@stratusagent/cli 0.9.1 → 0.9.2

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { type JsonValue, type Session, type StratusEvent } from '@stratusagent/core';
-import { type CredentialProviderName, type RuntimeSelection, type RuntimeConfig, type StratusProviderName } from '@stratusagent/state';
+import { type CredentialProviderName, type RuntimeSelection, type RuntimeConfig, type StratusConfigFile, type StratusProviderName } from '@stratusagent/state';
 import { type ServiceRunner } from './service.ts';
 export { installService, launchdPlist, readServiceCommand, readServiceStatus, servicePlatform, serviceUnitPath, startService, stopService, systemdUnit, uninstallService, SERVICE_LABEL, type ServiceRunner, type ServiceStatus, } from './service.ts';
 export { createLogWriter, currentLogPosition, truncateRedirectLogs, formatLogRecord, parseLogLines, readRecentRecords, tailLog, type LogRecord, } from './logs.ts';
@@ -207,7 +207,7 @@ export interface ParsedHelpCommand {
     command: 'help';
 }
 export type ParsedCommand = ParsedRunCommand | ParsedChatCommand | ParsedDashboardCommand | ParsedSetupCommand | ParsedAgentNewCommand | ParsedAgentsCommand | ParsedSkillAddCommand | ParsedSkillsCommand | ParsedSchedulesCommand | ParsedDoctorCommand | ParsedLogsCommand | ParsedUpdateCommand | ParsedServiceCommand | ParsedServeCommand | ParsedHelpCommand;
-export declare const CLI_VERSION = "0.9.1";
+export declare const CLI_VERSION = "0.9.2";
 /**
  * The range every package declares in its `engines` field. Two floors, not
  * one: `node:sqlite` was unflagged in 22.13.0 on the LTS line and in 23.4.0
@@ -229,7 +229,7 @@ export declare const SUPPORTED_NODE_RANGE = ">=22.13 <23 || >=23.4";
  * string is a bad reason to refuse to run.
  */
 export declare const unsupportedNodeMessage: (version: string) => string | undefined;
-declare const HELP_TEXT = "Stratus Agent CLI\n\nUsage:\n  stratus setup\n  stratus chat\n  stratus chat --soul ./examples/souls/ava.md\n  stratus run --prompt \"Use the demo tool\"\n  stratus run \"Say hello\"\n  ANTHROPIC_API_KEY=... stratus run --provider anthropic \"Say hello\"\n  stratus run --soul ./examples/souls/ava.md \"Say hello\"\n  echo \"Use the echo tool\" | stratus run --stdin\n  STRATUS_PROVIDER=openai OPENAI_API_KEY=... stratus run \"Say hello\"\n  stratus run --config ./stratus.config.json --provider openai \"Say hello\"\n  stratus agents\n  stratus agents --gateway http://127.0.0.1:4123\n  stratus skill add stratuslabs/skill-code-review\n  stratus skill add ./my-skills --skill code-review --agent ava\n  stratus skills\n  stratus schedules\n  stratus schedules cancel <id>\n  stratus doctor\n  stratus update\n  stratus update --check\n  stratus service install\n  stratus service status\n  stratus logs -f\n  stratus logs --agent ava -n 200\n  stratus dashboard\n  stratus dashboard --port 4123 --host 0.0.0.0 --no-open\n\nCommands:\n  setup            Menu-driven onboarding: pick a provider, sign in (Claude\n                   subscription or API key), create your agent, connect it to\n                   Slack, and test it \u2014 settings go to ~/.stratus/config.json,\n                   sign-ins and channel tokens to ~/.stratus/credentials.json\n                   (0600). Save & finish offers to install any optional\n                   package your answers imply (the Slack channel, the control\n                   API and dashboard) before it starts the daemon\n  chat             Talk with your agent \u2014 the conversation persists across turns\n                   and remembered facts accumulate; /exit or Ctrl+C to leave\n  run              Execute one local Stratus Agent session\n  serve            Run stratusd, the always-on gateway: durable sessions, the\n                   whole roster live at once (each agent on its own provider),\n                   delegation, and a watchdog \u2014 Ctrl+C / SIGTERM drains cleanly\n                   (--idle-timeout <seconds>, --approvals <headless|remote>,\n                   --no-events, --no-log-file, --config <path>); everything it\n                   says is also written to ~/.stratus/logs, which\n                   \"stratus logs\" reads. With @stratusagent/control-api\n                   installed it also serves the HTTP + WebSocket control API\n                   on 127.0.0.1:4123 (--no-api, --api-host, --api-port, or\n                   the config file's \"api\" block)\n  service          Keep stratusd running under launchd (macOS) or systemd\n                   (Linux): install, uninstall, status, start, stop.\n                   Installing starts it now and at every login\n                   (--no-login installs without the login trigger,\n                   --config <path> pins the daemon to one config file)\n  logs             Read the daemon's log from any terminal: -f to follow,\n                   -n <count> for backlog, --agent / --session to filter,\n                   --format json for the raw records\n  skill add        Install skills from a GitHub repo (owner/repo or URL) or a\n                   local path into ~/.stratus/skills \u2014 whole directories, one\n                   per skill; works with skills published for other agents\n                   (skills.sh-style repos). Installed is not enabled: a soul\n                   opts in via skills:, or pass --agent <id> to enable now.\n                   --skill <id> picks from a multi-skill repo (repeatable),\n                   --force replaces an already-installed id\n  skills           List installed skills and which agents enable each\n                   (also: stratus skill list)\n  schedules        List every schedule the fleet has set \u2014 cadence, prompt,\n                   pre-authorized destination, next firing \u2014 straight from the\n                   daemon's database (--format json). \"stratus schedules\n                   cancel <id>\" stops the next firing and revokes the\n                   destination that was approved with it\n                   (also: stratus schedule list / schedule cancel <id>)\n  agent new        Create an agent identity (generates a human-ish name + avatar theme)\n  agents           List your agents: who they are, where their souls live, what\n                   they run on, what they remember (also: stratus agent list).\n                   --gateway <url> asks a running daemon instead of resolving\n                   locally, authenticating with ~/.stratus/gateway-token\n                   (override with --token or STRATUS_GATEWAY_TOKEN)\n  doctor           Show what a run would use right now \u2014 provider, model, soul \u2014\n                   and which file or environment variable decided each, then\n                   flag anything that would surprise you (--format json)\n  update           The whole upgrade dance, in the order that cannot lose\n                   data: stop stratusd, upgrade the package from npm, run\n                   pending state migrations, rewrite the service unit with\n                   current node/entrypoint paths, restart. --check reports\n                   what it would do without doing any of it (exits 1 when\n                   something is actionable). Works offline too \u2014 an\n                   unreachable npm skips the upgrade but still migrates and\n                   repairs the unit\n  dashboard        Open the web dashboard: finds a running daemon (or starts one),\n                   mints a single-use sign-in link, and opens your browser at it.