@pixelzx/genesis 2026.6.28 → 2026.6.29

package/dist/auth-s-3q__5n.js

@@ -1,550 +0,0 @@
-import { c as normalizeOptionalString, d as normalizeStringifiedOptionalString } from "./string-coerce-DPP_aYVc.js";
-import { t as formatCliCommand } from "./command-format-B3Q5KD9o.js";
-import { r as normalizeProviderId } from "./provider-id--dmcBtHB.js";
-import { v as resolveDefaultAgentWorkspaceDir } from "./workspace-CbdFyQfr.js";
-import { b as resolveAgentWorkspaceDir, x as resolveDefaultAgentId, y as resolveAgentDir } from "./agent-scope-BUYwVohk.js";
-import { t as parseDurationMs } from "./parse-duration-CkHLPGPv.js";
-import { s as loadAuthProfileStoreForRuntime } from "./store-DOYGPxaT.js";
-import { n as resolvePluginProviders } from "./providers.runtime-DcW9Vt7u.js";
-import "./model-selection-shared-DNvrk10R.js";
-import { n as listProfilesForProvider } from "./profile-list-C0rD0kln.js";
-import { n as clearAuthProfileCooldown } from "./usage-D3SGvzXZ.js";
-import { a as updateAuthProfileMetadataWithLock, n as removeAuthProfileWithLock, o as upsertAuthProfile } from "./profiles-CCpJcjAY.js";
-import { n as validateAnthropicSetupToken } from "./provider-auth-token-CX5JlOWs.js";
-import { t as applyAuthProfileConfig } from "./provider-auth-helpers-Ci_vXeWo.js";
-import { n as stylePromptMessage, t as stylePromptHint } from "./prompt-style-CSYFxrBs.js";
-import { t as createClackPrompter } from "./clack-prompter-j7CPDY1N.js";
-import { n as logConfigUpdated } from "./logging-DCjOAcAz.js";
-import { a as loadValidConfigOrThrow, u as updateConfig } from "./shared-D5wWnxIx.js";
-import { t as isRemoteEnvironment } from "./remote-env-DBwMOreo.js";
-import { t as createVpsAwareOAuthHandlers } from "./provider-oauth-flow-CxcL0CpK.js";
-import { i as resolveProviderMatch, n as applyProviderAuthConfigPatch, r as pickAuthMethod, t as applyDefaultModel } from "./provider-auth-choice-helpers-DfeI7_EE.js";
-import { cancel, confirm, isCancel, select, text } from "@clack/prompts";
-//#region src/commands/models/auth.ts
-function guardCancel(value) {
-	if (typeof value === "symbol" || isCancel(value)) {
-		cancel("Cancelled.");
-		process.exit(0);
-	}
-	return value;
-}
-const confirm$1 = async (params) => guardCancel(await confirm({
-	...params,
-	message: stylePromptMessage(params.message)
-}));
-const text$1 = async (params) => guardCancel(await text({
-	...params,
-	message: stylePromptMessage(params.message)
-}));
-const select$1 = async (params) => guardCancel(await select({
-	...params,
-	message: stylePromptMessage(params.message),
-	options: params.options.map((opt) => opt.hint === void 0 ? opt : {
-		...opt,
-		hint: stylePromptHint(opt.hint)
-	})
-}));
-function resolveDefaultTokenProfileId(provider) {
-	return `${normalizeProviderId(provider)}:manual`;
-}
-function listProvidersWithAuthMethods(providers) {
-	return providers.filter((provider) => provider.auth.length > 0);
-}
-function listTokenAuthMethods(provider) {
-	return provider.auth.filter((method) => method.kind === "token");
-}
-function listProvidersWithTokenMethods(providers) {
-	return providers.filter((provider) => listTokenAuthMethods(provider).length > 0);
-}
-async function resolveModelsAuthContext(params) {
-	const config = await loadValidConfigOrThrow();
-	const defaultAgentId = resolveDefaultAgentId(config);
-	const agentDir = resolveAgentDir(config, defaultAgentId);
-	const workspaceDir = resolveAgentWorkspaceDir(config, defaultAgentId) ?? resolveDefaultAgentWorkspaceDir();
-	return {
-		config,
-		agentDir,
-		workspaceDir,
-		providers: resolvePluginProviders({
-			config,
-			workspaceDir,
-			mode: "setup",
-			bundledProviderAllowlistCompat: true,
-			bundledProviderVitestCompat: true,
-			...params?.requestedProvider?.trim() ? {
-				providerRefs: [params.requestedProvider],
-				activate: true
-			} : {}
-		})
-	};
-}
-async function resolveModelsAuthAgentDir() {
-	const config = await loadValidConfigOrThrow();
-	return resolveAgentDir(config, resolveDefaultAgentId(config));
-}
-function resolveRequestedProviderOrThrow(providers, rawProvider) {
-	const requested = rawProvider?.trim();
-	if (!requested) return null;
-	const matched = resolveProviderMatch(providers, requested);
-	if (matched) return matched;
