@openlife/cli 1.7.10 → 1.7.12

package/dist/test_gateway_fast_ack.js

@@ -0,0 +1,66 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const assert = __importStar(require("assert"));
+const Gateway_1 = require("./orchestrator/Gateway");
+async function main() {
+    process.env.OPENLIFE_TELEGRAM_ALLOWED_USER_ID = '';
+    process.env.OPENLIFE_ENABLE_TTS = 'false';
+    const gateway = new Gateway_1.Gateway();
+    gateway.classifier = {
+        classify: async (_text) => ({ intent: 'KNOWLEDGE_RETRIEVAL', budget: 0.1 })
+    };
+    gateway.gatekeeper = {
+        routeTask: async (_task, _text, _userId) => {
+            await new Promise(resolve => setTimeout(resolve, 1200));
+            return 'FINAL_AGENT_RESPONSE_FROM_GPT55_PATH';
+        }
+    };
+    const started = Date.now();
+    const result = await gateway.processTextForTestDetailed('1344110010', 'ola');
+    const totalMs = Date.now() - started;
+    assert.ok(result.ackMs !== null, 'ACK_NOT_SENT');
+    assert.ok(result.ackMs < 500, `ACK_TOO_SLOW_${result.ackMs}`);
+    assert.ok(result.events.length >= 2, `EXPECTED_ACK_AND_FINAL_EVENTS_${JSON.stringify(result.events)}`);
+    assert.strictEqual(result.events[0].kind, 'reply', 'FIRST_EVENT_SHOULD_BE_ACK_REPLY');
+    assert.ok(result.events[0].text.includes('processando'), `ACK_TEXT_UNEXPECTED_${result.events[0].text}`);
+    assert.strictEqual(result.finalText, 'FINAL_AGENT_RESPONSE_FROM_GPT55_PATH', `FINAL_TEXT_UNEXPECTED_${result.finalText}`);
+    assert.ok(totalMs >= 1100, 'TEST_STUB_DID_NOT_SIMULATE_SLOW_PATH');
+    console.log('TEST_GATEWAY_FAST_ACK_OK');
+}
+main().catch((err) => {
+    console.error('TEST_GATEWAY_FAST_ACK_FAIL:', err?.message || err);
+    process.exit(1);
+});

package/dist/test_matrix_rain.js

@@ -0,0 +1,69 @@
+"use strict";
+// src/test_matrix_rain.ts
+// Smoke tests for the Matrix theme + rain renderer.
+// - banner renders deterministic plain-text shape under stripAnsi
+// - inventory panel borders align (top/bottom widths match)
+// - rain.start() in non-TTY returns no-op handle (no interval leak)
+// - sampleFrame() produces requested dimensions
+Object.defineProperty(exports, "__esModule", { value: true });
+const ChatBanner_1 = require("./cli/ChatBanner");
+const MatrixRain_1 = require("./cli/MatrixRain");
+const MatrixTheme_1 = require("./cli/MatrixTheme");
+let failed = 0;
+function check(label, condition, detail) {
+    if (condition) {
+        console.log(`✅ ${label}`);
+    }
+    else {
+        console.error(`❌ ${label}${detail ? ` — ${detail}` : ''}`);
+        failed++;
+    }
+}
+// 1. Banner contains the OPENLIFE letters
+{
+    const plain = (0, MatrixTheme_1.stripAnsi)((0, ChatBanner_1.openlifeBanner)());
+    check('banner contains OPENLIFE letters (5 rows of █)', plain.includes('██████  ██████  ███████ ███    ██ ██      ██ ███████ ███████'));
+    check('banner has horizon line', plain.includes('▁'));
+}
+// 2. Inventory panel borders align
+{
+    const stats = { version: 'v1.7.12', model: 'openai-cli/gpt-5.5', sessionId: 'TEST_SESSION', cwd: '/tmp', agents: 1, squads: 2, skills: 3, mcps: 4 };
+    const plain = (0, MatrixTheme_1.stripAnsi)((0, ChatBanner_1.inventoryPanel)(stats));
+    const lines = plain.split('\n').filter(Boolean);
+    const top = lines[0];
+    const bot = lines[lines.length - 1];
+    check('panel top and bottom widths match', top.length === bot.length, `top=${top.length} bot=${bot.length}`);
+    check('panel shows model', plain.includes('openai-cli/gpt-5.5'));
+    check('panel shows catalog counts', plain.includes('agents 1') && plain.includes('skills 3'));
+}
+// 3. bootOutput composes banner + panel + welcome
+{
+    const stats = { version: 'v1.7.12', model: 'm', sessionId: 's', cwd: '/c', agents: 0, squads: 0, skills: 0, mcps: 0 };
+    const plain = (0, MatrixTheme_1.stripAnsi)((0, ChatBanner_1.bootOutput)(stats));
+    check('bootOutput contains banner OPENLIFE marker', plain.includes('██████'));
+    check('bootOutput contains welcome line', plain.includes('Welcome to OpenLife'));
+    check('bootOutput contains divider line', plain.includes('━'));
+}
+// 4. Rain in non-TTY env returns no-op handle
+{
+    // We're running under node test runner — stdout.isTTY is false.
