@spacebar_ai/moldclaw-core 2026.3.14 → 2026.3.16

package/dist/auth-choice-Ddzko1B8.js

@@ -1,502 +0,0 @@
-import "./redact-fatrROh9.js";
-import "./errors-DOJWZqNo.js";
-import "./unhandled-rejections-CTvNvnT0.js";
-import "./logger-BFfIIIKH.js";
-import "./paths-D6AgsMTU.js";
-import "./tmp-moldclaw-dir-DWF-d8qD.js";
-import "./theme-BSXzMzAA.js";
-import "./globals-DESrFYmC.js";
-import "./subsystem-S4LNMNHd.js";
-import "./ansi-BPhP6LBZ.js";
-import "./boolean-D8Ha5nYV.js";
-import "./env-Dgex_t9p.js";
-import "./warning-filter-gJuwHM7C.js";
-import "./utils-rjVNXUns.js";
-import "./links-C5I443Xb.js";
-import "./setup-binary-Fw3cCSWL.js";
-import { Gm as applyAuthProfileConfig, Lg as normalizeSecretInputModeInput, lx as resolveEnvApiKey, mE as resolveApiKeyForProfile, n as resolveAuthProfileOrder, wE as ensureAuthProfileStore } from "./auth-profiles-BJcHzwPy.js";
-import "./model-selection-DfA4esOK.js";
-import { a as resolveAgentDir, m as resolveDefaultAgentId, p as resolveAgentWorkspaceDir } from "./agent-scope-DA7O8MVG.js";
-import "./boundary-file-read-Y1cMjPlu.js";
-import "./logger-wrbK9-ju.js";
-import "./exec-CoBTyh8B.js";
-import { g as resolveDefaultAgentWorkspaceDir } from "./workspace-CxNKYS0V.js";
-import "./io-DcoxdH6t.js";
-import "./host-env-security-xy11yVnm.js";
-import "./safe-text-BcUvBreN.js";
-import "./version-rW_3ob2o.js";
-import "./env-substitution-C9xZMTDL.js";
-import "./config-state-D1JkXt39.js";
-import "./network-mode-CE-ihBf6.js";
-import "./registry-DcDGl2X7.js";
-import "./manifest-registry-_0xclaVY.js";
-import "./ip-w605xvSx.js";
-import { l as resolveDefaultSecretProviderAlias } from "./ref-contract-D96lSYLs.js";
-import "./zod-schema.core-CWxzqcUs.js";
-import "./config-CkD8DJ7L.js";
-import "./audit-fs-SjcfoPO7.js";
-import "./resolve-3ErMOltL.js";
-import { Z as normalizeOptionalSecretInput } from "./provider-web-search-BR7etTjJ.js";
-import "./text-runtime-CgEQ9Y9_.js";
-import "./workspace-dirs-L1_QQ9mB.js";
-import "./config-BbxrRaLf.js";
-import "./tailnet-KyAU6tj_.js";
-import "./net-B_Iq_SVP.js";
-import "./credentials-D5uBf_C5.js";
-import "./routes-BNDsNO_e.js";
-import "./frontmatter-BTDAgsA3.js";
-import "./env-overrides-BHxqjYZG.js";
-import "./path-alias-guards-B3ZKrId1.js";
-import "./skills-B4h1k-SP.js";
-import "./ports-BVwQuCIR.js";
-import "./ports-lsof-DiY6GaAf.js";
-import "./ssh-tunnel-BaHTFPzH.js";
-import "./image-ops-Uw4rEShL.js";
-import "./fs-safe-Da4H0IOU.js";
-import "./mime-_IkgFMS2.js";
-import "./server-middleware-BPq4bu3A.js";
-import "./message-channel-CKeDAoOT.js";
-import "./resolve-route-IkBfMjBz.js";
-import "./internal-hooks-0x1JiQ5f.js";
-import { n as createLazyRuntimeSurface } from "./lazy-runtime-DdzFA4b9.js";
-import "./config-schema-GQ6uWjXe.js";
-import "./method-scopes-D-Q9dvbj.js";
-import "./session-cost-usage-B-57mlS8.js";
-import "./paths-CDWV-9nX.js";
-import "./routing-3o2D0ix4.js";
-import "./send-Cm9v3uhF.js";
-import "./node-resolve-DfOpQmxm.js";
-import "./provider-stream-gVymYPmd.js";
-import "./identity-file-DM4N5_7H.js";
-import "./provider-models-BA3hqqPq.js";
-import "./secret-file-Bjh19aoH.js";
-import "./logging-BdFqMomc.js";
-import "./runtime-env-CT-voxYE.js";
-import "./registry-xhgvU89y.js";
-import "./provider-onboard-CBC3kdk_.js";
-import "./model-definitions-DwehIMlw.js";
-import "./diagnostic-vMghIesG.js";
-import "./message-hook-mappers-DORrSLHM.js";
-import "./json-store-DlpyvQXN.js";
-import "./call-CoaQYq7c.js";