-	const available = providers.map((provider) => provider.id).filter(Boolean).toSorted((a, b) => a.localeCompare(b));
-	const availableText = available.length > 0 ? available.join(", ") : "(none)";
-	throw new Error(`Unknown provider "${requested}". Loaded providers: ${availableText}. Verify plugins via \`${formatCliCommand("genesis plugins list --json")}\`.`);
-}
-function resolveTokenMethodOrThrow(provider, rawMethod) {
-	const tokenMethods = listTokenAuthMethods(provider);
-	if (rawMethod?.trim()) {
-		const matched = pickAuthMethod(provider, rawMethod);
-		if (matched && matched.kind === "token") return matched;
-		const available = tokenMethods.map((method) => method.id).join(", ") || "(none)";
-		throw new Error(`Unknown token auth method "${rawMethod}" for provider "${provider.id}". Available token methods: ${available}.`);
-	}
-	return null;
-}
-async function pickProviderAuthMethod(params) {
-	const requestedMethod = pickAuthMethod(params.provider, params.requestedMethod);
-	if (requestedMethod) return requestedMethod;
-	if (params.provider.auth.length === 1) return params.provider.auth[0] ?? null;
-	return await params.prompter.select({
-		message: `Auth method for ${params.provider.label}`,
-		options: params.provider.auth.map((method) => ({
-			value: method.id,
-			label: method.label,
-			hint: method.hint
-		}))
-	}).then((id) => params.provider.auth.find((method) => method.id === id) ?? null);
-}
-async function pickProviderTokenMethod(params) {
-	const explicitTokenMethod = resolveTokenMethodOrThrow(params.provider, params.requestedMethod);
-	if (explicitTokenMethod) return explicitTokenMethod;
-	const tokenMethods = listTokenAuthMethods(params.provider);
-	if (tokenMethods.length === 0) return null;
-	const setupTokenMethod = tokenMethods.find((method) => method.id === "setup-token");
-	if (setupTokenMethod) return setupTokenMethod;
-	if (tokenMethods.length === 1) return tokenMethods[0] ?? null;
-	return await params.prompter.select({
-		message: `Token method for ${params.provider.label}`,
-		options: tokenMethods.map((method) => ({
-			value: method.id,
-			label: method.label,
-			hint: method.hint
-		}))
-	}).then((id) => tokenMethods.find((method) => method.id === id) ?? null);
-}
-async function persistProviderAuthResult(params) {
-	for (const profile of params.result.profiles) {
-		const credential = withCredentialMetadata(profile.credential, {
-			displayName: profile.displayName,
-			priority: profile.priority
-		});
-		upsertAuthProfile({
-			profileId: profile.profileId,
-			credential,
-			agentDir: params.agentDir
-		});
-	}
-	await updateConfig((cfg) => {
-		let next = cfg;
-		if (params.result.configPatch) next = applyProviderAuthConfigPatch(next, params.result.configPatch, { replaceDefaultModels: params.result.replaceDefaultModels });
-		for (const profile of params.result.profiles) next = applyAuthProfileConfig(next, {
-			profileId: profile.profileId,
-			provider: profile.credential.provider,
-			mode: credentialMode(profile.credential),
-			...profile.displayName ? { displayName: profile.displayName } : {},
-			...typeof profile.priority === "number" ? { priority: profile.priority } : {}
-		});
-		if (params.setDefault && params.result.defaultModel) next = applyDefaultModel(next, params.result.defaultModel);
-		return next;
-	});
-	logConfigUpdated(params.runtime);
-	for (const profile of params.result.profiles) {
-		const label = profile.displayName ? `${profile.displayName} (${profile.profileId})` : profile.profileId;
-		const prioritySuffix = typeof profile.priority === "number" ? ` priority=${profile.priority}` : "";
-		params.runtime.log(`Auth profile: ${label} (${profile.credential.provider}/${credentialMode(profile.credential)})${prioritySuffix}`);
-	}
-	if (params.result.defaultModel) params.runtime.log(params.setDefault ? `Default model set to ${params.result.defaultModel}` : `Default model available: ${params.result.defaultModel} (use --set-default to apply)`);
-	if (params.result.notes && params.result.notes.length > 0) await params.prompter.note(params.result.notes.join("\n"), "Provider notes");
-}
-/**
-* Apply optional `displayName` and `priority` metadata onto a credential
-* before persisting it. Preserves the credential type discriminator — never
-* returns a plain `AuthProfileCredential` without the original `type`.