+    const handle = (0, MatrixRain_1.startRain)({ row: 1, col: 1, width: 10, height: 4 });
+    check('rain.isRunning() returns false in non-TTY', handle.isRunning() === false);
+    // stop() must be safe to call without state
+    handle.stop();
+    check('rain.stop() in non-TTY is a no-op (no throw)', true);
+}
+// 5. sampleFrame produces requested dimensions
+{
+    const frame = (0, MatrixRain_1.sampleFrame)(10, 5);
+    const rows = frame.split('\n');
+    check('sampleFrame produces correct number of rows', rows.length === 5);
+    // Each row is at most 10 visible chars (after stripAnsi)
+    const plainRowLengths = rows.map(r => (0, MatrixTheme_1.stripAnsi)(r).length);
+    check('sampleFrame rows are at most width chars', plainRowLengths.every(n => n <= 10), `lengths=${plainRowLengths.join(',')}`);
+}
+if (failed > 0) {
+    console.error(`\n${failed} check(s) failed.`);
+    process.exit(1);
+}
+console.log('\nTEST_MATRIX_RAIN_OK');

package/dist/test_no_automatic_messages.js

@@ -0,0 +1,64 @@
+"use strict";
+/**
+ * Regression: OpenLife chat surface must not return canned/automatic replies.
+ * The main ask/Gatekeeper path should invoke the configured model executor even
+ * for greetings; deterministic status commands remain explicit operational paths.
+ */
+function assertTrue(cond, label) {
+    if (!cond)
+        throw new Error(`ASSERT_FAILED[${label}]`);
+}
+function installBrainMock(mock) {
+    const brainPath = require.resolve('./orchestrator/Brain');
+    const orig = require.cache[brainPath];
+    require.cache[brainPath] = {
+        ...orig,
+        exports: {
+            Brain: class {
+                isAnyProviderAvailable() { return true; }
+                async thinkFast(_systemPrompt, userMessage) {
+                    mock.invocations += 1;
+                    mock.lastUserMessage = userMessage;
+                    return mock.reply;
+                }
+                async think(_systemPrompt, userMessage) {
+                    mock.invocations += 1;
+                    mock.lastUserMessage = userMessage;
+                    return mock.reply;
+                }
+            },
+        },
+    };
+    return () => {
+        if (orig)
+            require.cache[brainPath] = orig;
+        else
+            delete require.cache[brainPath];
+    };
+}
+async function main() {
+    process.env.OPENLIFE_OUTCOME_SIMULATION = 'off';
+    const mock = { invocations: 0, reply: 'MODEL_REPLY_FROM_GPT55_PATH' };
+    const restore = installBrainMock(mock);
+    try {
+        const { IntentClassifier } = require('./orchestrator/IntentClassifier');
+        const { Gatekeeper } = require('./orchestrator/Gatekeeper');
+        const classifier = new IntentClassifier();
+        const gatekeeper = new Gatekeeper();
+        const greeting = 'ola';
+        const task = await classifier.classify(greeting);
+        const response = await gatekeeper.routeTask(task, greeting, 'no-auto-test');
+        assertTrue(response === 'MODEL_REPLY_FROM_GPT55_PATH', 'greeting response comes from Brain/model path');
+        assertTrue(mock.invocations === 1, `Brain invoked exactly once for greeting (got ${mock.invocations})`);
+        assertTrue(mock.lastUserMessage === greeting, 'original greeting passed to model');
+        assertTrue(!/OpenLife online|Como posso ajudar|OPENLIFE ONLINE|Intenção desconhecida/.test(response), 'no canned chat text returned');
+    }
+    finally {
+        restore();
+    }
+    console.log('TEST_NO_AUTOMATIC_MESSAGES_OK');
+}
+main().catch((err) => {
+    console.error(err);
+    process.exit(1);
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openlife/cli",