-import "./multimodal-BWF8MRkz.js";
-import "./memory-search-BBG2BKIh.js";
-import "./query-expansion-8R79qExs.js";
-import "./search-manager-CfizyEMk.js";
-import "./core-EKuk2FxR.js";
-import "./issue-format-i6sEuV4a.js";
-import "./logging-S-5LPdfQ.js";
-import "./note-z78_JyNp.js";
-import "./state-paths-C7dX__ql.js";
-import "./config-value-Dh8m-CFf.js";
-import "./command-secret-targets-CO_lZ_ZZ.js";
-import "./brave-BG5Yopn8.js";
-import "./provider-usage-DzuzbNBv.js";
-import "./perplexity-Brhpb45X.js";
-import "./restart-stale-pids-CN9ElYwR.js";
-import "./delivery-queue-DLjFP-0C.js";
-import "./pairing-token-ANLRyJSu.js";
-import "./accounts-BCaV8MsT.js";
-import "./process-runtime-CicRKAFe.js";
-import "./audit-BqRK9OSj.js";
-import "./cli-runtime-DtIDS2w7.js";
-import "./cli-utils-FHeUZLsT.js";
-import "./help-format-1yV2Xzq7.js";
-import "./progress-BQSTKUhd.js";
-import "./gateway-runtime-C76hUmUV.js";
-import { t as applyCloudflareAiGatewayConfig } from "./onboard-dffn5EMu.js";
-import "./onboard-Cbgb9BwQ.js";
-import { t as enablePluginInConfig } from "./enable-Tmsp8QuB.js";
-import "./provider-auth-choices-Cnuf1t9V.js";
-import "./auth-choice.apply-helpers-DFZU83FM.js";
-import { a as setCloudflareAiGatewayConfig, i as applyLitellmConfig, o as setLitellmApiKey, r as normalizeApiKeyTokenProviderAuthChoice, t as resolvePreferredProviderForAuthChoice } from "./provider-auth-choice-preference-BaOBZ_Xn.js";
-import "./model-picker-Z-CUcuMr.js";
-import { a as resolveCustomProviderId, n as applyCustomApiConfig, r as parseNonInteractiveCustomApiFlags, t as CustomApiError } from "./onboard-custom-0atne0C5.js";
-//#region src/commands/onboard-non-interactive/api-keys.ts
-function parseEnvVarNameFromSourceLabel(source) {
-	if (!source) return;
-	return /^(?:shell env: |env: )([A-Z][A-Z0-9_]*)$/.exec(source.trim())?.[1];
-}
-async function resolveApiKeyFromProfiles(params) {
-	const store = ensureAuthProfileStore(params.agentDir);
-	const order = resolveAuthProfileOrder({
-		cfg: params.cfg,
-		store,
-		provider: params.provider
-	});
-	for (const profileId of order) {
-		if (store.profiles[profileId]?.type !== "api_key") continue;
-		const resolved = await resolveApiKeyForProfile({
-			cfg: params.cfg,
-			store,
-			profileId,
-			agentDir: params.agentDir
-		});
-		if (resolved?.apiKey) return resolved.apiKey;
-	}
-	return null;
-}
-async function resolveNonInteractiveApiKey(params) {
-	const flagKey = normalizeOptionalSecretInput(params.flagValue);
-	const envResolved = resolveEnvApiKey(params.provider);
-	const explicitEnvVar = params.envVarName?.trim();
-	const explicitEnvKey = explicitEnvVar ? normalizeOptionalSecretInput(process.env[explicitEnvVar]) : void 0;
-	const resolvedEnvKey = envResolved?.apiKey ?? explicitEnvKey;
-	const resolvedEnvVarName = parseEnvVarNameFromSourceLabel(envResolved?.source) ?? explicitEnvVar;
-	if (params.secretInputMode === "ref") {
-		if (!resolvedEnvKey && flagKey) {
-			params.runtime.error([`${params.flagName} cannot be used with --secret-input-mode ref unless ${params.envVar} is set in env.`, `Set ${params.envVar} in env and omit ${params.flagName}, or use --secret-input-mode plaintext.`].join("\n"));
-			params.runtime.exit(1);
-			return null;
-		}
-		if (resolvedEnvKey) {
-			if (!resolvedEnvVarName) {
-				params.runtime.error([`--secret-input-mode ref requires an explicit environment variable for provider "${params.provider}".`, `Set ${params.envVar} in env and retry, or use --secret-input-mode plaintext.`].join("\n"));
