@skrr-ai/cli 0.1.33 → 0.1.35

package/dist/base-command.js

@@ -203,6 +203,11 @@ class BaseCommand extends core_1.Command {
             (0, data_provider_1.setHttpAdapter)((0, node_adapter_1.createNodeAdapter)());
             return;
         }
+        // A replacement guest keeps its workspace but receives a fresh Linux
+        // machine-id. Retire the prior instance's machine-bound CLI envelopes
+        // before migration/prefetch reads them; the current daemon handoff below
+        // supplies fresh authority without a user login.
+        await (0, auth_core_init_1.prepareDedicatedRuntimeAuthGeneration)();
         // One-shot migration: legacy token/refreshToken in cli-config.json
         // → keychain (macOS) or cli-auth.json (elsewhere). Idempotent.
         try {

package/dist/commands/learning/delete.js

@@ -14,7 +14,8 @@ class LearningDelete extends base_command_1.BaseCommand {
         const { flags } = await this.parse(LearningDelete);
         if (!flags.yes &&
             !(await this.confirm('Delete all adaptive-learning state, episodes, and outcomes? [y/N] '))) {
-            return;
+            this.log('Cancelled.');
+            this.exit(1);
         }
         let result;
         try {

package/dist/commands/learning/export.d.ts

@@ -1,5 +1,9 @@
 import { BaseCommand } from '../../base-command';
 export default class LearningExport extends BaseCommand {
     static description: string;
+    static examples: string[];
+    static flags: {
+        output: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
     run(): Promise<void>;
 }

package/dist/commands/learning/export.js

@@ -1,12 +1,25 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+const promises_1 = require("node:fs/promises");
+const core_1 = require("@oclif/core");
 const base_command_1 = require("../../base-command");
 const api_fetch_1 = require("../../lib/api-fetch");
 class LearningExport extends base_command_1.BaseCommand {
     static description = 'Export your adaptive-learning consent, state, episodes, and outcomes as JSON';
+    static examples = [
+        '<%= config.bin %> learning export --output learning-data.json',
+        '<%= config.bin %> learning export --output - | jq .consent',
+    ];
+    static flags = {
+        output: core_1.Flags.string({
+            char: 'o',
+            description: 'Required destination path; use "-" only for deliberate stdout output',
+            required: true,
+        }),
+    };
     async run() {
         this.requireAuth();
-        await this.parse(LearningExport);
+        const { flags } = await this.parse(LearningExport);
         let result;
         try {
             result = await (0, api_fetch_1.apiFetch)('/api/user/adaptive-learning/export', {
@@ -16,7 +29,28 @@ class LearningExport extends base_command_1.BaseCommand {
         catch (err) {
             this.handleApiError(err);
         }
-        this.log(JSON.stringify(result, null, 2));
+        const serialized = `${JSON.stringify(result, null, 2)}\n`;
+        if (flags.output === '-') {
+            this.log(serialized.trimEnd());
+            return;
+        }
+        try {
+            await (0, promises_1.writeFile)(flags.output, serialized, {
+                encoding: 'utf8',
+                flag: 'wx',
+                mode: 0o600,
+            });
+        }
+        catch (err) {
+            this.failWithCliError({
+                message: `Could not write ${flags.output}: ${err.message}`,
+                code: 'ADAPTIVE_LEARNING_EXPORT_WRITE_FAILED',
+                exit: 1,
+                retryable: false,
+                details: { path: flags.output },
+            });
+        }
+        this.log(`Wrote adaptive-learning export to ${flags.output}.`);
     }
 }
 exports.default = LearningExport;

package/dist/commands/learning/reset.js

@@ -12,8 +12,10 @@ class LearningReset extends base_command_1.BaseCommand {
     async run() {
         this.requireAuth();
         const { flags } = await this.parse(LearningReset);
-        if (!flags.yes && !(await this.confirm('Reset all learned serving state? [y/N] ')))
-            return;
+        if (!flags.yes && !(await this.confirm('Reset all learned serving state? [y/N] '))) {
+            this.log('Cancelled.');
+            this.exit(1);
+        }
         let result;
         try {
             result = await (0, api_fetch_1.apiFetch)('/api/user/adaptive-learning/reset', {

package/dist/commands/machines/hosted/resume.js

@@ -42,6 +42,7 @@ class HostedMachinesResume extends base_command_1.BaseCommand {
                         workspaceId: flags.workspace,
                         intervalMs: Math.max(1, flags.interval) * 1000,
                         timeoutMs,
+                        ignoreInitialPaused: true,
                     }),
                 };
             }

