+	const remainingMs = expiresAt - now;
+	if (remainingMs <= 0) return {
+		status: "expired",
+		remainingMs
+	};
+	if (remainingMs <= warnAfterMs) return {
+		status: "expiring",
+		remainingMs
+	};
+	return {
+		status: "ok",
+		remainingMs
+	};
+}
+function buildProfileHealth(params) {
+	const { profileId, credential, store, cfg, now, warnAfterMs } = params;
+	const label = resolveAuthProfileDisplayLabel({
+		cfg,
+		store,
+		profileId
+	});
+	const source = resolveAuthProfileSource(profileId);
+	if (credential.type === "api_key") return {
+		profileId,
+		provider: credential.provider,
+		type: "api_key",
+		status: "static",
+		source,
+		label
+	};
+	if (credential.type === "token") {
+		const expiresAt = typeof credential.expires === "number" && Number.isFinite(credential.expires) ? credential.expires : void 0;
+		if (!expiresAt || expiresAt <= 0) return {
+			profileId,
+			provider: credential.provider,
+			type: "token",
+			status: "static",
+			source,
+			label
+		};
+		const { status, remainingMs } = resolveOAuthStatus(expiresAt, now, warnAfterMs);
+		return {
+			profileId,
+			provider: credential.provider,
+			type: "token",
+			status,
+			expiresAt,
+			remainingMs,
+			source,
+			label
+		};
+	}
+	const hasRefreshToken = typeof credential.refresh === "string" && credential.refresh.length > 0;
+	const { status: rawStatus, remainingMs } = resolveOAuthStatus(credential.expires, now, warnAfterMs);
+	const status = hasRefreshToken && (rawStatus === "expired" || rawStatus === "expiring") ? "ok" : rawStatus;
+	return {
+		profileId,
+		provider: credential.provider,
+		type: "oauth",
+		status,
+		expiresAt: credential.expires,
+		remainingMs,
+		source,
+		label
+	};
+}
+function buildAuthHealthSummary(params) {
+	const now = Date.now();
+	const warnAfterMs = params.warnAfterMs ?? DEFAULT_OAUTH_WARN_MS;
+	const providerFilter = params.providers ? new Set(params.providers.map((p) => p.trim()).filter(Boolean)) : null;
+	const profiles = Object.entries(params.store.profiles).filter(([_, cred]) => providerFilter ? providerFilter.has(cred.provider) : true).map(([profileId, credential]) => buildProfileHealth({
+		profileId,
+		credential,
+		store: params.store,
+		cfg: params.cfg,
+		now,
+		warnAfterMs
+	})).toSorted((a, b) => {
+		if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);
+		return a.profileId.localeCompare(b.profileId);
+	});
+	const providersMap = /* @__PURE__ */ new Map();
+	for (const profile of profiles) {
+		const existing = providersMap.get(profile.provider);
+		if (!existing) providersMap.set(profile.provider, {
+			provider: profile.provider,
+			status: "missing",
+			profiles: [profile]
+		});
+		else existing.profiles.push(profile);
+	}
+	if (providerFilter) {
+		for (const provider of providerFilter) if (!providersMap.has(provider)) providersMap.set(provider, {
+			provider,
+			status: "missing",
+			profiles: []
+		});
+	}
+	for (const provider of providersMap.values()) {
+		if (provider.profiles.length === 0) {
+			provider.status = "missing";
+			continue;
+		}
+		const oauthProfiles = provider.profiles.filter((p) => p.type === "oauth");
+		const tokenProfiles = provider.profiles.filter((p) => p.type === "token");
+		const apiKeyProfiles = provider.profiles.filter((p) => p.type === "api_key");
+		const expirable = [...oauthProfiles, ...tokenProfiles];
+		if (expirable.length === 0) {
+			provider.status = apiKeyProfiles.length > 0 ? "static" : "missing";
+			continue;
+		}
+		const expiryCandidates = expirable.map((p) => p.expiresAt).filter((v) => typeof v === "number" && Number.isFinite(v));
+		if (expiryCandidates.length > 0) {
+			provider.expiresAt = Math.min(...expiryCandidates);
+			provider.remainingMs = provider.expiresAt - now;
+		}
+		const statuses = new Set(expirable.map((p) => p.status));
+		if (statuses.has("expired") || statuses.has("missing")) provider.status = "expired";
+		else if (statuses.has("expiring")) provider.status = "expiring";
+		else provider.status = "ok";
+	}
+	return {
+		now,
+		warnAfterMs,
+		profiles,
+		providers: Array.from(providersMap.values()).toSorted((a, b) => a.provider.localeCompare(b.provider))
+	};
+}
+
+//#endregion
+export { buildAuthHealthSummary as n, formatRemainingShort as r, DEFAULT_OAUTH_WARN_MS as t };