-				params.runtime.exit(1);
-				return null;
-			}
-			return {
-				key: resolvedEnvKey,
-				source: "env",
-				envVarName: resolvedEnvVarName
-			};
-		}
-	}
-	if (flagKey) return {
-		key: flagKey,
-		source: "flag"
-	};
-	if (resolvedEnvKey) return {
-		key: resolvedEnvKey,
-		source: "env",
-		envVarName: resolvedEnvVarName
-	};
-	if (params.allowProfile ?? true) {
-		const profileKey = await resolveApiKeyFromProfiles({
-			provider: params.provider,
-			cfg: params.cfg,
-			agentDir: params.agentDir
-		});
-		if (profileKey) return {
-			key: profileKey,
-			source: "profile"
-		};
-	}
-	if (params.required === false) return null;
-	const profileHint = params.allowProfile === false ? "" : `, or existing ${params.provider} API-key profile`;
-	params.runtime.error(`Missing ${params.flagName} (or ${params.envVar} in env${profileHint}).`);
-	params.runtime.exit(1);
-	return null;
-}
-//#endregion
-//#region src/commands/onboard-non-interactive/local/auth-choice.api-key-providers.ts
-async function applySimpleNonInteractiveApiKeyChoice(params) {
-	if (params.authChoice !== "litellm-api-key") return;
-	const resolved = await params.resolveApiKey({
-		provider: "litellm",
-		cfg: params.baseConfig,
-		flagValue: params.opts.litellmApiKey,
-		flagName: "--litellm-api-key",
-		envVar: "LITELLM_API_KEY",
-		runtime: params.runtime
-	});
-	if (!resolved) return null;
-	if (!await params.maybeSetResolvedApiKey(resolved, (value) => setLitellmApiKey(value, void 0, params.apiKeyStorageOptions))) return null;
-	return applyLitellmConfig(applyAuthProfileConfig(params.nextConfig, {
-		profileId: "litellm:default",
-		provider: "litellm",
-		mode: "api_key"
-	}));
-}
-//#endregion
-//#region src/commands/onboard-non-interactive/local/auth-choice.plugin-providers.ts
-const PROVIDER_PLUGIN_CHOICE_PREFIX = "provider-plugin:";
-async function loadPluginProviderRuntime() {
-	return import("./auth-choice.plugin-providers.runtime-AvAZ6S5W.js");
-}
-const loadAuthChoicePluginProvidersRuntime = createLazyRuntimeSurface(loadPluginProviderRuntime, ({ authChoicePluginProvidersRuntime }) => authChoicePluginProvidersRuntime);
-function buildIsolatedProviderResolutionConfig(cfg, providerId) {
-	if (!providerId) return cfg;
-	const allow = new Set(cfg.plugins?.allow ?? []);
-	allow.add(providerId);
-	return {
-		...cfg,
-		plugins: {
-			...cfg.plugins,
-			allow: Array.from(allow),
-			entries: {
-				...cfg.plugins?.entries,
-				[providerId]: {
-					...cfg.plugins?.entries?.[providerId],
-					enabled: true
-				}
-			}
-		}
-	};
-}
-async function applyNonInteractivePluginProviderChoice(params) {
-	const agentId = resolveDefaultAgentId(params.nextConfig);
-	const agentDir = resolveAgentDir(params.nextConfig, agentId);
-	const workspaceDir = resolveAgentWorkspaceDir(params.nextConfig, agentId) ?? resolveDefaultAgentWorkspaceDir();
-	const preferredProviderId = (params.authChoice.startsWith(PROVIDER_PLUGIN_CHOICE_PREFIX) ? params.authChoice.slice(16).split(":", 1)[0]?.trim() : void 0) || await resolvePreferredProviderForAuthChoice({
-		choice: params.authChoice,
-		config: params.nextConfig,
-		workspaceDir
-	});
-	const resolutionConfig = buildIsolatedProviderResolutionConfig(params.nextConfig, preferredProviderId);
-	const { resolveOwningPluginIdsForProvider, resolveProviderPluginChoice, resolvePluginProviders } = await loadAuthChoicePluginProvidersRuntime();