\n                   Needs @stratusagent/control-api and @stratusagent/dashboard\n  help             Show this help message\n\nAgent options:\n  --name           Agent name (omit to have one generated)\n  --instructions   The agent's persona/instructions\n  --format         Output format for agent new: text, json, or soul (a ready-to-edit soul file)\n\nOptions:\n  --prompt, -p     Prompt to send to the local agent loop\n  --stdin          Read the prompt from stdin\n  --provider       Provider to use: anthropic, openai, or demo\n  --model          Model name for real providers (anthropic default: claude-opus-5, openai default: gpt-4.1-mini)\n  --base-url       Override the provider API base URL\n  --soul           Run as the agent defined by a soul file (markdown + frontmatter, see examples/souls)\n  --config         Config file path (run: load settings from it, setup: write it)\n  --format         Output format: text or json (default: text)\n  --no-events      Hide event-by-event progress lines in text mode\n  --approvals      run/chat: tool approval mode \u2014 always, ask, or never (default: always)\n                   serve: how the daemon reaches a human \u2014 headless (refuse every\n                   gated call) or remote (ask in Slack). Default headless, or\n                   the config file's \"approvals.mode\"\n  --max-turns      Maximum provider turns per run (default: 8)\n  --port           dashboard: port for a daemon it starts (default: 4123)\n  --host           dashboard: host for a daemon it starts (default: 127.0.0.1)\n  --no-open        Do not open the browser automatically\n  --gateway        agents: read the roster from a running daemon's control API\n  --token          Bearer token for --gateway (default: ~/.stratus/gateway-token)\n  --no-api         serve: do not serve the control API\n  --api-host       serve: control API interface (default: 127.0.0.1)\n  --api-port       serve: control API port (default: 4123, 0 for any free port)\n  --help, -h       Show this help message\n\nConfig file:\n  The CLI looks for ./stratus.config.json first, then a path from --config / STRATUS_CONFIG,\n  then the global ~/.stratus/config.json written by `stratus setup`.\n  A \"soul\" key (or STRATUS_SOUL) points at a soul file so every run uses that agent.\n\nPlugins (tools):\n  Capability is optional: install a package, then list it under \"plugins\" in a\n  TRUSTED config (--config, STRATUS_CONFIG, or ~/.stratus/config.json), keyed by\n  package name. A plugin runs inside this process, so an auto-discovered\n  project-local stratus.config.json may not enable one.\n\n    \"plugins\": {\n      \"@stratusagent/tool-fs\": { \"enabled\": true, \"roots\": [\"~/notes\"],\n                                 \"agents\": { \"ava\": { \"roots\": [\"~/work/ava\"] } } },\n      \"@stratusagent/tool-web\": { \"enabled\": true }\n    }\n\n  Available: @stratusagent/tool-fs (fs.read/list/search/write),\n  @stratusagent/tool-shell (shell.run), @stratusagent/tool-web (web.fetch),\n  @stratusagent/tool-browser (browser.goto/read/screenshot/act).\n  Installing one grants no agent anything \u2014 each soul lists what it may call.\n\nSoul files:\n  A soul file is markdown with frontmatter (name, provider, model, tools, skills, credentials)\n  followed by the agent's persona in prose. See examples/souls/ava.md.\n  \"tools\" takes exact names or a whole toolset: tools: [fs.read, fs.search] or\n  tools: [fs.*]. Omitted means every registered tool.\n  \"skills\" is the same allowlist shape over installed skills (see stratus\n  skills), except omitted means none \u2014 a skill is enabled per agent, never\n  by being installed.\n";
+declare const HELP_TEXT = "Stratus Agent CLI\n\nUsage:\n  stratus setup\n  stratus chat\n  stratus chat --soul ./examples/souls/ava.md\n  stratus run --prompt \"Use the demo tool\"\n  stratus run \"Say hello\"\n  ANTHROPIC_API_KEY=... stratus run --provider anthropic \"Say hello\"\n  stratus run --soul ./examples/souls/ava.md \"Say hello\"\n  echo \"Use the echo tool\" | stratus run --stdin\n  STRATUS_PROVIDER=openai OPENAI_API_KEY=... stratus run \"Say hello\"\n  stratus run --config ./stratus.config.json --provider openai \"Say hello\"\n  stratus agents\n  stratus agents --gateway http://127.0.0.1:4123\n  stratus skill add stratuslabs/skill-code-review\n  stratus skill add ./my-skills --skill code-review --agent ava\n  stratus skills\n  stratus schedules\n  stratus schedules cancel <id>\n  stratus doctor\n  stratus update\n  stratus update --check\n  stratus service install\n  stratus service status\n  stratus logs -f\n  stratus logs --agent ava -n 200\n  stratus dashboard\n  stratus dashboard --port 4123 --host 0.0.0.0 --no-open\n\nCommands:\n  setup            Menu-driven onboarding: pick a provider, sign in (Claude\n                   subscription or API key), create your agent, connect it to\n                   Slack, and test it \u2014 settings go to ~/.stratus/config.json,\n                   sign-ins and channel tokens to ~/.stratus/credentials.json\n                   (0600). Save & finish offers to install any optional\n                   package your answers imply (the Slack channel, the control\n                   API and dashboard) before it starts the daemon\n  chat             Talk with your agent \u2014 the conversation persists across turns\n                   and remembered facts accumulate; /exit or Ctrl+C to leave\n  run              Execute one local Stratus Agent session\n  serve            Run stratusd, the always-on gateway: durable sessions, the\n                   whole roster live at once (each agent on its own provider),\n                   delegation, and a watchdog \u2014 Ctrl+C / SIGTERM drains cleanly\n                   (--idle-timeout <seconds>, --approvals <headless|remote>,\n                   --no-events, --no-log-file, --config <path>); everything it\n                   says is also written to ~/.stratus/logs, which\n                   \"stratus logs\" reads. With @stratusagent/control-api\n                   installed it also serves the HTTP + WebSocket control API\n                   on 127.0.0.1:4123 (--no-api, --api-host, --api-port, or\n                   the config file's \"api\" block)\n  service          Keep stratusd running under launchd (macOS) or systemd\n                   (Linux): install, uninstall, status, start, stop.\n                   Installing starts it now and at every login\n                   (--no-login installs without the login trigger,\n                   --config <path> pins the daemon to one config file)\n  logs             Read the daemon's log from any terminal: -f to follow,\n                   -n <count> for backlog, --agent / --session to filter,\n                   --format json for the raw records\n  skill add        Install skills from a GitHub repo (owner/repo or URL) or a\n                   local path into ~/.stratus/skills \u2014 whole directories, one\n                   per skill; works with skills published for other agents\n                   (skills.sh-style repos). Installed is not enabled: a soul\n                   opts in via skills:, or pass --agent <id> to enable now.\n                   --skill <id> picks from a multi-skill repo (repeatable),\n                   --force replaces an already-installed id\n  skills           List installed skills and which agents enable each\n                   (also: stratus skill list)\n  schedules        List every schedule the fleet has set \u2014 cadence, prompt,\n                   pre-authorized destination, next firing \u2014 straight from the\n                   daemon's database (--format json). \"stratus schedules\n                   cancel <id>\" stops the next firing and revokes the\n                   destination that was approved with it\n                   (also: stratus schedule list / schedule cancel <id>)\n  agent new        Create an agent identity (generates a human-ish name + avatar theme)\n  agents           List your agents: who they are, where their souls live, what\n                   they run on, what they remember (also: stratus agent list).\n                   --gateway <url> asks a running daemon instead of resolving\n                   locally, authenticating with ~/.stratus/gateway-token\n                   (override with --token or STRATUS_GATEWAY_TOKEN)\n  doctor           Show what a run would use right now \u2014 provider, model, soul \u2014\n                   and which file or environment variable decided each, then\n                   flag anything that would surprise you (--format json)\n  update           The whole upgrade dance, in the order that cannot lose\n                   data: stop stratusd, upgrade the package from npm, run\n                   pending state migrations, rewrite the service unit with\n                   current node/entrypoint paths, restart. --check reports\n                   what it would do without doing any of it (exits 1 when\n                   something is actionable). Works offline too \u2014 an\n                   unreachable npm skips the upgrade but still migrates and\n                   repairs the unit\n  dashboard        Open the web dashboard: finds a running daemon (or starts one),\n                   mints a single-use sign-in link, and opens your browser at it.