-  "version": "1.7.10",
+  "version": "1.7.12",
   "description": "OPEN-LIFE Córtex Orquestrador Dual-Core",
   "main": "dist/index.js",
   "files": [
@@ -159,13 +159,19 @@
     "test:status-command": "npm run build && node dist/test_status_command.js",
     "test:logs-command": "npm run build && node dist/test_logs_command.js",
     "test:agent-creator": "npm run build && node dist/test_agent_creator.js",
+    "test:matrix-rain": "npm run build && node dist/test_matrix_rain.js",
+    "test:chat-tui": "npm run build && node dist/test_chat_tui.js",
+    "test:config-tui": "npm run build && node dist/test_config_tui.js",
     "pretest:all": "node scripts/clean-test-pollution.js",
-    "test:all": "npm run build && node dist/test_distribution_installability.js && node dist/test_orchestration_assets_lifecycle.js && node dist/test_openlife_runtime_source_truth.js && node dist/test_openlife_evolution_surface.js && node dist/test_openlife_routing_surface.js && node dist/test_openlife_auto_creator_routing.js && node dist/test_openlife_gatekeeper_routing.js && node dist/test_enterprise_agentic_core.js && node dist/test_admin_teams_networks.js && node dist/test_agent_team_skill_network.js && node dist/test_benchmark_engine.js && node dist/test_cli_service_commands.js && node dist/test_consequence_forecaster.js && node dist/test_conversation_memory.js && node dist/test_create_entities.js && node dist/test_designmd_import_registry.js && node dist/test_designmd_mode.js && node dist/test_designmd_mode_workspace.js && node dist/test_dream_organizer.js && node dist/test_dual_mode.js && node dist/test_governance.js && node dist/test_governance_advanced.js && node dist/test_install_flow.js && node dist/test_job_lifecycle.js && node dist/test_memory_orchestrator.js && node dist/test_memory_promotion.js && node dist/test_memory_retention.js && node dist/test_operating_system.js && node dist/test_optimization_loop.js && node dist/test_outcome_simulator.js && node dist/test_performance_scorecard.js && node dist/test_phase6_board.js && node dist/test_phase6_cadence.js && node dist/test_phase6_ops.js && node dist/test_release_gate.js && node dist/test_reversa_contracts_e2e.js && node dist/test_reversa_export_and_strict.js && node dist/test_reversa_full_execution.js && node dist/test_reversa_lite.js && node dist/test_runtime_policy.js && node dist/test_runtime_probe.js && node dist/test_runtime_registry.js && node dist/test_security_download_guard.js && node dist/test_service_command_surface.js && node dist/test_service_completion_policy.js && node dist/test_service_guardrails_delete.js && node dist/test_sources_import_ref.js && node dist/test_sources_scaffold.js && node dist/test_teammate_learning.js && node dist/test_telegram_delete_guardrail.js && node dist/test_daemon_sigterm.js && node dist/test_ask_exit.js && node dist/test_brain_error_diagnostics.js && node dist/test_cli_doc_parity.js && node dist/test_trigger_basic_auth.js && node dist/test_brain_fallback_chain.js && node dist/test_cli_help_surface.js && node dist/test_cli_diagnostics.js && node dist/test_cli_crud_roundtrip.js && node dist/test_subsystems_routing_governance.js && node dist/test_subsystems_org_state.js && node dist/test_subsystems_promotion_memory_assets.js && node dist/test_phase1_check_exit.js && node dist/test_install_flow_host_validation.js && node dist/test_dist_templates_layout.js && node dist/test_host_installer.js && node dist/test_host_uninstaller.js && node dist/test_install_wizard.js && node dist/test_multi_host_docs_parity.js && node dist/test_host_install_e2e.js && node dist/test_runtime_profile_oauth_only.js && node dist/test_atomic_writer.js && node