package/dist/lib/auth-core-init.d.ts

@@ -1,4 +1,26 @@
 import { type AuthBundle } from './auth-storage';
+type DedicatedGenerationPreparationOptions = {
+    machineUuid?: string;
+    configDir?: string;
+    clearStoredAuth?: () => void;
+    clearCredentialEnvelope?: () => Promise<void>;
+    clearDeviceIdentity?: () => Promise<void>;
+};
+/**
+ * A Dedicated Runtime's workspace survives replacement but `/etc/machine-id`
+ * intentionally does not. Linux's fallback KEK is derived from that id, so a
+ * CLI credential persisted by the prior instance is unreadable on the next
+ * one. The guest never needs that stale authority: its root-owned loopback
+ * handoff descriptor mints a fresh CLI credential from the current daemon.
+ *
+ * Clear only the workload CLI's machine-bound auth artifacts once per runtime
+ * generation, before auth-core tries to decrypt them. A cross-process lock is
+ * required because terminals and agent tools can launch several `skrr`
+ * processes as soon as the guest becomes ready; without it they can clear a
+ * sibling's just-enrolled credential. The marker contains identity, not a
+ * secret, and stays in the persistent workspace beside the auth files.
+ */
+export declare function prepareDedicatedRuntimeAuthGeneration(options?: DedicatedGenerationPreparationOptions): Promise<boolean>;
 export declare function ensureAuthCoreConfigured(): void;
 export declare class CliCredentialInitializationError extends Error {
     readonly code = "CREDENTIAL_INITIALIZATION_UNAVAILABLE";
@@ -42,3 +64,4 @@ export declare function waitForCliCredentialEnvelope(): Promise<void>;
 /** @internal Test seam — reset the module-level one-shot initialization. */
 export declare function __resetPrefetchCliAuthForTest(): void;
 export declare function shouldUseAccessTokenForEnrollment(bundle: Pick<AuthBundle, 'token' | 'expiresAt'> | null | undefined, nowMs?: number, minTtlMs?: number): boolean;
+export {};

package/dist/lib/auth-core-init.js

@@ -4,6 +4,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CliCredentialInitializationError = void 0;
+exports.prepareDedicatedRuntimeAuthGeneration = prepareDedicatedRuntimeAuthGeneration;
 exports.ensureAuthCoreConfigured = ensureAuthCoreConfigured;
 exports.prefetchCliAuth = prefetchCliAuth;
 exports.waitForCliCredentialEnvelope = waitForCliCredentialEnvelope;
@@ -33,8 +34,10 @@ exports.shouldUseAccessTokenForEnrollment = shouldUseAccessTokenForEnrollment;
  *   - Fire-and-forget enrollment when an access token is already
  *     present — short-circuits silently on a fresh install before login.
  */
+const node_fs_1 = __importDefault(require("node:fs"));
 const node_os_1 = __importDefault(require("node:os"));
 const node_path_1 = __importDefault(require("node:path"));
+const proper_lockfile_1 = __importDefault(require("proper-lockfile"));
 const auth_core_1 = require("@skrr-ai/auth-core");
 const cred_envelope_1 = require("./cred-envelope");
 const device_identity_1 = require("./device-identity");
@@ -64,6 +67,64 @@ const cliLogger = {
  * so cross-binary file paths align byte-for-byte.
  */
 const DEFAULT_PROFILE = 'default';
+const DEDICATED_AUTH_GENERATION_MARKER = 'dedicated-runtime-auth-generation';
+/**
+ * A Dedicated Runtime's workspace survives replacement but `/etc/machine-id`
+ * intentionally does not. Linux's fallback KEK is derived from that id, so a
+ * CLI credential persisted by the prior instance is unreadable on the next
+ * one. The guest never needs that stale authority: its root-owned loopback
+ * handoff descriptor mints a fresh CLI credential from the current daemon.
+ *
+ * Clear only the workload CLI's machine-bound auth artifacts once per runtime
+ * generation, before auth-core tries to decrypt them. A cross-process lock is
+ * required because terminals and agent tools can launch several `skrr`
+ * processes as soon as the guest becomes ready; without it they can clear a
+ * sibling's just-enrolled credential. The marker contains identity, not a
+ * secret, and stays in the persistent workspace beside the auth files.
+ */
+async function prepareDedicatedRuntimeAuthGeneration(options = {}) {
+    const machineUuid = String(options.machineUuid ?? process.env.SKRR_MACHINE_UUID ?? '').trim();
+    if (!machineUuid.startsWith('dedicated-runtime:'))
+        return false;
+    const configDir = options.configDir ?? node_path_1.default.join(node_os_1.default.homedir(), '.skrr');
+    node_fs_1.default.mkdirSync(configDir, { recursive: true, mode: 0o700 });
+    const markerPath = node_path_1.default.join(configDir, DEDICATED_AUTH_GENERATION_MARKER);
+    const release = await proper_lockfile_1.default.lock(configDir, {
+        lockfilePath: `${markerPath}.lock`,
+        realpath: false,
+        retries: { retries: 20, minTimeout: 25, maxTimeout: 250 },
+    });
+    try {
+        let recorded = '';
+        try {
+            recorded = node_fs_1.default.readFileSync(markerPath, 'utf8').trim();
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        if (recorded === machineUuid)
+            return false;
+        (options.clearStoredAuth ?? auth_storage_1.clearAllBackends)();
+        await (options.clearDeviceIdentity ??
+            (() => (0, device_identity_1.resetDeviceIdentity)({
+                profile: DEFAULT_PROFILE,
+                clearOnDisk: true,
+            })))();
+        await (options.clearCredentialEnvelope ??
+            (() => (0, cred_envelope_1.resetCredEnvelope)({
+                profile: DEFAULT_PROFILE,
+                clearOnDisk: true,
+            })))();
+        const temporary = `${markerPath}.tmp.${process.pid}.${Date.now()}`;
+        node_fs_1.default.writeFileSync(temporary, `${machineUuid}\n`, { mode: 0o600 });
+        node_fs_1.default.renameSync(temporary, markerPath);
+        return true;
+    }
+    finally {
+        await release();
+    }
+}
 /**
  * Soft cap so a stuck KEK probe (corrupt keychain, hung native binding)
  * does not wedge commands on a fresh/plaintext install. Persisted encrypted