\n                   Needs @stratusagent/control-api and @stratusagent/dashboard\n  help             Show this help message\n\nAgent options:\n  --name           Agent name (omit to have one generated)\n  --instructions   The agent's persona/instructions\n  --format         Output format for agent new: text, json, or soul (a ready-to-edit soul file)\n\nOptions:\n  --prompt, -p     Prompt to send to the local agent loop\n  --stdin          Read the prompt from stdin\n  --provider       Provider to use: anthropic, openai, codex, or demo\n  --model          Model name for real providers (anthropic default: claude-opus-5, openai default: gpt-4.1-mini, codex default: gpt-5.5)\n  --base-url       Override the provider API base URL\n  --soul           Run as the agent defined by a soul file (markdown + frontmatter, see examples/souls)\n  --config         Config file path (run: load settings from it, setup: write it)\n  --format         Output format: text or json (default: text)\n  --no-events      Hide event-by-event progress lines in text mode\n  --approvals      run/chat: tool approval mode \u2014 always, ask, or never (default: always)\n                   serve: how the daemon reaches a human \u2014 headless (refuse every\n                   gated call) or remote (ask in Slack). Default headless, or\n                   the config file's \"approvals.mode\"\n  --max-turns      Maximum provider turns per run (default: 8)\n  --port           dashboard: port for a daemon it starts (default: 4123)\n  --host           dashboard: host for a daemon it starts (default: 127.0.0.1)\n  --no-open        Do not open the browser automatically\n  --gateway        agents: read the roster from a running daemon's control API\n  --token          Bearer token for --gateway (default: ~/.stratus/gateway-token)\n  --no-api         serve: do not serve the control API\n  --api-host       serve: control API interface (default: 127.0.0.1)\n  --api-port       serve: control API port (default: 4123, 0 for any free port)\n  --help, -h       Show this help message\n\nConfig file:\n  The CLI looks for ./stratus.config.json first, then a path from --config / STRATUS_CONFIG,\n  then the global ~/.stratus/config.json written by `stratus setup`.\n  A \"soul\" key (or STRATUS_SOUL) points at a soul file so every run uses that agent.\n\nPlugins (tools):\n  Capability is optional: install a package, then list it under \"plugins\" in a\n  TRUSTED config (--config, STRATUS_CONFIG, or ~/.stratus/config.json), keyed by\n  package name. A plugin runs inside this process, so an auto-discovered\n  project-local stratus.config.json may not enable one.\n\n    \"plugins\": {\n      \"@stratusagent/tool-fs\": { \"enabled\": true, \"roots\": [\"~/notes\"],\n                                 \"agents\": { \"ava\": { \"roots\": [\"~/work/ava\"] } } },\n      \"@stratusagent/tool-web\": { \"enabled\": true }\n    }\n\n  Available: @stratusagent/tool-fs (fs.read/list/search/write),\n  @stratusagent/tool-shell (shell.run), @stratusagent/tool-web (web.fetch),\n  @stratusagent/tool-browser (browser.goto/read/screenshot/act).\n  Installing one grants no agent anything \u2014 each soul lists what it may call.\n\nSoul files:\n  A soul file is markdown with frontmatter (name, provider, model, tools, skills, credentials)\n  followed by the agent's persona in prose. See examples/souls/ava.md.\n  \"tools\" takes exact names or a whole toolset: tools: [fs.read, fs.search] or\n  tools: [fs.*]. Omitted means every registered tool.\n  \"skills\" is the same allowlist shape over installed skills (see stratus\n  skills), except omitted means none \u2014 a skill is enabled per agent, never\n  by being installed.\n";
 declare const stringifyValue: (value: JsonValue) => string;
 export declare const parseCommand: (argv: string[], env?: CliEnvironment) => ParsedCommand;
 export declare const formatEvent: (event: StratusEvent) => string | null;
@@ -336,6 +336,23 @@ export declare const runSkillAdd: (command: ParsedSkillAddCommand, streams: CliS
  */
 export declare const runSchedules: (command: ParsedSchedulesCommand, streams: CliStreams, env?: CliEnvironment) => Promise<number>;
 export declare const runSkills: (streams: CliStreams, env?: CliEnvironment) => Promise<number>;
+/**
+ * The provider/model a newly created soul pins. Frontmatter pins what a run
+ * from this directory would actually use: env vars outrank the active
+ * config file (project-local or explicit first, global otherwise), and no
+ * provider anywhere falls back to demo — the exact precedence of stratus
+ * run. Demo produces no model at all: the soul keeps following the
+ * machine's configuration instead of demanding credentials nothing has
+ * signed in for. The active config's model was written for the provider
+ * named in that config, so it only travels into the soul when they still
+ * match; otherwise the selected provider's own default model stands in.
+ *
+ * Exported for tests: the interactive path that consumes it needs a TTY.
+ */
+export declare const soulPinForNewAgent: (activeConfig: StratusConfigFile, processEnv: NodeJS.ProcessEnv) => {
+    provider: StratusProviderName;
+    model?: string;
+};
 export declare const runAgentNew: (command: ParsedAgentNewCommand, streams: CliStreams, env?: CliEnvironment) => Promise<number>;
 /**
  * `stratus dashboard` — open the web UI against a running daemon, starting

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAaL,KAAK,SAAS,EAGd,KAAK,OAAO,EACZ,KAAK,YAAY,EAClB,MAAM,oBAAoB,CAAC;AAgD5B,OAAO,EA4DL,KAAK,sBAAsB,EAI3B,KAAK,gBAAgB,EAErB,KAAK,aAAa,EAGlB,KAAK,mBAAmB,EACzB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAUL,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,YAAY,EACZ,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,aAAa,GACnB,MAAM,cAAc,CAAC;AAatB,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,OAAO,EACP,KAAK,SAAS,GACf,MAAM,WAAW,CAAC;AAKnB,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE3E,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,IAAI,CAAC,OAAO,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,EAAE,IAAI,CAAC,OAAO,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACrD,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,gEAAgE;IAChE,cAAc,CAAC,EAAE,WAAW,CAAC;IAC7B,4EAA4E;IAC5E,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,gGAAgG;IAChG,eAAe,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAClC,mHAAmH;IACnH,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,sFAAsF;IACtF,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;CAC/C;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,2CAA2C;AAC3C,MAAM,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAErF,gGAAgG;AAChG,MAAM,MAAM,qBAAqB,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAEzF,0EAA0E;AAC1E,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAgChD;;;;;GAKG;AACH,eAAO,MAAM,eAAe,GAAI,GAAG,MAAM,EAAE,GAAG,MAAM,KAAG,MAetD,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,aAAa,GAAI,UAAU,MAAM,CAAC,QAAQ,KAAG,OAA+B,CAAC;AAiC1F,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,GAAG,CAAC,EAAE,cAAc,CAAC;CACtB;AAED,MAAM,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAClD,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAC;AAEzD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,KAAK,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,eAAe,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,WAAW,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;OASG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,WAAW,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,eAAe,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,WAAW,CAAC;IACrB,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,QAAQ,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