-*/
-function withCredentialMetadata(credential, meta) {
-	const { displayName, priority } = meta;
-	const hasDisplayName = typeof displayName === "string" && displayName.length > 0;
-	const hasPriority = typeof priority === "number" && Number.isFinite(priority);
-	if (!hasDisplayName && !hasPriority) return credential;
-	if (credential.type === "api_key") return {
-		...credential,
-		...hasDisplayName ? { displayName } : {},
-		...hasPriority ? { priority } : {}
-	};
-	if (credential.type === "token") return {
-		...credential,
-		...hasDisplayName ? { displayName } : {},
-		...hasPriority ? { priority } : {}
-	};
-	return {
-		...credential,
-		...hasDisplayName ? { displayName } : {},
-		...hasPriority ? { priority } : {}
-	};
-}
-async function runProviderAuthMethod(params) {
-	await clearStaleProfileLockouts(params.provider.id, params.agentDir);
-	const result = await params.method.run({
-		config: params.config,
-		env: process.env,
-		agentDir: params.agentDir,
-		workspaceDir: params.workspaceDir,
-		prompter: params.prompter,
-		runtime: params.runtime,
-		allowSecretRefPrompt: false,
-		isRemote: isRemoteEnvironment(),
-		openUrl: async (url) => {
-			const { openUrl } = await import("./onboard-helpers-Begz93UO.js");
-			await openUrl(url);
-		},
-		oauth: { createVpsAwareHandlers: (runtimeParams) => createVpsAwareOAuthHandlers(runtimeParams) }
-	});
-	await persistProviderAuthResult({
-		result: {
-			...result,
-			profiles: result.profiles.map((profile) => {
-				const next = {
-					profileId: profile.profileId,
-					credential: profile.credential
-				};
-				if (profile.displayName !== void 0) next.displayName = profile.displayName;
-				if (profile.priority !== void 0) next.priority = profile.priority;
-				if (params.displayNameOverride) next.displayName = params.displayNameOverride;
-				if (typeof params.priorityOverride === "number") next.priority = params.priorityOverride;
-				return next;
-			})
-		},
-		agentDir: params.agentDir,
-		runtime: params.runtime,
-		prompter: params.prompter,
-		setDefault: params.setDefault
-	});
-}
-async function modelsAuthSetupTokenCommand(opts, runtime) {
-	if (!process.stdin.isTTY) throw new Error("setup-token requires an interactive TTY.");
-	const { config, agentDir, workspaceDir, providers } = await resolveModelsAuthContext({ requestedProvider: opts.provider });
-	const tokenProviders = listProvidersWithTokenMethods(providers);
-	if (tokenProviders.length === 0) throw new Error(`No provider token-auth plugins found. Install one via \`${formatCliCommand("genesis plugins install")}\`.`);
-	const provider = resolveRequestedProviderOrThrow(tokenProviders, opts.provider) ?? tokenProviders[0] ?? null;
-	if (!provider) throw new Error("No token-capable provider is available.");
-	if (!opts.yes) {
-		if (!await confirm$1({
-			message: `Continue with ${provider.label} token auth?`,
-			initialValue: true
-		})) return;
-	}
-	const prompter = createClackPrompter();
-	const method = await pickProviderTokenMethod({
-		provider,
-		prompter
-	});
-	if (!method) throw new Error(`Provider "${provider.id}" does not expose a token auth method.`);
-	await runProviderAuthMethod({
-		config,
-		agentDir,
-		workspaceDir,
-		provider,
-		method,
-		runtime,
-		prompter,
-		...normalizeOptionalString(opts.name) ? { displayNameOverride: normalizeOptionalString(opts.name) } : {},
-		...typeof opts.priority === "number" && Number.isFinite(opts.priority) ? { priorityOverride: opts.priority } : {}
-	});
-}
-async function modelsAuthPasteTokenCommand(opts, runtime) {
-	const agentDir = await resolveModelsAuthAgentDir();
-	const rawProvider = normalizeOptionalString(opts.provider);
-	if (!rawProvider) throw new Error("Missing --provider.");
-	const provider = normalizeProviderId(rawProvider);
-	const profileId = normalizeOptionalString(opts.profileId) || resolveDefaultTokenProfileId(provider);
-	const displayName = normalizeOptionalString(opts.name);
-	const priority = typeof opts.priority === "number" && Number.isFinite(opts.priority) ? opts.priority : void 0;
-	const tokenInput = await text$1({
-		message: `Paste token for ${provider}`,
-		validate: (value) => {
-			const trimmed = value?.trim();
-			if (!trimmed) return "Required";