package/dist/lib/dedicated-machines.js

@@ -893,7 +893,11 @@ function formatDedicatedRuntimeApiError(err) {
     }
     try {
         const parsed = JSON.parse(err.body);
-        const sentence = parsed.message || parsed.error || parsed.code;
+        // This formatter is reached only by `machines dedicated *`. Older API
+        // replicas and product-neutral action errors may still carry the Hosted
+        // Machine noun even though the caller named a Dedicated Runtime. Do not
+        // repeat that contradictory product name while a mixed deployment rolls.
+        const sentence = (parsed.message || parsed.error || parsed.code)?.replace(/(?:skrr )?Hosted Machine/g, 'Dedicated Runtime');
         return sentence ? `${sentence}${describeRefusalReasons(err)}` : null;
     }
     catch {

package/dist/lib/hosted-machines.d.ts

@@ -162,6 +162,7 @@ export declare function waitForHostedMachineReady(id: string, options: HostedMac
     intervalMs: number;
     timeoutMs?: number;
     onSnapshot?: (session: HostedMachineSession) => void;
+    ignoreInitialPaused?: boolean;
 }): Promise<HostedMachineSession>;
 /**
  * Human-readable age of an engine's last heartbeat, e.g. `9d`, `4h`, `12m`.

package/dist/lib/hosted-machines.js

@@ -230,6 +230,7 @@ class HostedMachineReadyTimeoutError extends Error {
 exports.HostedMachineReadyTimeoutError = HostedMachineReadyTimeoutError;
 async function waitForHostedMachineReady(id, options) {
     const startedAt = Date.now();
+    let observedResumeProgress = false;
     while (true) {
         const response = await getHostedMachine(id, options);
         const session = response.session;
@@ -244,6 +245,9 @@ async function waitForHostedMachineReady(id, options) {
             const detail = hostedMachineErrorSummary(session);
             throw new Error(`Hosted Machine ${id} reached ${status}${detail ? `: ${detail}` : ''}`);
         }
+        if (status !== 'paused') {
+            observedResumeProgress = true;
+        }
         // Async resume deliberately rolls a recoverable failure back to `paused`
         // so the retained workspace remains resumable. That is terminal for THIS
         // wait operation even though it is not terminal for the machine. The
@@ -251,6 +255,19 @@ async function waitForHostedMachineReady(id, options) {
         // row here belongs to the attempt we just started.
         if (status === 'paused') {
             const detail = hostedMachineErrorSummary(session);
+            // The resume endpoint enqueues asynchronously. Its first read can still
+            // return the old, clean `paused` row before the worker persists
+            // `resuming`; treating that snapshot as the attempt's terminal state
+            // makes `resume --wait` fail while the machine is actually starting.
+            // Once progress has been observed — or the paused row carries an error —
+            // it is a real rollback and remains terminal for this wait.
+            if (options.ignoreInitialPaused && !observedResumeProgress && !detail) {
+                if (options.timeoutMs && Date.now() - startedAt >= options.timeoutMs) {
+                    throw new HostedMachineReadyTimeoutError(id, hostedMachineProgressSummary(session));
+                }
+                await sleep(options.intervalMs);
+                continue;
+            }
             throw new Error(`Hosted Machine ${id} returned to paused before it became ready${detail ? `: ${detail}` : ''}`);
         }
         if (options.timeoutMs && Date.now() - startedAt >= options.timeoutMs) {