dist/test_mission_checkpoint.js && node dist/test_workflow_parser.js && node dist/test_workflow_engine.js && node dist/test_workflow_e2e.js && node dist/test_distributed_lock.js && node dist/test_watchdog_heartbeat.js && node dist/test_runtime_health_backoff.js && node dist/test_queue_scheduler.js && node dist/test_squad_skill_creator.js && node dist/test_aiobuilder_cli_parity.js && node dist/test_catalog_quality.js && node dist/test_royal_stack_golden.js && node dist/test_capability_pack_schema.js && node dist/test_capability_genesis_engine.js && node dist/test_workflow_schema_backward_compat.js && node dist/test_service_mode_explicit_only.js && node dist/test_deep_research_capability.js && node dist/test_guided_creator_cli.js && node dist/test_governance_v13_policies.js && node dist/test_gateway_telegram_guardrails.js && node dist/test_cron_manager.js && node dist/test_profile_toolset_mcp.js && node dist/test_squad_skill_design_llm.js && node dist/test_workflow_condition_parser.js && node dist/test_security_download_and_scan.js && node dist/test_host_installers_gemini_codex.js && node dist/test_toolset_enforcement.js && node dist/test_creator_placeholders_completed.js && node dist/test_performance_latency.js && node dist/test_post_mission_evaluation.js && node dist/test_governance_scope_ledger.js && node dist/test_consequence_forecast_brain.js && node dist/test_remote_publish.js && node dist/test_process_sandbox.js && node dist/test_v15_e2e_integration.js && node dist/test_doctor_sandbox_check.js && node dist/test_task_executor_sandbox_optin.js && node dist/test_forecast_brain_wiring.js && node dist/test_status_command.js && node dist/test_logs_command.js && node dist/test_agent_creator.js",
-    "prepublishOnly": "npm run test:all"
+    "test:all": "npm run build && node dist/test_distribution_installability.js && node dist/test_orchestration_assets_lifecycle.js && node dist/test_openlife_runtime_source_truth.js && node dist/test_openlife_evolution_surface.js && node dist/test_openlife_routing_surface.js && node dist/test_openlife_auto_creator_routing.js && node dist/test_openlife_gatekeeper_routing.js && node dist/test_enterprise_agentic_core.js && node dist/test_admin_teams_networks.js && node dist/test_agent_team_skill_network.js && node dist/test_benchmark_engine.js && node dist/test_cli_service_commands.js && node dist/test_consequence_forecaster.js && node dist/test_conversation_memory.js && node dist/test_create_entities.js && node dist/test_designmd_import_registry.js && node dist/test_designmd_mode.js && node dist/test_designmd_mode_workspace.js && node dist/test_dream_organizer.js && node dist/test_dual_mode.js && node dist/test_governance.js && node dist/test_governance_advanced.js && node dist/test_install_flow.js && node dist/test_job_lifecycle.js && node dist/test_memory_orchestrator.js && node dist/test_memory_promotion.js && node dist/test_memory_retention.js && node dist/test_operating_system.js && node dist/test_optimization_loop.js && node dist/test_outcome_simulator.js && node dist/test_performance_scorecard.js && node dist/test_phase6_board.js && node dist/test_phase6_cadence.js && node dist/test_phase6_ops.js && node dist/test_release_gate.js && node dist/test_reversa_contracts_e2e.js && node dist/test_reversa_export_and_strict.js && node dist/test_reversa_full_execution.js && node dist/test_reversa_lite.js && node dist/test_runtime_policy.js && node dist/test_runtime_probe.js && node dist/test_runtime_registry.js && node dist/test_security_download_guard.js && node dist/test_service_command_surface.js && node dist/test_service_completion_policy.js && node dist/test_service_guardrails_delete.js && node dist/test_sources_import_ref.js && node dist/test_sources_scaffold.js && node dist/test_teammate_learning.js && node dist/test_telegram_delete_guardrail.js && node dist/test_daemon_sigterm.js && node dist/test_ask_exit.js && node dist/test_brain_error_diagnostics.js && node dist/test_cli_doc_parity.js && node dist/test_trigger_basic_auth.js && node dist/test_brain_fallback_chain.js && node dist/test_cli_help_surface.js && node dist/test_cli_diagnostics.js && node dist/test_cli_crud_roundtrip.js && node dist/test_subsystems_routing_governance.js && node dist/test_subsystems_org_state.js && node dist/test_subsystems_promotion_memory_assets.js && node dist/test_phase1_check_exit.js && node dist/test_install_flow_host_validation.js && node dist/test_dist_templates_layout.js && node dist/test_host_installer.js && node dist/test_host_uninstaller.js && node dist/test_install_wizard.js && node dist/test_multi_host_docs_parity.js && node dist/test_host_install_e2e.js && node dist/test_runtime_profile_oauth_only.js && node dist/test_atomic_writer.js && node dist/test_mission_checkpoint.js && node dist/test_workflow_parser.js && node dist/test_workflow_engine.js && node dist/test_workflow_e2e.js && node dist/test_distributed_lock.js && node dist/test_watchdog_heartbeat.js && node dist/test_runtime_health_backoff.js && node dist/test_queue_scheduler.js && node dist/test_squad_skill_creator.js && node dist/test_aiobuilder_cli_parity.js && node dist/test_catalog_quality.js && node dist/test_royal_stack_golden.js && node dist/test_capability_pack_schema.js && node dist/test_capability_genesis_engine.js && node dist/test_workflow_schema_backward_compat.js && node dist/test_service_mode_explicit_only.js && node dist/test_deep_research_capability.js && node dist/test_guided_creator_cli.js && node dist/test_governance_v13_policies.js && node dist/test_gateway_telegram_guardrails.js && node dist/test_cron_manager.js && node dist/test_profile_toolset_mcp.js && node dist/test_squad_skill_design_llm.js && node dist/test_workflow_condition_parser.js && node dist/test_security_download_and_scan.js && node dist/test_host_installers_gemini_codex.js && node dist/test_toolset_enforcement.js && node dist/test_creator_placeholders_completed.js && node dist/test_performance_latency.js && node dist/test_post_mission_evaluation.js && node dist/test_governance_scope_ledger.js && node dist/test_consequence_forecast_brain.js && node dist/test_remote_publish.js && node dist/test_process_sandbox.js && node dist/test_v15_e2e_integration.js && node dist/test_doctor_sandbox_check.js && node dist/test_task_executor_sandbox_optin.js && node dist/test_forecast_brain_wiring.js && node dist/test_status_command.js && node dist/test_logs_command.js && node dist/test_agent_creator.js && node dist/test_matrix_rain.js && node dist/test_chat_tui.js && node dist/test_config_tui.js",
+    "prepublishOnly": "npm run test:all",
+    "test:no-automatic-messages": "npm run build && node dist/test_no_automatic_messages.js",
+    "test:gateway-fast-ack": "npm run build && node dist/test_gateway_fast_ack.js"
   },
   "dependencies": {
     "@anthropic-ai/sdk": "^0.86.1",
     "@google/generative-ai": "^0.24.1",
+    "@openai/codex": "^0.130.0",
     "axios": "^1.15.0",
     "commander": "^11.1.0",
     "dotenv": "^16.3.1",

package/scripts/reauth-providers.sh

@@ -0,0 +1,205 @@
+#!/usr/bin/env bash
+# scripts/reauth-providers.sh
+# Guided re-authentication for OpenLife LLM providers: Codex (gpt-5.5), Gemini, Anthropic.
+# Idempotent. Per-provider menu (reauth/skip/edit-key). Validates each via real API call.
+# Restarts daemon if running. Final status table.