,QAAQ,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC1B,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,QAAQ,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,QAAQ,CAAC;IAClB,mGAAmG;IACnG,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,SAAS,CAAC;IACnB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;IAC9D,oEAAoE;IACpE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,MAAM,EAAE,OAAO,CAAC;IAChB,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEtD,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB,qEAAqE;IACrE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,6EAA6E;IAC7E,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,aAAa,GACrB,gBAAgB,GAChB,iBAAiB,GACjB,sBAAsB,GACtB,kBAAkB,GAClB,qBAAqB,GACrB,mBAAmB,GACnB,qBAAqB,GACrB,mBAAmB,GACnB,sBAAsB,GACtB,mBAAmB,GACnB,iBAAiB,GACjB,mBAAmB,GACnB,oBAAoB,GACpB,kBAAkB,GAClB,iBAAiB,CAAC;AAItB,eAAO,MAAM,WAAW,UAAU,CAAC;AAInC;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,0BAA0B,CAAC;AAE5D;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,GAAI,SAAS,MAAM,KAAG,MAAM,GAAG,SAgBjE,CAAC;AAEF,QAAA,MAAM,SAAS,4mSA4Jd,CAAC;AAMF,QAAA,MAAM,cAAc,GAAI,OAAO,SAAS,KAAG,MAM1C,CAAC;AAwBF,eAAO,MAAM,YAAY,GAAI,MAAM,MAAM,EAAE,EAAE,MAAK,cAAmB,KAAG,aAirBvE,CAAC;AAEF,eAAO,MAAM,WAAW,GAAI,OAAO,YAAY,KAAG,MAAM,GAAG,IAyB1D,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,WAAW,GAAI,OAAO,YAAY,KAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAoC3E,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,GAC/B,SAAS,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,gBAAgB,CAAC,CAAC,EACnF,MAAK,cAAmB,KACvB,OAAO,CAAC,aAAa,CAA4C,CAAC;AAErE;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,GACnC,SAAS,aAAa,EACtB,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,IAAI,CA+Bd,CAAC;AAyNF,eAAO,MAAM,aAAa,GACxB,QAAQ,MAAM,EACd,SAAS,UAAU,EACnB,SAAS;IACP,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,aAAa,CAAC;IACvB,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,KACA,OAAO,CAAC,OAAO,CAcjB,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAI,SAAS,OAAO,EAAE,SAAS,UAAU,KAAG,IAkB3E,CAAC;AAmBF,eAAO,MAAM,OAAO,GAClB,SAAS,iBAAiB,EAC1B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAiNhB,CAAC;AAaF,eAAO,MAAM,eAAe,GAAU,KAAK,MAAM,KAAG,OAAO,CAAC,IAAI,CAa/D,CAAC;AA4dF,eAAO,MAAM,gBAAgB,GAAI,WAAW,MAAM,KAAG,MAsB1C,CAAC;AA4BZ,eAAO,MAAM,QAAQ,GACnB,SAAS,kBAAkB,EAC3B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CA01ChB,CAAC;AAgEF,eAAO,MAAM,SAAS,GACpB,SAAS,mBAAmB,EAC5B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CA+DhB,CAAC;AAEF,4DAA4D;AAC5D,UAAU,aAAa;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,EAAE,aAAa,CAAC;IACxB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,QAAQ,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,OAAO,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,sBAAsB,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrE,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAC9B,SAAS,mBAAmB,EAC5B,MAAM,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,EAC/B,MAAK,cAAmB,KACvB,OAAO,CAAC,YAAY,CAoTtB,CAAC;AAEF,eAAO,MAAM,SAAS,GACpB,SAAS,mBAAmB,EAC5B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAqEhB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,OAAO,GAClB,SAAS,iBAAiB,EAC1B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAkDhB,CAAC;AAsFF;;;;GAIG;AACH,eAAO,MAAM,UAAU,GACrB,SAAS,oBAAoB,EAC7B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAsFhB,CAAC;AAkWF,eAAO,MAAM,WAAW,GACtB,SAAS,qBAAqB,EAC9B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CA0FhB,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,GACvB,SAAS,sBAAsB,EAC/B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAuChB,CAAC;AAEF,eAAO,MAAM,SAAS,GACpB,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAgDhB,CAAC;AAEF,eAAO,MAAM,WAAW,GACtB,SAAS,qBAAqB,EAC9B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAgJhB,CAAC;AAqEF;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,GACvB,SAAS,sBAAsB,EAC/B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAmHhB,CAAC;AAEF,wDAAwD;AACxD,MAAM,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;AAwH7D;;;;GAIG;AACH,eAAO,MAAM,QAAQ,GACnB,SAAS,kBAAkB,EAC3B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAmXhB,CAAC;AAEF,eAAO,MAAM,MAAM,GAAU,wBAAuC,aAAa,KAAG,OAAO,CAAC,MAAM,CA4JjG,CAAC;AAEF,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAaL,KAAK,SAAS,EAGd,KAAK,OAAO,EACZ,KAAK,YAAY,EAClB,MAAM,oBAAoB,CAAC;AAiD5B,OAAO,EA6DL,KAAK,sBAAsB,EAI3B,KAAK,gBAAgB,EAErB,KAAK,aAAa,EAElB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACzB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAUL,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,YAAY,EACZ,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,aAAa,GACnB,MAAM,cAAc,CAAC;AAatB,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,OAAO,EACP,KAAK,SAAS,GACf,MAAM,WAAW,CAAC;AAKnB,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE3E,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,IAAI,CAAC,OAAO,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,EAAE,IAAI,CAAC,OAAO,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACrD,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,gEAAgE;IAChE,cAAc,CAAC,EAAE,WAAW,CAAC;IAC7B,4EAA4E;IAC5E,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,gGAAgG;IAChG,eAAe,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAClC,mHAAmH;IACnH,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,sFAAsF;IACtF,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;CAC/C;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,2CAA2C;AAC3C,MAAM,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAErF,gGAAgG;AAChG,MAAM,MAAM,qBAAqB,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAEzF,0EAA0E;AAC1E,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAgChD;;;;;GAKG;AACH,eAAO,MAAM,eAAe,GAAI,GAAG,MAAM,EAAE,GAAG,MAAM,KAAG,MAetD,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,aAAa,GAAI,UAAU,MAAM,CAAC,QAAQ,KAAG,OAA+B,CAAC;AAiC1F,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,GAAG,CAAC,EAAE,cAAc,CAAC;CACtB;AAED,MAAM,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAClD,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAC;AAEzD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,KAAK,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,eAAe,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,WAAW,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;OASG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,WAAW,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,eAAe,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,WAAW,CAAC;IACrB,yDAAyD;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,QAAQ,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,QAAQ,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC1B,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,QAAQ,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,QAAQ,CAAC;IAClB,mGAAmG;IACnG,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,SAAS,CAAC;IACnB,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;IAC9D,oEAAoE;IACpE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,MAAM,EAAE,OAAO,CAAC;IAChB,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEtD,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB,qEAAqE;IACrE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,6EAA6E;IAC7E,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,aAAa,GACrB,gBAAgB,GAChB,iBAAiB,GACjB,sBAAsB,GACtB,kBAAkB,GAClB,qBAAqB,GACrB,mBAAmB,GACnB,qBAAqB,GACrB,mBAAmB,GACnB,sBAAsB,GACtB,mBAAmB,GACnB,iBAAiB,GACjB,mBAAmB,GACnB,oBAAoB,GACpB,kBAAkB,GAClB,iBAAiB,CAAC;AAItB,eAAO,MAAM,WAAW,UAAU,CAAC;AAInC;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,0BAA0B,CAAC;AAE5D;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,sBAAsB,GAAI,SAAS,MAAM,KAAG,MAAM,GAAG,SAgBjE,CAAC;AAEF,QAAA,MAAM,SAAS,2oSA4Jd,CAAC;AAMF,QAAA,MAAM,cAAc,GAAI,OAAO,SAAS,KAAG,MAM1C,CAAC;AAwBF,eAAO,MAAM,YAAY,GAAI,MAAM,MAAM,EAAE,EAAE,MAAK,cAAmB,KAAG,aAirBvE,CAAC;AAEF,eAAO,MAAM,WAAW,GAAI,OAAO,YAAY,KAAG,MAAM,GAAG,IAyB1D,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,WAAW,GAAI,OAAO,YAAY,KAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAoC3E,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,GAC/B,SAAS,