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/firstPartyHarness.d.ts

@@ -63,15 +63,17 @@ export interface FirstPartyHarnessIdentity {
 /**
  * THE identity — the only literal product name in the codebase.
  *
- * Phase: EXPAND. `provider` is still the spelling every stored row carries;
- * `skrr-code` is accepted everywhere so the flip can follow once every reader
- * has shipped.
+ * Phase: FLIPPED. `skrr-code` is canonical — stored, returned and rendered.
+ * `sky-code` is still accepted on every ingress, and it is still the WIRE
+ * spelling: daemons on users' machines may predate the rename, so the server
+ * and a daemon keep exchanging `sky-code` until contract (OSK-8663) empties
+ * `aliases` and moves `wireProvider`.
  */
 declare const IDENTITY: {
     readonly displayName: "skrr Code";
     readonly command: "skrr code";
-    readonly provider: "sky-code";
-    readonly aliases: readonly ["skrr-code"];
+    readonly provider: "skrr-code";
+    readonly aliases: readonly ["sky-code"];
     readonly wireProvider: "sky-code";
 };
 /** The canonical slug, as a literal type. */

package/dist/node_modules/@skrr-ai/auth-core/dist/cjs/firstPartyHarness.js

@@ -99,15 +99,17 @@ function defineIdentity(identity) {
 /**
  * THE identity — the only literal product name in the codebase.
  *
- * Phase: EXPAND. `provider` is still the spelling every stored row carries;
- * `skrr-code` is accepted everywhere so the flip can follow once every reader
- * has shipped.
+ * Phase: FLIPPED. `skrr-code` is canonical — stored, returned and rendered.
+ * `sky-code` is still accepted on every ingress, and it is still the WIRE
+ * spelling: daemons on users' machines may predate the rename, so the server
+ * and a daemon keep exchanging `sky-code` until contract (OSK-8663) empties
+ * `aliases` and moves `wireProvider`.
  */
 const IDENTITY = {
     displayName: 'skrr Code',
     command: 'skrr code',
-    provider: 'sky-code',
-    aliases: ['skrr-code'],
+    provider: 'skrr-code',
+    aliases: ['sky-code'],
     wireProvider: 'sky-code',
 };
 exports.FIRST_PARTY_HARNESS = defineIdentity(IDENTITY);

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/firstPartyHarness.d.ts

@@ -63,15 +63,17 @@ export interface FirstPartyHarnessIdentity {
 /**
  * THE identity — the only literal product name in the codebase.
  *
- * Phase: EXPAND. `provider` is still the spelling every stored row carries;
- * `skrr-code` is accepted everywhere so the flip can follow once every reader
- * has shipped.
+ * Phase: FLIPPED. `skrr-code` is canonical — stored, returned and rendered.
+ * `sky-code` is still accepted on every ingress, and it is still the WIRE
+ * spelling: daemons on users' machines may predate the rename, so the server
+ * and a daemon keep exchanging `sky-code` until contract (OSK-8663) empties
+ * `aliases` and moves `wireProvider`.
  */
 declare const IDENTITY: {
     readonly displayName: "skrr Code";
     readonly command: "skrr code";
-    readonly provider: "sky-code";
-    readonly aliases: readonly ["skrr-code"];
+    readonly provider: "skrr-code";
+    readonly aliases: readonly ["sky-code"];
     readonly wireProvider: "sky-code";
 };
 /** The canonical slug, as a literal type. */