-			if (provider === "anthropic") return validateAnthropicSetupToken(trimmed.replaceAll(/\s+/g, ""));
-		}
-	});
-	const token = provider === "anthropic" ? tokenInput.replaceAll(/\s+/g, "").trim() : normalizeOptionalString(tokenInput) ?? "";
-	const expires = normalizeStringifiedOptionalString(opts.expiresIn) ? Date.now() + parseDurationMs(normalizeStringifiedOptionalString(opts.expiresIn) ?? "", { defaultUnit: "d" }) : void 0;
-	upsertAuthProfile({
-		profileId,
-		credential: {
-			type: "token",
-			provider,
-			token,
-			...expires ? { expires } : {},
-			...displayName ? { displayName } : {},
-			...typeof priority === "number" ? { priority } : {}
-		},
-		agentDir
-	});
-	await updateConfig((cfg) => applyAuthProfileConfig(cfg, {
-		profileId,
-		provider,
-		mode: "token",
-		...displayName ? { displayName } : {},
-		...typeof priority === "number" ? { priority } : {}
-	}));
-	logConfigUpdated(runtime);
-	const labelSuffix = displayName ? ` "${displayName}"` : "";
-	const prioritySuffix = typeof priority === "number" ? ` priority=${priority}` : "";
-	runtime.log(`Auth profile: ${profileId}${labelSuffix} (${provider}/token)${prioritySuffix}`);
-	if (provider === "anthropic") {
-		runtime.log("Anthropic setup-token auth is supported in Genesis.");
-		runtime.log("Genesis prefers Claude CLI reuse when it is available on the host.");
-		runtime.log("Anthropic staff told us this Genesis path is allowed again.");
-	}
-}
-async function modelsAuthAddCommand(opts, runtime) {
-	const { config, agentDir, workspaceDir, providers } = await resolveModelsAuthContext();
-	const tokenProviders = listProvidersWithTokenMethods(providers);
-	const provider = await select$1({
-		message: "Token provider",
-		options: [...tokenProviders.map((providerPlugin) => ({
-			value: providerPlugin.id,
-			label: providerPlugin.id,
-			hint: providerPlugin.docsPath ? `Docs: ${providerPlugin.docsPath}` : void 0
-		})), {
-			value: "custom",
-			label: "custom (type provider id)"
-		}]
-	});
-	const providerId = provider === "custom" ? normalizeProviderId(await text$1({
-		message: "Provider id",
-		validate: (value) => value?.trim() ? void 0 : "Required"
-	})) : provider;
-	const providerPlugin = provider === "custom" ? null : resolveRequestedProviderOrThrow(tokenProviders, providerId);
-	if (providerPlugin) {
-		const tokenMethods = listTokenAuthMethods(providerPlugin);
-		const methodId = tokenMethods.length > 0 ? await select$1({
-			message: "Token method",
-			options: [...tokenMethods.map((method) => ({
-				value: method.id,
-				label: method.label,
-				hint: method.hint
-			})), {
-				value: "paste",
-				label: "paste token"
-			}]
-		}) : "paste";
-		if (methodId !== "paste") {
-			const prompter = createClackPrompter();
-			const method = tokenMethods.find((candidate) => candidate.id === methodId);
-			if (!method) throw new Error(`Unknown token auth method "${methodId}".`);
-			await runProviderAuthMethod({
-				config,
-				agentDir,
-				workspaceDir,
-				provider: providerPlugin,
-				method,
-				runtime,
-				prompter,
-				...normalizeOptionalString(opts.name) ? { displayNameOverride: normalizeOptionalString(opts.name) } : {},
-				...typeof opts.priority === "number" && Number.isFinite(opts.priority) ? { priorityOverride: opts.priority } : {}
-			});
-			return;
-		}
-	}
-	await modelsAuthPasteTokenCommand({
-		provider: providerId,
-		profileId: (await text$1({
-			message: "Profile id",
-			initialValue: resolveDefaultTokenProfileId(providerId),
-			validate: (value) => value?.trim() ? void 0 : "Required"
-		})).trim(),
-		expiresIn: await confirm$1({
-			message: "Does this token expire?",
-			initialValue: false
-		}) ? (await text$1({
-			message: "Expires in (duration)",
-			initialValue: "365d",
-			validate: (value) => {
-				try {
-					parseDurationMs(value ?? "", { defaultUnit: "d" });
-					return;
-				} catch {
-					return "Invalid duration (e.g. 365d, 12h, 30m)";
-				}
-			}
-		})).trim() : void 0,
-		...normalizeOptionalString(opts.name) ? { name: normalizeOptionalString(opts.name) } : {},
-		...typeof opts.priority === "number" ? { priority: opts.priority } : {}
-	}, runtime);
-}
-/**
-* Clear stale cooldown/disabled state for all profiles matching a provider.