-	const providerChoice = resolveProviderPluginChoice({
-		providers: resolvePluginProviders({
-			config: resolutionConfig,
-			workspaceDir,
-			onlyPluginIds: preferredProviderId ? resolveOwningPluginIdsForProvider({
-				provider: preferredProviderId,
-				config: resolutionConfig,
-				workspaceDir
-			}) : void 0,
-			bundledProviderAllowlistCompat: true,
-			bundledProviderVitestCompat: true
-		}),
-		choice: params.authChoice
-	});
-	if (!providerChoice) return;
-	const enableResult = enablePluginInConfig(params.nextConfig, providerChoice.provider.pluginId ?? providerChoice.provider.id);
-	if (!enableResult.enabled) {
-		params.runtime.error(`${providerChoice.provider.label} plugin is disabled (${enableResult.reason ?? "blocked"}).`);
-		params.runtime.exit(1);
-		return null;
-	}
-	const method = providerChoice.method;
-	if (!method.runNonInteractive) {
-		params.runtime.error([`Auth choice "${params.authChoice}" requires interactive mode.`, `The ${providerChoice.provider.label} provider plugin does not implement non-interactive setup.`].join("\n"));
-		params.runtime.exit(1);
-		return null;
-	}
-	return method.runNonInteractive({
-		authChoice: params.authChoice,
-		config: enableResult.config,
-		baseConfig: params.baseConfig,
-		opts: params.opts,
-		runtime: params.runtime,
-		agentDir,
-		workspaceDir,
-		resolveApiKey: params.resolveApiKey,
-		toApiKeyCredential: params.toApiKeyCredential
-	});
-}
-//#endregion
-//#region src/commands/onboard-non-interactive/local/auth-choice.ts
-async function applyNonInteractiveAuthChoice(params) {
-	const { opts, runtime, baseConfig } = params;
-	const authChoice = normalizeApiKeyTokenProviderAuthChoice({
-		authChoice: params.authChoice,
-		tokenProvider: opts.tokenProvider,
-		config: params.nextConfig,
-		env: process.env
-	});
-	let nextConfig = params.nextConfig;
-	const requestedSecretInputMode = normalizeSecretInputModeInput(opts.secretInputMode);
-	if (opts.secretInputMode && !requestedSecretInputMode) {
-		runtime.error("Invalid --secret-input-mode. Use \"plaintext\" or \"ref\".");
-		runtime.exit(1);
-		return null;
-	}
-	const apiKeyStorageOptions = requestedSecretInputMode ? { secretInputMode: requestedSecretInputMode } : void 0;
-	const toStoredSecretInput = (resolved) => {
-		if (requestedSecretInputMode !== "ref") return resolved.key;
-		if (resolved.source !== "env") return resolved.key;
-		if (!resolved.envVarName) {
-			runtime.error([`Unable to determine which environment variable to store as a ref for provider "${authChoice}".`, "Set an explicit provider env var and retry, or use --secret-input-mode plaintext."].join("\n"));
-			runtime.exit(1);
-			return null;
-		}
-		return {
-			source: "env",
-			provider: resolveDefaultSecretProviderAlias(baseConfig, "env", { preferFirstProviderForSource: true }),
-			id: resolved.envVarName
-		};
-	};
-	const resolveApiKey = (input) => resolveNonInteractiveApiKey({
-		...input,
-		secretInputMode: requestedSecretInputMode
-	});
-	const toApiKeyCredential = (params) => {
-		if (requestedSecretInputMode === "ref" && params.resolved.source === "env") {
-			if (!params.resolved.envVarName) {
-				runtime.error([`--secret-input-mode ref requires an explicit environment variable for provider "${params.provider}".`, "Set the provider API key env var and retry, or use --secret-input-mode plaintext."].join("\n"));
-				runtime.exit(1);
-				return null;
-			}
-			return {
-				type: "api_key",
-				provider: params.provider,
-				keyRef: {