package/dist/node_modules/@skrr-ai/auth-core/dist/esm/firstPartyHarness.js

@@ -70,15 +70,17 @@ function defineIdentity(identity) {
 /**
  * THE identity — the only literal product name in the codebase.
  *
- * Phase: EXPAND. `provider` is still the spelling every stored row carries;
- * `skrr-code` is accepted everywhere so the flip can follow once every reader
- * has shipped.
+ * Phase: FLIPPED. `skrr-code` is canonical — stored, returned and rendered.
+ * `sky-code` is still accepted on every ingress, and it is still the WIRE
+ * spelling: daemons on users' machines may predate the rename, so the server
+ * and a daemon keep exchanging `sky-code` until contract (OSK-8663) empties
+ * `aliases` and moves `wireProvider`.
  */
 const IDENTITY = {
     displayName: 'skrr Code',
     command: 'skrr code',
-    provider: 'sky-code',
-    aliases: ['skrr-code'],
+    provider: 'skrr-code',
+    aliases: ['sky-code'],
     wireProvider: 'sky-code',
 };
 export const FIRST_PARTY_HARNESS = defineIdentity(IDENTITY);

package/dist/node_modules/@skrr-ai/auth-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skrr-ai/auth-core",
-  "version": "0.1.9",
+  "version": "0.2.0",
   "main": "dist/cjs/index.js",
   "types": "dist/esm/index.d.ts",
   "exports": {