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,gBAAgB,CAAC,CAAC,EACnF,MAAK,cAAmB,KACvB,OAAO,CAAC,aAAa,CAA4C,CAAC;AAErE;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,GACnC,SAAS,aAAa,EACtB,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,IAAI,CA2Cd,CAAC;AAyNF,eAAO,MAAM,aAAa,GACxB,QAAQ,MAAM,EACd,SAAS,UAAU,EACnB,SAAS;IACP,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,aAAa,CAAC;IACvB,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,KACA,OAAO,CAAC,OAAO,CAcjB,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAAI,SAAS,OAAO,EAAE,SAAS,UAAU,KAAG,IAkB3E,CAAC;AAmBF,eAAO,MAAM,OAAO,GAClB,SAAS,iBAAiB,EAC1B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAiNhB,CAAC;AAaF,eAAO,MAAM,eAAe,GAAU,KAAK,MAAM,KAAG,OAAO,CAAC,IAAI,CAa/D,CAAC;AA4dF,eAAO,MAAM,gBAAgB,GAAI,WAAW,MAAM,KAAG,MAsB1C,CAAC;AA4BZ,eAAO,MAAM,QAAQ,GACnB,SAAS,kBAAkB,EAC3B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAy8ChB,CAAC;AAgEF,eAAO,MAAM,SAAS,GACpB,SAAS,mBAAmB,EAC5B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CA+DhB,CAAC;AAEF,4DAA4D;AAC5D,UAAU,aAAa;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,EAAE,aAAa,CAAC;IACxB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,QAAQ,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,OAAO,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,sBAAsB,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrE,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAC9B,SAAS,mBAAmB,EAC5B,MAAM,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,EAC/B,MAAK,cAAmB,KACvB,OAAO,CAAC,YAAY,CAsTtB,CAAC;AAEF,eAAO,MAAM,SAAS,GACpB,SAAS,mBAAmB,EAC5B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAqEhB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,OAAO,GAClB,SAAS,iBAAiB,EAC1B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAkDhB,CAAC;AAsFF;;;;GAIG;AACH,eAAO,MAAM,UAAU,GACrB,SAAS,oBAAoB,EAC7B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAsFhB,CAAC;AAkWF,eAAO,MAAM,WAAW,GACtB,SAAS,qBAAqB,EAC9B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CA0FhB,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,GACvB,SAAS,sBAAsB,EAC/B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAuChB,CAAC;AAEF,eAAO,MAAM,SAAS,GACpB,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAgDhB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,kBAAkB,GAC7B,cAAc,iBAAiB,EAC/B,YAAY,MAAM,CAAC,UAAU,KAC5B;IAAE,QAAQ,EAAE,mBAAmB,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAoBjD,CAAC;AAEF,eAAO,MAAM,WAAW,GACtB,SAAS,qBAAqB,EAC9B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAoIhB,CAAC;AAqEF;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,GACvB,SAAS,sBAAsB,EAC/B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAmHhB,CAAC;AAEF,wDAAwD;AACxD,MAAM,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;AAwH7D;;;;GAIG;AACH,eAAO,MAAM,QAAQ,GACnB,SAAS,kBAAkB,EAC3B,SAAS,UAAU,EACnB,MAAK,cAAmB,KACvB,OAAO,CAAC,MAAM,CAmXhB,CAAC;AAEF,eAAO,MAAM,MAAM,GAAU,wBAAuC,aAAa,KAAG,OAAO,CAAC,MAAM,CA4JjG,CAAC;AAEF,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC"}

package/dist/index.js

@@ -17,8 +17,9 @@ import { createLocalCommandExecutor, } from '@stratusagent/executor-local';
 import { loadPlugins } from '@stratusagent/plugins';
 import { createFileCommandWhitelist, createPermissionPolicy, describeCommandScope, } from '@stratusagent/permissions';
 import { DEFAULT_ANTHROPIC_MODEL, redactAnthropicRawTurns, } from '@stratusagent/provider-anthropic';
+import { DEFAULT_CODEX_MODEL } from '@stratusagent/provider-codex';
 import { canonicalDestination, createForgetTool, createRecallTool, createRememberTool, defineAgent, describeCadence, describeSchedule, FORGET_TOOL_NAME, MEMORY_TOOL_NAME, formatSoul, generateAgentName, parseSoul, } from '@stratusagent/agents';
-import { agentsDirPath, claimSoulFile, collectAvailableModels as collectModels, createDemoTool, createFileMemoryStore, createRuntimeProvider, credentialsPath, defaultApiKeyEnvName, DEFAULT_ANTHROPIC_BASE_URL, DEFAULT_OPENAI_BASE_URL, DEFAULT_OPENAI_MODEL, DEFAULT_STRATUS_AGENT, discoverActiveConfig, globalConfigPath, loadChannelCredentials, loadCredentials, installSkillsFromDirectory, loadOperatorSkills, loadRosterSouls, skillsDirPath, listAgentSummaries, loadSoulFile, memoryFilePath, migrateLegacyMemory, parseProviderName, readNonEmptyString, readProcessEnv, resolveConfiguredSoul, logsDirPath, readWorkingDirectory, resolveAgentApprovals, DEFAULT_CONFIG_FILENAME, loadConfigFile, resolveConfigLocation, resolveRuntimeConfig as resolveStateRuntimeConfig, saveChannelCredentials, saveConfigFile, readTrustedConfigBlock, saveCredentials, servedRuntimes, verifyProviderKey, withLegacyDefaultMemories, workspacesDirPath, gatewayInfoPath, gatewayTokenPath, newerStateMessage, pendingStateMigrations, readStateStamp, runStateMigrations, STATE_SCHEMA_VERSION, } from '@stratusagent/state';
+import { agentsDirPath, claimSoulFile, collectAvailableModels as collectModels, createDemoTool, createFileMemoryStore, createRuntimeProvider, credentialsPath, defaultApiKeyEnvName, DEFAULT_ANTHROPIC_BASE_URL, DEFAULT_OPENAI_BASE_URL, DEFAULT_OPENAI_MODEL, DEFAULT_STRATUS_AGENT, discoverActiveConfig, globalConfigPath, loadChannelCredentials, loadCredentials, installSkillsFromDirectory, loadOperatorSkills, loadRosterSouls, skillsDirPath, listAgentSummaries, loadSoulFile, memoryFilePath, migrateLegacyMemory, parseProviderName, readNonEmptyString, readProcessEnv, resolveConfiguredSoul, logsDirPath, readWorkingDirectory, resolveAgentApprovals, DEFAULT_CONFIG_FILENAME, loadConfigFile, resolveConfigLocation, resolveRuntimeConfig as resolveStateRuntimeConfig, saveChannelCredentials, saveConfigFile, readTrustedConfigBlock, saveCredentials, servedRuntimes, CREDENTIAL_PROVIDER_NAMES, verifyProviderKey, withLegacyDefaultMemories, workspacesDirPath, gatewayInfoPath, gatewayTokenPath, newerStateMessage, pendingStateMigrations, readStateStamp, runStateMigrations, STATE_SCHEMA_VERSION, } from '@stratusagent/state';
 import { installService, readServiceCommand, readServiceStatus, servicePlatform, serviceUnitPath, startService, stopService, uninstallService, } from "./service.js";
 export { installService, launchdPlist, readServiceCommand, readServiceStatus, servicePlatform, serviceUnitPath, startService, stopService, systemdUnit, uninstallService, SERVICE_LABEL, } from "./service.js";
 import { createLogWriter, currentLogPosition, truncateRedirectLogs, formatLogRecord, readRecentRecords, tailLog, } from "./logs.js";
@@ -122,7 +123,7 @@ const defaultPackageInstaller = async (packages) => {
         });
     });
 };
-export const CLI_VERSION = '0.9.1';
+export const CLI_VERSION = '0.9.2';
 const DASHBOARD_TITLE = 'Stratus Agent Dashboard';
 /**
  * The range every package declares in its `engines` field. Two floors, not
@@ -265,8 +266,8 @@ Agent options:
 Options:
   --prompt, -p     Prompt to send to the local agent loop
   --stdin          Read the prompt from stdin
-  --provider       Provider to use: anthropic, openai, or demo
-  --model          Model name for real providers (anthropic default: ${DEFAULT_ANTHROPIC_MODEL}, openai default: gpt-4.1-mini)
+  --provider       Provider to use: anthropic, openai, codex, or demo
+  --model          Model name for real providers (anthropic default: ${DEFAULT_ANTHROPIC_MODEL}, openai default: gpt-4.1-mini, codex default: ${DEFAULT_CODEX_MODEL})
   --base-url       Override the provider API base URL
   --soul           Run as the agent defined by a soul file (markdown + frontmatter, see examples/souls)
   --config         Config file path (run: load settings from it, setup: write it)
@@ -1082,30 +1083,42 @@ export const warnOnCredentialOverride = async (runtime, streams, env = {}) => {
     if (runtime.provider === 'demo') {
         return;
     }
-    const stored = (await loadCredentials(env)).anthropic;
-    if (stored?.type !== 'oauth_token') {
-        return;
-    }
+    const credentials = await loadCredentials(env);
+    const processEnv = readProcessEnv(env);
     // The resolver records the variable that actually won — guessing it here
     // would name the wrong one whenever a custom apiKeyEnv supplied the key,
     // sending the reader to unset something that was never the cause.
