@within-7/minto 0.2.0 → 0.3.0

package/dist/utils/config.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/utils/config.ts"],
-  "sourcesContent": ["import { existsSync, readFileSync, writeFileSync } from 'fs'\nimport { resolve, join } from 'path'\nimport { cloneDeep, memoize, pick } from 'lodash-es'\nimport { homedir } from 'os'\nimport { GLOBAL_CONFIG_FILE } from './env'\nimport { getCwd } from './state'\nimport { randomBytes } from 'crypto'\nimport { safeParseJSON } from './json'\nimport { ConfigParseError } from './errors'\nimport type { ThemeNames } from './theme'\nimport { debug as debugLogger } from './debugLogger'\nimport { getSessionState, setSessionState } from './sessionState'\nimport type { CompressionMode } from '@constants/compressionPrompts'\n\nexport type McpStdioServerConfig = {\n  type?: 'stdio' // Optional for backwards compatibility\n  command: string\n  args: string[]\n  env?: Record<string, string>\n  enabled?: boolean\n}\n\nexport type McpSSEServerConfig = {\n  type: 'sse'\n  url: string\n  enabled?: boolean\n}\n\nexport type McpServerConfig = McpStdioServerConfig | McpSSEServerConfig\n\n/**\n * Sandbox configuration for project-level security settings\n */\nexport type SandboxConfigData = {\n  /** Whether sandboxing is enabled */\n  enabled: boolean\n  /** Filesystem access policy */\n  filesystem?: {\n    writeAllowed?: string[]\n    readAllowed?: string[]\n    denied?: string[]\n  }\n  /** Network access policy */\n  network?: {\n    allowedDomains?: string[]\n    promptForNewDomains?: boolean\n    blockAll?: boolean\n  }\n  /** Process isolation policy */\n  process?: {\n    excludedCommands?: string[]\n    maxExecutionTime?: number\n  }\n}\n\nexport type ProjectConfig = {\n  allowedTools: string[]\n  context: Record<string, string>\n  contextFiles?: string[]\n  history: string[]\n  dontCrawlDirectory?: boolean\n  enableArchitectTool?: boolean\n  mcpContextUris: string[]\n  mcpServers?: Record<string, McpServerConfig>\n  approvedMcprcServers?: string[]\n  rejectedMcprcServers?: string[]\n  lastAPIDuration?: number\n  lastCost?: number\n  lastDuration?: number\n  lastSessionId?: string\n  exampleFiles?: string[]\n  exampleFilesGeneratedAt?: number\n  hasTrustDialogAccepted?: boolean\n  hasCompletedProjectOnboarding?: boolean\n  /** Sandbox configuration for command execution isolation */\n  sandbox?: SandboxConfigData\n}\n\nconst DEFAULT_PROJECT_CONFIG: ProjectConfig = {\n  allowedTools: [],\n  context: {},\n  history: [],\n  dontCrawlDirectory: false,\n  enableArchitectTool: false,\n  mcpContextUris: [],\n  mcpServers: {},\n  approvedMcprcServers: [],\n  rejectedMcprcServers: [],\n  hasTrustDialogAccepted: false,\n}\n\nfunction defaultConfigForProject(projectPath: string): ProjectConfig {\n  const config = { ...DEFAULT_PROJECT_CONFIG }\n  if (projectPath === homedir()) {\n    config.dontCrawlDirectory = true\n  }\n  return config\n}\n\nexport type AutoUpdaterStatus =\n  | 'disabled'\n  | 'enabled'\n  | 'no_permissions'\n  | 'not_configured'\n\nexport function isAutoUpdaterStatus(value: string): value is AutoUpdaterStatus {\n  return ['disabled', 'enabled', 'no_permissions', 'not_configured'].includes(\n    value as AutoUpdaterStatus,\n  )\n}\n\nexport type NotificationChannel =\n  | 'iterm2'\n  | 'terminal_bell'\n  | 'iterm2_with_bell'\n  | 'notifications_disabled'\n\n/**\n * @deprecated Use verbose boolean instead. Kept for backward compatibility migration.