+
+set -u
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+cd "$ROOT"
+
+# Matrix-green ANSI palette (matches the new TUI theme)
+GREEN=$'\033[38;5;46m'
+GREEN_HI=$'\033[38;5;82m\033[1m'
+GREEN_DIM=$'\033[38;5;22m'
+RED=$'\033[38;5;196m'
+YELLOW=$'\033[38;5;226m'
+RESET=$'\033[0m'
+
+say()  { printf '%s%s%s\n' "$GREEN"     "$*" "$RESET"; }
+hi()   { printf '%s%s%s\n' "$GREEN_HI"  "$*" "$RESET"; }
+warn() { printf '%s%s%s\n' "$YELLOW"    "$*" "$RESET"; }
+err()  { printf '%s%s%s\n' "$RED"       "$*" "$RESET" 1>&2; }
+hr()   { printf '%s' "$GREEN_DIM"; printf '─%.0s' $(seq 1 60); printf '%s\n' "$RESET"; }
+
+# ─────────────────────────────────────────────────────────────
+# Probe — current credential state
+# ─────────────────────────────────────────────────────────────
+probe_codex() {
+  command -v codex >/dev/null 2>&1 || { echo "missing"; return; }
+  if codex login status 2>/dev/null | grep -qi 'logged in'; then
+    # Cached status doesn't guarantee the refresh token is valid. Do a 8s probe.
+    if timeout 8 codex exec --model gpt-5.5 --skip-git-repo-check 'OK' >/dev/null 2>&1; then
+      echo "ok"
+    else
+      echo "stale"
+    fi
+  else
+    echo "logged-out"
+  fi
+}
+
+probe_gemini() {
+  command -v gemini >/dev/null 2>&1 || { echo "missing"; return; }
+  if gemini login status 2>/dev/null | grep -qi 'logged in'; then
+    echo "ok"
+  else
+    echo "logged-out"
+  fi
+}
+
+probe_anthropic() {
+  local key
+  key="$(grep -E '^ANTHROPIC_API_KEY=' "$ROOT/.env" 2>/dev/null | head -1 | cut -d= -f2- | tr -d '"' | tr -d "'")"
+  if [[ -z "$key" ]]; then echo "missing"; return; fi
+  local code
+  code="$(curl -sS -o /dev/null -w '%{http_code}' --max-time 8 \
+    -H "x-api-key: $key" -H "anthropic-version: 2023-06-01" \
+    -H "content-type: application/json" \
+    -d '{"model":"claude-haiku-4-5","max_tokens":4,"messages":[{"role":"user","content":"ok"}]}' \
+    https://api.anthropic.com/v1/messages 2>/dev/null || echo 000)"
+  case "$code" in
+    200) echo "ok" ;;
+    401|403) echo "auth-bad" ;;
+    429) echo "rate-limited" ;;
+    *)   echo "http-$code" ;;
+  esac
+}
+
+print_status_table() {
+  hr
+  printf '%s%-12s %-12s %s%s\n' "$GREEN_HI" "PROVIDER" "STATUS" "DETAIL" "$RESET"
+  hr
+  printf '%-12s %-12s %s\n' "codex"     "$1" "(gpt-5.5 via Codex OAuth)"
+  printf '%-12s %-12s %s\n' "gemini"    "$2" "(google-genai OAuth)"
+  printf '%-12s %-12s %s\n' "anthropic" "$3" "(ANTHROPIC_API_KEY in .env)"
+  hr
+}
+
+# ─────────────────────────────────────────────────────────────
+# Per-provider menus
+# ─────────────────────────────────────────────────────────────
+menu_for() {
+  local name="$1" status="$2"
+  echo
+  hi "── $name ──"
+  echo "  current status: $status"
+  echo "  1) reauth     2) skip     3) edit key (anthropic only)"
+  read -r -p "  choose [1/2/3]: " choice
+  echo "$choice"
+}
+
+reauth_codex() {
+  say "Logging out of Codex…"
+  codex logout 2>/dev/null || true
+  hi "Opening Codex login (browser). Complete the flow, then press ENTER here."
+  codex login || { err "codex login failed"; return 1; }
+  if timeout 12 codex exec --model gpt-5.5 --skip-git-repo-check 'OK' >/dev/null 2>&1; then
+    hi "✓ codex gpt-5.5 responding"
+    return 0
+  fi
+  err "codex still failing after login. Inspect: codex login status"
+  return 1
+}
+
+reauth_gemini() {
+  say "Logging out of Gemini…"
+  gemini logout 2>/dev/null || true
+  hi "Opening Gemini login (device-auth). Follow on-screen URL, then return."
+  gemini login --device-auth || { err "gemini login failed"; return 1; }
+  hi "✓ gemini login completed (quota state checked on next call)"
+  return 0
+}
+
+reauth_anthropic_edit_key() {
+  echo
+  warn "Paste your ANTHROPIC_API_KEY (sk-ant-…). Input is hidden."