-    const primary = runtime.provider === 'anthropic' && runtime.apiKey ? runtime.apiKeyEnvVar : undefined;
-    // A fallback demoted the same way costs exactly as much, and only bites
-    // once the primary is already failing — the worst moment to discover it.
-    // The fallback path consults the provider's own conventional variable.
-    const processEnv = readProcessEnv(env);
-    const fallbackVar = runtime.fallback?.provider === 'anthropic'
-        && runtime.fallback.apiKey !== undefined
-        && readNonEmptyString(processEnv.ANTHROPIC_API_KEY) === runtime.fallback.apiKey
-        ? 'ANTHROPIC_API_KEY'
+    const primaryOverride = runtime.apiKey !== undefined
+        ? { provider: runtime.provider, envVar: runtime.apiKeyEnvVar }
         : undefined;
-    const culprit = primary ?? fallbackVar;
-    if (!culprit) {
-        return;
+    // Both subscription sign-ins demote the same way: a Claude setup token
+    // and the codex ChatGPT marker each lose to an environment API key, and
+    // the run otherwise looks identical while billing per token.
+    for (const target of ['anthropic', 'codex']) {
+        if (credentials[target]?.type !== 'oauth_token') {
+            continue;
+        }
+        const planName = target === 'anthropic'
+            ? 'Claude subscription sign-in'
+            : 'ChatGPT (codex login) sign-in';
+        const primary = primaryOverride?.provider === target ? primaryOverride.envVar : undefined;
+        // A fallback demoted the same way costs exactly as much, and only bites
+        // once the primary is already failing — the worst moment to discover it.
+        // The fallback path consults the provider's own conventional variable.
+        const conventionalVar = defaultApiKeyEnvName(target);
+        const fallbackVar = runtime.fallback?.provider === target
+            && runtime.fallback.apiKey !== undefined
+            && readNonEmptyString(processEnv[conventionalVar]) === runtime.fallback.apiKey
+            ? conventionalVar
+            : undefined;
+        const culprit = primary ?? fallbackVar;
+        if (!culprit) {
+            continue;
+        }
+        writeLine(streams.stderr, `Warning: ${culprit} in your environment outranks the ${planName} saved by \`stratus setup\`, `
+            + `so ${primary ? 'this run is' : 'a fallback retry would be'} billed per token instead of through your plan. `
+            + 'Unset it to use the subscription, or run `stratus doctor` to see everything that is being overridden.');
     }
-    writeLine(streams.stderr, `Warning: ${culprit} in your environment outranks the Claude subscription sign-in saved by \`stratus setup\`, `
-        + `so ${primary ? 'this run is' : 'a fallback retry would be'} billed per token instead of through your plan. `
-        + 'Unset it to use the subscription, or run `stratus doctor` to see everything that is being overridden.');
 };
 const createApprovalPolicy = (mode, streams, env, ask) => {
     if (mode === 'always') {
@@ -2051,15 +2064,21 @@ export const runSetup = async (command, streams, env = {}) => {
         header: stratusHeaderLines,
         consumeNotices: () => recentNotices.splice(0),
     });
-    const defaultModelFor = (provider) => provider === 'openai' ? DEFAULT_OPENAI_MODEL : DEFAULT_ANTHROPIC_MODEL;
+    const defaultModelFor = (provider) => provider === 'openai'
+        ? DEFAULT_OPENAI_MODEL
+        : provider === 'codex'
+            ? DEFAULT_CODEX_MODEL
+            : DEFAULT_ANTHROPIC_MODEL;
     // Widened to CliProviderName only so setup can ask about the provider it
     // currently has selected, `demo` included; the rule itself is the shared one.
-    const defaultKeyEnvFor = (provider) => defaultApiKeyEnvName(provider === 'openai' ? 'openai' : 'anthropic');
-    const credentialLabel = (credential) => credential.type === 'oauth_token' ? 'Claude subscription' : 'API key';
+    const defaultKeyEnvFor = (provider) => defaultApiKeyEnvName(provider === 'demo' ? 'anthropic' : provider);
+    const credentialLabel = (provider, credential) => credential.type === 'oauth_token'
+        ? (provider === 'codex' ? 'ChatGPT sign-in' : 'Claude subscription')
+        : 'API key';
     const providerSignInStatus = (provider) => {
         const credential = state.credentials[provider];
         if (credential) {
-            return `signed in (${credentialLabel(credential)})`;
+            return `signed in (${credentialLabel(provider, credential)})`;
         }
         if (readNonEmptyString(processEnv[defaultKeyEnvFor(provider)])) {
             return `using ${defaultKeyEnvFor(provider)} from your environment`;
@@ -2068,10 +2087,10 @@ export const runSetup = async (command, streams, env = {}) => {
     };
     const providersSummary = () => {
         const parts = [];
-        for (const provider of ['anthropic', 'openai']) {
+        for (const provider of CREDENTIAL_PROVIDER_NAMES) {
             const credential = state.credentials[provider];
             if (credential) {
-                parts.push(`${provider} (${credentialLabel(credential)})`);
+                parts.push(`${provider} (${credentialLabel(provider, credential)})`);
             }
             else if (readNonEmptyString(processEnv[defaultKeyEnvFor(provider)])) {
                 parts.push(`${provider} (env key)`);
@@ -2099,7 +2118,9 @@ export const runSetup = async (command, streams, env = {}) => {
         const credential = state.credentials[state.provider];
         if (credential) {
             return credential.type === 'oauth_token'
-                ? 'signed in with your Claude subscription'
+                ? (state.provider === 'codex'
+                    ? 'using your ChatGPT (codex login) sign-in'
+                    : 'signed in with your Claude subscription')
                 : 'signed in with an API key';
         }
         const keyEnv = state.apiKeyEnv ?? defaultKeyEnvFor(state.provider);
@@ -2233,6 +2254,59 @@ export const runSetup = async (command, streams, env = {}) => {
             writeLine(streams.stdout, `! Could not reach the API to verify (${verdict.detail}). Saved the key anyway — it will be checked on your first run.`);
         }
     };
+    const signInCodex = async () => {
+        const signedIn = state.credentials.codex !== undefined;
+        const answer = await prompter.select('How should Stratus connect to Codex?', [
+            'ChatGPT subscription — uses this machine\'s `codex login` sign-in, no per-token cost',
+            'OpenAI API key — pay per use (platform.openai.com)',
+            'Skip for now',
+            ...(signedIn ? ['Sign out'] : []),
+        ]);
+        if (signedIn && answer.kind === 'index' && answer.index === 3) {
+            delete state.credentials.codex;
+            state.credentialsDirty = true;
+            writeLine(streams.stdout, 'Signed out of Codex. (A `codex login` sign-in, if any, stays with codex itself — run `codex logout` to clear it.)');
+            return;
+        }
+        if (answer.kind !== 'index' || answer.index === 2) {
+            return;
+        }
+        if (answer.index === 1) {
+            const key = await prompter.askSecret('Paste your OpenAI API key (Enter to skip; input is hidden): ');
+            if (!key) {
+                writeLine(streams.stdout, 'Skipped — you can sign in any time by re-running this menu.');
+                return;
+            }
+            writeLine(streams.stdout, 'Checking the key against the OpenAI API…');
+            const verdict = await verifyProviderKey('codex', key, undefined, env.fetch ?? globalThis.fetch);
+            if (verdict.status === 'ok') {
+                storeCredential('codex', { type: 'api_key', value: key });
+                writeLine(streams.stdout, '✓ Key verified — Codex runs will bill this OpenAI API key.');
+            }
+            else if (verdict.status === 'rejected') {
+                writeLine(streams.stdout, `✗ OpenAI rejected that key (${verdict.detail}). It was NOT saved — check platform.openai.com and try again from this menu.`);
+            }
+            else {
+                storeCredential('codex', { type: 'api_key', value: key });
+                writeLine(streams.stdout, `! Could not reach the OpenAI API to verify (${verdict.detail}). Saved the key anyway — it will be checked on your first run.`);
+            }
+            return;
+        }
+        // Default: the machine's own ChatGPT sign-in. Codex keeps those tokens
+        // in its own auth store; Stratus records only that this machine uses
+        // it, so nothing secret is written here.