-* When a user explicitly runs `models auth login`, they intend to fix auth —
-* stale `auth_permanent` / `billing` lockouts should not persist across
-* a deliberate re-authentication attempt.
-*/
-async function clearStaleProfileLockouts(provider, agentDir) {
-	try {
-		const store = loadAuthProfileStoreForRuntime(agentDir);
-		const profileIds = listProfilesForProvider(store, provider);
-		for (const profileId of profileIds) await clearAuthProfileCooldown({
-			store,
-			profileId,
-			agentDir
-		});
-	} catch {}
-}
-function resolveRequestedLoginProviderOrThrow(providers, rawProvider) {
-	return resolveRequestedProviderOrThrow(providers, rawProvider);
-}
-function credentialMode(credential) {
-	if (credential.type === "api_key") return "api_key";
-	if (credential.type === "token") return "token";
-	return "oauth";
-}
-function maybeLogOpenAICodexNativeSearchTip(runtime, providerId) {
-	if (providerId !== "openai-codex") return;
-	runtime.log("Tip: Codex-capable models can use native Codex web search. Enable it with genesis configure --section web (recommended mode: cached). Docs: https://genesis.pixelzx.com/docs/tools/web");
-}
-async function modelsAuthLoginCommand(opts, runtime) {
-	if (!process.stdin.isTTY) throw new Error("models auth login requires an interactive TTY.");
-	const { config, agentDir, workspaceDir, providers } = await resolveModelsAuthContext({ requestedProvider: opts.provider });
-	const prompter = createClackPrompter();
-	const authProviders = listProvidersWithAuthMethods(providers);
-	if (authProviders.length === 0) throw new Error(`No provider plugins found. Install one via \`${formatCliCommand("genesis plugins install")}\`.`);
-	const selectedProvider = resolveRequestedLoginProviderOrThrow(authProviders, opts.provider) ?? await prompter.select({
-		message: "Select a provider",
-		options: authProviders.map((provider) => ({
-			value: provider.id,
-			label: provider.label,
-			hint: provider.docsPath ? `Docs: ${provider.docsPath}` : void 0
-		}))
-	}).then((id) => resolveProviderMatch(authProviders, id));
-	if (!selectedProvider) throw new Error("Unknown provider. Use --provider <id> to pick a provider plugin.");
-	const chosenMethod = await pickProviderAuthMethod({
-		provider: selectedProvider,
-		requestedMethod: opts.method,
-		prompter
-	});
-	if (!chosenMethod) throw new Error("Unknown auth method. Use --method <id> to select one.");
-	await runProviderAuthMethod({
-		config,
-		agentDir,
-		workspaceDir,
-		provider: selectedProvider,
-		method: chosenMethod,
-		runtime,
-		prompter,
-		setDefault: opts.setDefault,
-		...normalizeOptionalString(opts.name) ? { displayNameOverride: normalizeOptionalString(opts.name) } : {},
-		...typeof opts.priority === "number" && Number.isFinite(opts.priority) ? { priorityOverride: opts.priority } : {}
-	});
-	maybeLogOpenAICodexNativeSearchTip(runtime, selectedProvider.id);
-}
-/**
-* Update the display name and/or priority of an existing profile. Writes
-* the secret side first (via the per-agent lock), then the config side
-* (`auth.profiles.<id>`) so config and secret stay in sync. A null/empty
-* `displayName` clears the name; `null` priority clears the priority. The
-* `priorities` cache mirror in `auth-state.json` is updated to match.