package/dist/node_modules/@skrr-ai/data-provider/index.js

@@ -38796,7 +38796,7 @@ function Xu(t2, n2) {
   var i2 = qu[t2];
   return i2 ? b([], i2, true) : [];
 }
-var Qu = Object.freeze(((Gu = { claude: Object.freeze([{ value: "sonnet", label: "Sonnet", description: "Balanced \u2014 the default for most work" }, { value: "opus", label: "Opus", description: "Most capable, highest cost" }, { value: "haiku", label: "Haiku", description: "Fastest and cheapest" }, { value: "opusplan", label: "Opus plan", description: "Opus while planning, Sonnet while executing" }]), codex: Object.freeze([{ value: "gpt-5.6-sol", label: "GPT-5.6 Sol", description: "Frontier agentic coding \u2014 the Codex default", efforts: Object.freeze(["low", "medium", "high", "xhigh", "max", "ultra"]), defaultEffort: "low" }, { value: "gpt-5.6-terra", label: "GPT-5.6 Terra", description: "Balanced capability and cost", efforts: Object.freeze(["low", "medium", "high", "xhigh", "max", "ultra"]), defaultEffort: "medium" }, { value: "gpt-5.6-luna", label: "GPT-5.6 Luna", description: "Fast, high-volume work", efforts: Object.freeze(["low", "medium", "high", "xhigh", "max"]), defaultEffort: "medium" }, { value: "gpt-5.5", label: "GPT-5.5", description: "Previous generation", efforts: Object.freeze(["low", "medium", "high", "xhigh"]), defaultEffort: "medium" }, { value: "gpt-5.4", label: "GPT-5.4", description: "Previous generation", efforts: Object.freeze(["low", "medium", "high", "xhigh"]), defaultEffort: "medium" }, { value: "gpt-5.4-mini", label: "GPT-5.4 Mini", description: "Smallest and cheapest", efforts: Object.freeze(["low", "medium", "high", "xhigh"]), defaultEffort: "medium" }, { value: "gpt-5.3-codex-spark", label: "GPT-5.3 Codex Spark", description: "Low-latency coding", efforts: Object.freeze(["low", "medium", "high", "xhigh"]), defaultEffort: "high" }]), gemini: Object.freeze([{ value: "gemini-2.5-pro", label: "Gemini 2.5 Pro" }, { value: "gemini-2.5-flash", label: "Gemini 2.5 Flash", description: "Faster and cheaper" }]), "gemini-acp": Object.freeze([{ value: "gemini-2.5-pro", label: "Gemini 2.5 Pro" }, { value: "gemini-2.5-flash", label: "Gemini 2.5 Flash", description: "Faster and cheaper" }]) })[e.FIRST_PARTY_HARNESS_PROVIDER] = Object.freeze([{ value: "anthropic/claude-opus-5", label: "Claude Opus 5", description: "Most capable \u2014 the skrr Code default" }, { value: "openai/gpt-5.6", label: "GPT-5.6", description: "OpenAI alias for current Sol" }, { value: "anthropic/claude-fable-5", label: "Claude Fable 5", description: "Premium long-horizon work" }, { value: "anthropic/claude-sonnet-5", label: "Claude Sonnet 5", description: "Balanced capability and cost" }, { value: "openai/gpt-5.6-sol", label: "GPT-5.6 Sol", description: "OpenAI frontier" }, { value: "openai/gpt-5.6-terra", label: "GPT-5.6 Terra", description: "OpenAI balanced tier" }, { value: "openai/gpt-5.6-luna", label: "GPT-5.6 Luna", description: "OpenAI fast tier" }, { value: "google/gemini-3-pro", label: "Gemini 3 Pro", description: "Google direct; requires an enabled provider policy" }]), Gu));
+var Qu = Object.freeze(((Gu = { claude: Object.freeze([{ value: "sonnet", label: "Sonnet", description: "Balanced \u2014 the default for most work" }, { value: "opus", label: "Opus", description: "Most capable, highest cost" }, { value: "haiku", label: "Haiku", description: "Fastest and cheapest" }, { value: "opusplan", label: "Opus plan", description: "Opus while planning, Sonnet while executing" }]), codex: Object.freeze([{ value: "gpt-5.6-sol", label: "GPT-5.6 Sol", description: "Frontier agentic coding \u2014 the Codex default", efforts: Object.freeze(["low", "medium", "high", "xhigh", "max", "ultra"]), defaultEffort: "low" }, { value: "gpt-5.6-terra", label: "GPT-5.6 Terra", description: "Balanced capability and cost", efforts: Object.freeze(["low", "medium", "high", "xhigh", "max", "ultra"]), defaultEffort: "medium" }, { value: "gpt-5.6-luna", label: "GPT-5.6 Luna", description: "Fast, high-volume work", efforts: Object.freeze(["low", "medium", "high", "xhigh", "max"]), defaultEffort: "medium" }, { value: "gpt-5.5", label: "GPT-5.5", description: "Previous generation", efforts: Object.freeze(["low", "medium", "high", "xhigh"]), defaultEffort: "medium" }, { value: "gpt-5.4", label: "GPT-5.4", description: "Previous generation", efforts: Object.freeze(["low", "medium", "high", "xhigh"]), defaultEffort: "medium" }, { value: "gpt-5.4-mini", label: "GPT-5.4 Mini", description: "Smallest and cheapest", efforts: Object.freeze(["low", "medium", "high", "xhigh"]), defaultEffort: "medium" }, { value: "gpt-5.3-codex-spark", label: "GPT-5.3 Codex Spark", description: "Low-latency coding", efforts: Object.freeze(["low", "medium", "high", "xhigh"]), defaultEffort: "high" }]), gemini: Object.freeze([{ value: "gemini-2.5-pro", label: "Gemini 2.5 Pro" }, { value: "gemini-2.5-flash", label: "Gemini 2.5 Flash", description: "Faster and cheaper" }]), "gemini-acp": Object.freeze([{ value: "gemini-2.5-pro", label: "Gemini 2.5 Pro" }, { value: "gemini-2.5-flash", label: "Gemini 2.5 Flash", description: "Faster and cheaper" }]) })[e.FIRST_PARTY_HARNESS_PROVIDER] = Object.freeze([{ value: "anthropic/claude-opus-5", label: "Claude Opus 5", description: "Most capable \u2014 the ".concat(e.FIRST_PARTY_HARNESS.displayName, " default") }, { value: "openai/gpt-5.6", label: "GPT-5.6", description: "OpenAI alias for current Sol" }, { value: "anthropic/claude-fable-5", label: "Claude Fable 5", description: "Premium long-horizon work" }, { value: "anthropic/claude-sonnet-5", label: "Claude Sonnet 5", description: "Balanced capability and cost" }, { value: "openai/gpt-5.6-sol", label: "GPT-5.6 Sol", description: "OpenAI frontier" }, { value: "openai/gpt-5.6-terra", label: "GPT-5.6 Terra", description: "OpenAI balanced tier" }, { value: "openai/gpt-5.6-luna", label: "GPT-5.6 Luna", description: "OpenAI fast tier" }, { value: "google/gemini-3-pro", label: "Gemini 3 Pro", description: "Google direct; requires an enabled provider policy" }]), Gu));
 var Zu = Object.freeze(/* @__PURE__ */ new Set(["hermes", "kimi", "gemini-acp", "opencode-acp"]));
 var Ju = 128;
 var $u = Object.freeze(/* @__PURE__ */ new Set(["default", "auto", "inherit", "none"]));