+        writeLine(streams.stdout, 'Your ChatGPT plan covers usage made through Codex.');
+        writeLine(streams.stdout, 'If you have not signed in yet, run this in another terminal on this machine:');
+        writeLine(streams.stdout, '  codex login');
+        writeLine(streams.stdout, '(requires the Codex CLI: npm install -g @openai/codex)');
+        const confirmed = await prompter.select('Use this machine\'s codex sign-in?', ['Yes — codex is (or will be) signed in here', 'Skip for now']);
+        if (confirmed.kind !== 'index' || confirmed.index !== 0) {
+            writeLine(streams.stdout, 'Skipped — you can sign in any time by re-running this menu.');
+            return;
+        }
+        storeCredential('codex', { type: 'oauth_token', value: 'chatgpt' });
+        writeLine(streams.stdout, '✓ Recorded — Codex runs use this machine\'s ChatGPT sign-in. It is verified on your first run.');
+    };
     // Changing the default provider invalidates settings that were chosen
     // for the old one: the model and apiKeyEnv are cleared (defaults take
     // over), while the openai base URL is kept — it belongs to the openai
@@ -2292,17 +2366,25 @@ export const runSetup = async (command, streams, env = {}) => {
         const answer = await prompter.select('Providers — sign in to one or more:', [
             `Claude (Anthropic) — ${providerSignInStatus('anthropic')}`,
             `OpenAI-compatible — ${providerSignInStatus('openai')}`,
+            `Codex (ChatGPT) — ${providerSignInStatus('codex')}`,
             'Demo — built-in fake model, offline, no account',
             'Back',
         ]);
-        if (answer.kind !== 'index' || answer.index === 3) {
+        if (answer.kind !== 'index' || answer.index === 4) {
             return;
         }
-        if (answer.index === 2) {
+        if (answer.index === 3) {
             await switchDefaultProvider('demo');
             writeLine(streams.stdout, 'Demo selected — no sign-in needed. Mention "echo" or "tool" in a prompt to see tool calls.');
             return;
         }
+        if (answer.index === 2) {
+            await signInCodex();
+            if (state.credentials.codex) {
+                await maybeSwitchDefault('codex');
+            }
+            return;
+        }
         if (answer.index === 1) {
             await signInOpenAI();
             if (state.credentials.openai) {
@@ -2349,10 +2431,10 @@ export const runSetup = async (command, streams, env = {}) => {
             if (typed.includes(':')) {
                 const [providerPart, ...idParts] = typed.split(':');
                 const id = idParts.join(':').trim();
-                if ((providerPart === 'anthropic' || providerPart === 'openai') && id) {
+                if ((providerPart === 'anthropic' || providerPart === 'openai' || providerPart === 'codex') && id) {
                     return { provider: providerPart, id };
                 }
-                writeLine(streams.stdout, 'Use provider:model, e.g. anthropic:claude-opus-5.');
+                writeLine(streams.stdout, 'Use provider:model, e.g. anthropic:claude-opus-5 or codex:gpt-5.5.');
                 return undefined;
             }
             // A typed id that appears in the collected list belongs to that
@@ -2487,10 +2569,17 @@ export const runSetup = async (command, streams, env = {}) => {
             ? readNonEmptyString(processEnv.STRATUS_API_KEY)
             : undefined)
             ?? readNonEmptyString(processEnv[defaultKeyEnvFor(fallbackProvider)]);
-        const credential = envKey ? undefined : state.credentials[fallbackProvider];
+        const candidate = envKey ? undefined : state.credentials[fallbackProvider];
+        // A codex fallback consumes no endpoint URL, so a stored key bound to
+        // one cannot serve it — the same skip resolveRuntimeConfig performs.
+        const credential = fallbackProvider === 'codex' && candidate?.type === 'api_key' && candidate.baseUrl !== undefined
+            ? undefined
+            : candidate;
         const apiKey = envKey ?? (credential?.type === 'api_key' ? credential.value : undefined);
-        const authToken = credential?.type === 'oauth_token' ? credential.value : undefined;
-        if (!apiKey && !authToken) {
+        // A codex oauth entry is the subscription marker, not a token to send.
+        const codexSubscription = fallbackProvider === 'codex' && !apiKey && credential?.type === 'oauth_token';
+        const authToken = fallbackProvider !== 'codex' && credential?.type === 'oauth_token' ? credential.value : undefined;
+        if (!apiKey && !authToken && !codexSubscription) {
             return undefined;
         }
         return {
@@ -2503,13 +2592,17 @@ export const runSetup = async (command, streams, env = {}) => {
                         ?? (state.provider === 'openai' ? state.baseUrl : undefined)
                         ?? DEFAULT_OPENAI_BASE_URL,
                 }
-                : (() => {
-                    const url = (fallbackProvider === state.provider ? state.baseUrl : undefined)
-                        ?? (credential?.type === 'api_key' ? credential.baseUrl : undefined);
-                    return url ? { baseUrl: url } : {};
-                })()),
+                // The codex harness owns its endpoints; only anthropic can carry one.
+                : fallbackProvider === 'codex'
+                    ? {}
+                    : (() => {
+                        const url = (fallbackProvider === state.provider ? state.baseUrl : undefined)
+                            ?? (credential?.type === 'api_key' ? credential.baseUrl : undefined);
+                        return url ? { baseUrl: url } : {};
+                    })()),
             ...(apiKey ? { apiKey } : {}),
             ...(authToken ? { authToken } : {}),
+            ...(codexSubscription ? { codexSubscription: true } : {}),
         };
     };
     const buildTestRuntime = async () => {
@@ -2558,6 +2651,32 @@ export const runSetup = async (command, streams, env = {}) => {
                 ...(fallback ? { fallback } : {}),
             };
         }
+        if (state.provider === 'codex') {
+            // The harness owns its endpoints: a key bound to one cannot be
+            // honored on codex — resolveRuntimeConfig refuses this outright, and
+            // the inline test mirrors it rather than quietly unbinding the key.