-					source: "env",
-					provider: resolveDefaultSecretProviderAlias(baseConfig, "env", { preferFirstProviderForSource: true }),
-					id: params.resolved.envVarName
-				},
-				...params.email ? { email: params.email } : {},
-				...params.metadata ? { metadata: params.metadata } : {}
-			};
-		}
-		return {
-			type: "api_key",
-			provider: params.provider,
-			key: params.resolved.key,
-			...params.email ? { email: params.email } : {},
-			...params.metadata ? { metadata: params.metadata } : {}
-		};
-	};
-	const maybeSetResolvedApiKey = async (resolved, setter) => {
-		if (resolved.source === "profile") return true;
-		const stored = toStoredSecretInput(resolved);
-		if (!stored) return false;
-		await setter(stored);
-		return true;
-	};
-	if (authChoice === "claude-cli" || authChoice === "codex-cli") {
-		runtime.error([`Auth choice "${authChoice}" is deprecated.`, "Use \"--auth-choice token\" (Anthropic setup-token) or \"--auth-choice openai-codex\"."].join("\n"));
-		runtime.exit(1);
-		return null;
-	}
-	if (authChoice === "setup-token") {
-		runtime.error(["Auth choice \"setup-token\" requires interactive mode.", "Use \"--auth-choice token\" with --token and --token-provider anthropic."].join("\n"));
-		runtime.exit(1);
-		return null;
-	}
-	const pluginProviderChoice = await applyNonInteractivePluginProviderChoice({
-		nextConfig,
-		authChoice,
-		opts,
-		runtime,
-		baseConfig,
-		resolveApiKey: (input) => resolveApiKey({
-			...input,
-			cfg: baseConfig,
-			runtime
-		}),
-		toApiKeyCredential
-	});
-	if (pluginProviderChoice !== void 0) return pluginProviderChoice;
-	const simpleApiKeyChoice = await applySimpleNonInteractiveApiKeyChoice({
-		authChoice,
-		nextConfig,
-		baseConfig,
-		opts,
-		runtime,
-		apiKeyStorageOptions,
-		resolveApiKey,
-		maybeSetResolvedApiKey
-	});
-	if (simpleApiKeyChoice !== void 0) return simpleApiKeyChoice;
-	if (authChoice === "cloudflare-ai-gateway-api-key") {
-		const accountId = opts.cloudflareAiGatewayAccountId?.trim() ?? "";
-		const gatewayId = opts.cloudflareAiGatewayGatewayId?.trim() ?? "";
-		if (!accountId || !gatewayId) {
-			runtime.error(["Auth choice \"cloudflare-ai-gateway-api-key\" requires Account ID and Gateway ID.", "Use --cloudflare-ai-gateway-account-id and --cloudflare-ai-gateway-gateway-id."].join("\n"));
-			runtime.exit(1);
-			return null;
-		}
-		const resolved = await resolveApiKey({
-			provider: "cloudflare-ai-gateway",
-			cfg: baseConfig,
-			flagValue: opts.cloudflareAiGatewayApiKey,
-			flagName: "--cloudflare-ai-gateway-api-key",
-			envVar: "CLOUDFLARE_AI_GATEWAY_API_KEY",
-			runtime
-		});
-		if (!resolved) return null;
-		if (resolved.source !== "profile") {
-			const stored = toStoredSecretInput(resolved);
-			if (!stored) return null;
-			await setCloudflareAiGatewayConfig(accountId, gatewayId, stored, void 0, apiKeyStorageOptions);
-		}
-		nextConfig = applyAuthProfileConfig(nextConfig, {
-			profileId: "cloudflare-ai-gateway:default",
-			provider: "cloudflare-ai-gateway",
-			mode: "api_key"
-		});
-		return applyCloudflareAiGatewayConfig(nextConfig, {
-			accountId,
-			gatewayId
-		});
-	}
-	const REMOVED_MINIMAX_CHOICES = {
-		minimax: "minimax-global-api",
-		"minimax-api": "minimax-global-api",
-		"minimax-cloud": "minimax-global-api",
-		"minimax-api-lightning": "minimax-global-api",
-		"minimax-api-key-cn": "minimax-cn-api"
-	};
-	if (Object.prototype.hasOwnProperty.call(REMOVED_MINIMAX_CHOICES, authChoice)) {