-*/
-async function modelsAuthRenameCommand(opts, runtime) {
-	const profileId = normalizeOptionalString(opts.profileId);
-	if (!profileId) throw new Error("Missing --profile-id.");
-	if (!opts.name) throw new Error("Missing --name. Pass the new display name as a non-empty string.");
-	const agentDir = await resolveModelsAuthAgentDir();
-	const updated = await updateAuthProfileMetadataWithLock({
-		profileId,
-		displayName: opts.name,
-		agentDir
-	});
-	if (!updated) throw new Error(`Auth profile "${profileId}" not found. Use \`${formatCliCommand("genesis models list")}\` to inspect existing profiles.`);
-	const credential = updated.profiles[profileId];
-	if (!credential) throw new Error(`Auth profile "${profileId}" disappeared during update.`);
-	await updateConfig((cfg) => applyAuthProfileConfig(cfg, {
-		profileId,
-		provider: credential.provider,
-		mode: credentialMode(credential),
-		displayName: opts.name
-	}));
-	logConfigUpdated(runtime);
-	runtime.log(`Renamed ${profileId} → "${opts.name}"`);
-}
-async function modelsAuthSetPriorityCommand(opts, runtime) {
-	const profileId = normalizeOptionalString(opts.profileId);
-	if (!profileId) throw new Error("Missing --profile-id.");
-	if (opts.priority === void 0) throw new Error("Missing --priority. Pass an integer; pass an empty string to clear.");
-	const priority = opts.priority === null ? null : opts.priority;
-	if (priority !== null && (!Number.isFinite(priority) || !Number.isInteger(priority))) throw new Error("--priority must be an integer (or an empty value to clear).");
-	const updated = await updateAuthProfileMetadataWithLock({
-		profileId,
-		priority,
-		agentDir: await resolveModelsAuthAgentDir()
-	});
-	if (!updated) throw new Error(`Auth profile "${profileId}" not found. Use \`${formatCliCommand("genesis models list")}\` to inspect existing profiles.`);
-	const credential = updated.profiles[profileId];
-	if (!credential) throw new Error(`Auth profile "${profileId}" disappeared during update.`);
-	await updateConfig((cfg) => {
-		const profiles = { ...cfg.auth?.profiles };
-		const existing = profiles[profileId];
-		if (existing) {
-			const { priority: _drop, ...rest } = existing;
-			if (priority === null) profiles[profileId] = rest;
-			else profiles[profileId] = {
-				...rest,
-				priority
-			};
-		} else if (priority !== null) profiles[profileId] = {
-			provider: credential.provider,
-			mode: credentialMode(credential),
-			priority
-		};
-		return {
-			...cfg,
-			auth: {
-				...cfg.auth,
-				profiles
-			}
-		};
-	});
-	logConfigUpdated(runtime);
-	runtime.log(priority === null ? `Cleared priority for ${profileId}` : `Set priority for ${profileId} to ${priority}`);
-}
-async function modelsAuthRemoveCommand(opts, runtime) {
-	const profileId = normalizeOptionalString(opts.profileId);
-	if (!profileId) throw new Error("Missing --profile-id.");
-	if (!opts.yes && process.stdin.isTTY) {
-		if (!await confirm$1({
-			message: `Remove auth profile "${profileId}"? This deletes the secret and its state.`,
-			initialValue: false
-		})) {
-			runtime.log("Cancelled.");
-			return;
-		}
-	}
-	if (!await removeAuthProfileWithLock({
-		profileId,
-		agentDir: await resolveModelsAuthAgentDir()
-	})) throw new Error("Failed to update auth-profiles.json (lock busy?).");
-	await updateConfig((cfg) => {
-		if (!cfg.auth?.profiles?.[profileId]) return cfg;
-		const { [profileId]: _drop, ...remaining } = cfg.auth.profiles;
-		return {
-			...cfg,
-			auth: {
-				...cfg.auth,
-				profiles: Object.keys(remaining).length > 0 ? remaining : void 0
-			}
-		};
-	});
-	logConfigUpdated(runtime);
-	runtime.log(`Removed auth profile: ${profileId}`);
-}
-//#endregion
-export { modelsAuthRenameCommand as a, resolveRequestedLoginProviderOrThrow as c, modelsAuthRemoveCommand as i, modelsAuthLoginCommand as n, modelsAuthSetPriorityCommand as o, modelsAuthPasteTokenCommand as r, modelsAuthSetupTokenCommand as s, modelsAuthAddCommand as t };