+            if (boundUrl !== undefined) {
+                writeLine(streams.stdout, `Your saved codex key is bound to ${boundUrl}, and codex does not use a custom base URL. Store the key without one to run on codex.`);
+                return undefined;
+            }
+            const apiKey = envKey ?? (credential?.type === 'api_key' ? credential.value : undefined);
+            // The subscription marker means the machine's own codex sign-in
+            // serves the run — nothing more to resolve here.
+            if (!apiKey && credential?.type !== 'oauth_token') {
+                writeLine(streams.stdout, 'You are not signed in yet — pick option 1 first (or export CODEX_API_KEY).');
+                return undefined;
+            }
+            const fallback = buildTestFallback();
+            return {
+                provider: 'codex',
+                model,
+                ...(apiKey ? { apiKey } : {}),
+                ...(state.systemPrompt ? { systemPrompt: state.systemPrompt } : {}),
+                ...(env.fetch ? { fetch: env.fetch } : {}),
+                ...(soul ? { soul } : {}),
+                ...(fallback ? { fallback } : {}),
+            };
+        }
         const apiKey = envKey ?? (credential?.type === 'api_key' ? credential.value : undefined);
         if (!apiKey) {
             writeLine(streams.stdout, 'You are not signed in yet — pick option 1 first (or export OPENAI_API_KEY).');
@@ -3489,9 +3608,11 @@ export const collectDoctorReport = async (command, warn, env = {}) => {
     const usedKeyEnvVar = resolved && resolved.provider !== 'demo' ? resolved.apiKeyEnvVar : undefined;
     const usesAuthToken = resolved?.provider === 'anthropic' && resolved.authToken !== undefined;
     const fallback = resolved && resolved.provider !== 'demo' ? resolved.fallback : undefined;
-    for (const target of ['anthropic', 'openai']) {
+    for (const target of CREDENTIAL_PROVIDER_NAMES) {
         const stored = credentials[target];
-        const label = stored?.type === 'oauth_token' ? 'Claude subscription (Pro/Max)' : 'API key';
+        const label = stored?.type === 'oauth_token'
+            ? (target === 'codex' ? 'ChatGPT sign-in (codex login)' : 'Claude subscription (Pro/Max)')
+            : 'API key';
         const isDefault = resolved?.provider === target;
         const isFallback = fallback?.provider === target;
         // A provider no resolved run consults is reported, never diagnosed:
@@ -3505,7 +3626,7 @@ export const collectDoctorReport = async (command, warn, env = {}) => {
             });
             continue;
         }
-        const envVar = isDefault ? usedKeyEnvVar : (target === 'openai' ? 'OPENAI_API_KEY' : 'ANTHROPIC_API_KEY');
+        const envVar = isDefault ? usedKeyEnvVar : defaultApiKeyEnvName(target);
         const viaEnv = isDefault
             ? usedKeyEnvVar !== undefined
             : fallback?.apiKey !== undefined && fallback.apiKey === readNonEmptyString(processEnv[String(envVar)]);
@@ -4404,6 +4525,37 @@ export const runSkills = async (streams, env = {}) => {
     }
     return 0;
 };
+/**
+ * The provider/model a newly created soul pins. Frontmatter pins what a run
+ * from this directory would actually use: env vars outrank the active
+ * config file (project-local or explicit first, global otherwise), and no
+ * provider anywhere falls back to demo — the exact precedence of stratus
+ * run. Demo produces no model at all: the soul keeps following the
+ * machine's configuration instead of demanding credentials nothing has
+ * signed in for. The active config's model was written for the provider
+ * named in that config, so it only travels into the soul when they still
+ * match; otherwise the selected provider's own default model stands in.
+ *
+ * Exported for tests: the interactive path that consumes it needs a TTY.
+ */
+export const soulPinForNewAgent = (activeConfig, processEnv) => {
+    // The map already validates, so the value is a provider name; the cast
+    // only undoes `readNonEmptyString`'s widening to `string`.
+    const envProvider = readNonEmptyString(processEnv.STRATUS_PROVIDER, (value) => parseProviderName(value, 'STRATUS_PROVIDER'));
+    const provider = envProvider ?? activeConfig.provider ?? 'demo';
+    if (provider === 'demo') {
+        return { provider };
+    }
+    const configModelApplies = (activeConfig.provider ?? 'openai') === provider;
+    const model = readNonEmptyString(processEnv.STRATUS_MODEL)
+        ?? (configModelApplies ? activeConfig.model : undefined)
+        ?? (provider === 'openai'
+            ? DEFAULT_OPENAI_MODEL
+            : provider === 'codex'
+                ? DEFAULT_CODEX_MODEL
+                : DEFAULT_ANTHROPIC_MODEL);
+    return { provider, model };
+};
 export const runAgentNew = async (command, streams, env = {}) => {
     // On a real terminal, creating an agent is the same guided experience as
     // setup: a headed screen, a prefilled (editable) name, a personality, and
@@ -4427,28 +4579,16 @@ export const runAgentNew = async (command, streams, env = {}) => {
             const name = (await prompter.ask('Choose your name: ', { prefill: suggested })) || suggested;
             const instructions = await prompter.ask('Describe their personality (Enter for a starter you can edit later): ', ...(command.instructions ? [{ prefill: command.instructions }] : []));
             const persona = instructions || DEFAULT_SOUL_STARTER;
-            // Frontmatter pins what a run from this directory would actually use:
-            // env vars outrank the active config file (project-local or explicit
-            // first, global otherwise), and no provider anywhere falls back to
-            // demo — the exact precedence of stratus run. Demo produces no pin
-            // at all: the soul keeps following the machine's configuration
-            // instead of demanding credentials nothing has signed in for.
             const processEnv = readProcessEnv(env);
             // Creating an agent must not be blocked by a broken config — it only
             // feeds the soul's provider/model hint, so fall back to defaults.
             const { location: configLocation, config: activeConfig } = await discoverActiveConfig(env, (message) => {
                 writeLine(streams.stdout, `Note: ${message}.`);
             });
-            const soulProvider = readNonEmptyString(processEnv.STRATUS_PROVIDER, (value) => parseProviderName(value, 'STRATUS_PROVIDER'))
-                ?? activeConfig.provider
-                ?? 'demo';
-            // The active config's model was written for the provider named in
-            // that config; it only travels into the soul when they still match.
-            const configModelApplies = (activeConfig.provider ?? 'openai') === soulProvider;
-            const soulModel = readNonEmptyString(processEnv.STRATUS_MODEL)
-                ?? (configModelApplies ? activeConfig.model : undefined)
-                ?? (soulProvider === 'openai' ? DEFAULT_OPENAI_MODEL : DEFAULT_ANTHROPIC_MODEL);
-            const soulPin = soulProvider !== 'demo' ? { provider: soulProvider, model: soulModel } : {};
+            const { provider: soulProvider, model: soulModel } = soulPinForNewAgent(activeConfig, processEnv);
+            const soulPin = soulProvider !== 'demo' && soulModel !== undefined
+                ? { provider: soulProvider, model: soulModel }
+                : {};
             const claimed = await claimSoulFile(env, { name, instructions: persona }, (candidate) => formatSoul({ agent: candidate, ...soulPin }), (message) => writeLine(streams.stdout, message));
             const { agent, soulPath } = claimed;
             const makeDefault = await prompter.select(`Make ${agent.name} your default agent?`, [