-		const replacement = REMOVED_MINIMAX_CHOICES[authChoice];
-		runtime.error(`"${authChoice}" is no longer supported. Use --auth-choice ${replacement} instead.`);
-		runtime.exit(1);
-		return null;
-	}
-	if (authChoice === "custom-api-key") try {
-		const customAuth = parseNonInteractiveCustomApiFlags({
-			baseUrl: opts.customBaseUrl,
-			modelId: opts.customModelId,
-			compatibility: opts.customCompatibility,
-			apiKey: opts.customApiKey,
-			providerId: opts.customProviderId
-		});
-		const resolvedCustomApiKey = await resolveApiKey({
-			provider: resolveCustomProviderId({
-				config: nextConfig,
-				baseUrl: customAuth.baseUrl,
-				providerId: customAuth.providerId
-			}).providerId,
-			cfg: baseConfig,
-			flagValue: customAuth.apiKey,
-			flagName: "--custom-api-key",
-			envVar: "CUSTOM_API_KEY",
-			envVarName: "CUSTOM_API_KEY",
-			runtime,
-			required: false
-		});
-		let customApiKeyInput;
-		if (resolvedCustomApiKey) if (requestedSecretInputMode === "ref") {
-			const stored = toStoredSecretInput(resolvedCustomApiKey);
-			if (!stored) return null;
-			customApiKeyInput = stored;
-		} else customApiKeyInput = resolvedCustomApiKey.key;
-		const result = applyCustomApiConfig({
-			config: nextConfig,
-			baseUrl: customAuth.baseUrl,
-			modelId: customAuth.modelId,
-			compatibility: customAuth.compatibility,
-			apiKey: customApiKeyInput,
-			providerId: customAuth.providerId
-		});
-		if (result.providerIdRenamedFrom && result.providerId) runtime.log(`Custom provider ID "${result.providerIdRenamedFrom}" already exists for a different base URL. Using "${result.providerId}".`);
-		return result.config;
-	} catch (err) {
-		if (err instanceof CustomApiError) {
-			switch (err.code) {
-				case "missing_required":
-				case "invalid_compatibility":
-					runtime.error(err.message);
-					break;
-				default:
-					runtime.error(`Invalid custom provider config: ${err.message}`);
-					break;
-			}
-			runtime.exit(1);
-			return null;
-		}
-		const reason = err instanceof Error ? err.message : String(err);
-		runtime.error(`Invalid custom provider config: ${reason}`);
-		runtime.exit(1);
-		return null;
-	}
-	if (authChoice === "oauth" || authChoice === "chutes" || authChoice === "qwen-portal" || authChoice === "minimax-global-oauth" || authChoice === "minimax-cn-oauth") {
-		runtime.error("OAuth requires interactive mode.");
-		runtime.exit(1);
-		return null;
-	}
-	return nextConfig;
-}
-//#endregion
-export { applyNonInteractiveAuthChoice };

package/dist/auth-choice-options-BIAmAiCe.js

@@ -1,123 +0,0 @@
-import { r as resolveManifestProviderAuthChoices } from "./provider-auth-choices-Cnuf1t9V.js";
-import { r as resolveProviderWizardOptions } from "./provider-wizard-DCPdKUvb.js";
-import { t as AUTH_CHOICE_LEGACY_ALIASES_FOR_CLI } from "./auth-choice-legacy-UbGKuavg.js";
-//#region src/commands/auth-choice-options.static.ts
-const CORE_AUTH_CHOICE_OPTIONS = [
-	{
-		value: "chutes",
-		label: "Chutes (OAuth)",
-		groupId: "chutes",
-		groupLabel: "Chutes",
-		groupHint: "OAuth"
-	},
-	{
-		value: "litellm-api-key",
-		label: "LiteLLM API key",
-		hint: "Unified gateway for 100+ LLM providers",
-		groupId: "litellm",
-		groupLabel: "LiteLLM",
-		groupHint: "Unified LLM gateway (100+ providers)"
-	},
-	{
-		value: "custom-api-key",
-		label: "Custom Provider",
-		hint: "Any OpenAI or Anthropic compatible endpoint",
-		groupId: "custom",
-		groupLabel: "Custom Provider",
-		groupHint: "Any OpenAI or Anthropic compatible endpoint"