+  read -r -s -p "  key: " newkey
+  echo
+  [[ -z "$newkey" ]] && { warn "(empty — keeping current key)"; return 0; }
+  # Idempotent .env edit: remove existing line then append.
+  local envfile="$ROOT/.env"
+  touch "$envfile"
+  grep -v -E '^ANTHROPIC_API_KEY=' "$envfile" > "$envfile.tmp" 2>/dev/null || true
+  mv "$envfile.tmp" "$envfile"
+  printf 'ANTHROPIC_API_KEY=%s\n' "$newkey" >> "$envfile"
+  say "✓ .env updated"
+}
+
+# ─────────────────────────────────────────────────────────────
+# Daemon restart helper
+# ─────────────────────────────────────────────────────────────
+maybe_restart_daemon() {
+  local snapshot
+  snapshot="$(node bin/openlife.js status 2>/dev/null || echo '{}')"
+  if echo "$snapshot" | grep -q '"fresh":true'; then
+    say "Daemon is running — restarting to pick up new credentials…"
+    node bin/openlife.js restart >/dev/null 2>&1 || true
+    nohup node bin/openlife.js start --daemon >/dev/null 2>&1 &
+    disown 2>/dev/null || true
+    # Give it 3 seconds to boot + revalidate executors
+    sleep 3
+    say "✓ daemon restarted"
+  else
+    say "Daemon not running — skipping restart"
+  fi
+}
+
+# ─────────────────────────────────────────────────────────────
+# Main
+# ─────────────────────────────────────────────────────────────
+hi "╔══════════════════════════════════════════════════════════╗"
+hi "║  OPENLIFE  ·  provider reauth                            ║"
+hi "╚══════════════════════════════════════════════════════════╝"
+say "Probing current credentials…"
+
+CODEX="$(probe_codex)"
+GEMINI="$(probe_gemini)"
+ANTHROPIC="$(probe_anthropic)"
+print_status_table "$CODEX" "$GEMINI" "$ANTHROPIC"
+
+# Codex
+case "$CODEX" in ok) say "codex already healthy — skipping menu" ;; *)
+  case "$(menu_for codex "$CODEX")" in
+    1) reauth_codex && CODEX=ok || CODEX=failed ;;
+    2) say "(skipped)" ;;
+    *) say "(skipped)" ;;
+  esac
+;; esac
+
+# Gemini
+case "$GEMINI" in ok) say "gemini already healthy — skipping menu" ;; *)
+  case "$(menu_for gemini "$GEMINI")" in
+    1) reauth_gemini && GEMINI=ok || GEMINI=failed ;;
+    2) say "(skipped)" ;;
+    *) say "(skipped)" ;;
+  esac
+;; esac
+
+# Anthropic
+case "$ANTHROPIC" in ok) say "anthropic already healthy — skipping menu" ;; *)
+  case "$(menu_for anthropic "$ANTHROPIC")" in
+    1|3) reauth_anthropic_edit_key
+         ANTHROPIC="$(probe_anthropic)" ;;
+    2)   say "(skipped)" ;;
+    *)   say "(skipped)" ;;
+  esac
+;; esac
+
+# Final state
+echo
+hi "── final state ──"
+print_status_table "$CODEX" "$GEMINI" "$ANTHROPIC"
+
+# Restart daemon if running so executors revalidate
+maybe_restart_daemon
+
+# Show status snapshot
+echo
+hi "── openlife status ──"
+node bin/openlife.js status 2>/dev/null \
+  | node -e 'let d="";process.stdin.on("data",c=>d+=c).on("end",()=>{try{const j=JSON.parse(d);console.log("heartbeat fresh:",j.heartbeat&&j.heartbeat.fresh);(j.executors||[]).forEach(e=>console.log(`  ${e.executor.padEnd(8)} avail=${e.available} reason=${e.reason}`));}catch(e){console.error("status parse failed");}});' \
+  2>/dev/null || warn "status command unavailable"
+
+# Exit code: 0 if at least one provider is ok
+[[ "$CODEX" == "ok" || "$GEMINI" == "ok" || "$ANTHROPIC" == "ok" ]] && exit 0 || exit 1