-	}
-];
-function formatStaticAuthChoiceChoicesForCli(params) {
-	const includeSkip = params?.includeSkip ?? true;
-	const includeLegacyAliases = params?.includeLegacyAliases ?? false;
-	const values = CORE_AUTH_CHOICE_OPTIONS.map((opt) => opt.value);
-	if (includeSkip) values.push("skip");
-	if (includeLegacyAliases) values.push(...AUTH_CHOICE_LEGACY_ALIASES_FOR_CLI);
-	return values.join("|");
-}
-//#endregion
-//#region src/commands/auth-choice-options.ts
-function compareOptionLabels(a, b) {
-	return a.label.localeCompare(b.label);
-}
-function compareGroupLabels(a, b) {
-	return a.label.localeCompare(b.label);
-}
-function resolveManifestProviderChoiceOptions(params) {
-	return resolveManifestProviderAuthChoices(params ?? {}).map((choice) => ({
-		value: choice.choiceId,
-		label: choice.choiceLabel,
-		...choice.choiceHint ? { hint: choice.choiceHint } : {},
-		...choice.groupId ? { groupId: choice.groupId } : {},
-		...choice.groupLabel ? { groupLabel: choice.groupLabel } : {},
-		...choice.groupHint ? { groupHint: choice.groupHint } : {}
-	}));
-}
-function resolveRuntimeFallbackProviderChoiceOptions(params) {
-	return resolveProviderWizardOptions(params ?? {}).map((option) => ({
-		value: option.value,
-		label: option.label,
-		...option.hint ? { hint: option.hint } : {},
-		groupId: option.groupId,
-		groupLabel: option.groupLabel,
-		...option.groupHint ? { groupHint: option.groupHint } : {}
-	}));
-}
-function formatAuthChoiceChoicesForCli(params) {
-	const values = [...formatStaticAuthChoiceChoicesForCli(params).split("|"), ...resolveManifestProviderChoiceOptions(params).map((option) => option.value)];
-	return [...new Set(values)].join("|");
-}
-function buildAuthChoiceOptions(params) {
-	params.store;
-	const optionByValue = /* @__PURE__ */ new Map();
-	for (const option of CORE_AUTH_CHOICE_OPTIONS) optionByValue.set(option.value, option);
-	for (const option of resolveManifestProviderChoiceOptions({
-		config: params.config,
-		workspaceDir: params.workspaceDir,
-		env: params.env
-	})) optionByValue.set(option.value, option);
-	for (const option of resolveRuntimeFallbackProviderChoiceOptions({
-		config: params.config,
-		workspaceDir: params.workspaceDir,
-		env: params.env
-	})) if (!optionByValue.has(option.value)) optionByValue.set(option.value, option);
-	const options = Array.from(optionByValue.values()).toSorted(compareOptionLabels);
-	if (params.includeSkip) options.push({
-		value: "skip",
-		label: "Skip for now"
-	});
-	return options;
-}
-function buildAuthChoiceGroups(params) {
-	const options = buildAuthChoiceOptions({
-		...params,
-		includeSkip: false
-	});
-	const groupsById = /* @__PURE__ */ new Map();
-	for (const option of options) {
-		if (!option.groupId || !option.groupLabel) continue;
-		const existing = groupsById.get(option.groupId);
-		if (existing) {
-			existing.options.push(option);
-			continue;
-		}
-		groupsById.set(option.groupId, {
-			value: option.groupId,
-			label: option.groupLabel,
-			...option.groupHint ? { hint: option.groupHint } : {},
-			options: [option]
-		});
-	}
-	return {
-		groups: Array.from(groupsById.values()).map((group) => ({
-			...group,
-			options: [...group.options].toSorted(compareOptionLabels)
-		})).toSorted(compareGroupLabels),
-		skipOption: params.includeSkip ? {
-			value: "skip",
-			label: "Skip for now"
-		} : void 0
-	};
-}
-//#endregion
-export { formatAuthChoiceChoicesForCli as n, buildAuthChoiceGroups as t };