\n */\nexport type DisplayMode = 'minimal' | 'compact' | 'detailed'\n\n/**\n * Supported UI languages\n */\nexport type UILanguage = 'en' | 'zh-CN'\n\n/**\n * Get verbose mode label (uses i18n)\n * Import dynamically to avoid circular dependency\n */\nexport function getVerboseLabel(verbose: boolean): string {\n  // Dynamic import to avoid circular dependency at module load time\n  try {\n    const { t } = require('../i18n')\n    return verbose ? t('ui.verbose.on') : t('ui.verbose.off')\n  } catch {\n    // Fallback if i18n not loaded yet\n    return verbose ? 'Verbose: On' : 'Verbose: Off'\n  }\n}\n\n/**\n * @deprecated Use getVerboseLabel() instead\n */\nexport function getDisplayModeLabel(mode: DisplayMode): string {\n  return mode === 'detailed' ? 'Verbose: On' : 'Verbose: Off'\n}\n\n/**\n * @deprecated No longer needed - use verbose boolean directly\n */\nexport const DISPLAY_MODE_LABELS: Record<DisplayMode, string> = {\n  minimal: 'Verbose: Off',\n  compact: 'Verbose: Off',\n  detailed: 'Verbose: On',\n}\n\n/**\n * @deprecated Use !verbose instead\n */\nexport function getNextDisplayMode(current: DisplayMode): DisplayMode {\n  // Simply toggle between compact (off) and detailed (on)\n  return current === 'detailed' ? 'compact' : 'detailed'\n}\n\n/**\n * Convert displayMode to verbose boolean for backward compatibility\n * @deprecated Components should use verbose directly\n */\nexport function displayModeToVerbose(mode: DisplayMode): boolean {\n  return mode === 'detailed'\n}\n\n/**\n * Convert verbose boolean to displayMode for backward compatibility\n */\nexport function verboseToDisplayMode(verbose: boolean): DisplayMode {\n  return verbose ? 'detailed' : 'compact'\n}\n\nexport type ProviderType =\n  | 'anthropic'\n  | 'openai'\n  | 'mistral'\n  | 'deepseek'\n  | 'kimi'\n  | 'qwen'\n  | 'glm'\n  | 'minimax'\n  | 'baidu-qianfan'\n  | 'siliconflow'\n  | 'bigdream'\n  | 'opendev'\n  | 'xai'\n  | 'groq'\n  | 'gemini'\n  | 'ollama'\n  | 'azure'\n  | 'custom'\n  | 'custom-openai'\n\n// New model system types\nexport type ModelProfile = {\n  name: string // User-friendly name\n  provider: ProviderType // Provider type\n  modelName: string // Primary key - actual model identifier\n  baseURL?: string // Custom endpoint\n  apiKey: string\n  maxTokens: number // Output token limit (for GPT-5, this maps to max_completion_tokens)\n  contextLength: number // Context window size\n  reasoningEffort?: 'low' | 'medium' | 'high' | 'minimal' | 'medium'\n  isActive: boolean // Whether profile is enabled\n  createdAt: number // Creation timestamp\n  lastUsed?: number // Last usage timestamp\n  // \uD83D\uDD25 GPT-5 specific metadata\n  isGPT5?: boolean // Auto-detected GPT-5 model flag\n  validationStatus?: 'valid' | 'needs_repair' | 'auto_repaired' // Configuration status\n  lastValidation?: number // Last validation timestamp\n}\n\n// Legacy type for config migration - includes deprecated 'id' field\ntype LegacyModelProfile = ModelProfile & {\n  id?: string\n}\n\n// Legacy global config fields for migration\ntype LegacyGlobalConfigFields = {\n  defaultModelId?: string\n  defaultModelName?: string\n  currentSelectedModelId?: string\n  mainAgentModelId?: string\n  taskToolModelId?: string\n}\n\nexport type ModelPointerType =\n  | 'main'\n  | 'task'\n  | 'reasoning'\n  | 'quick'\n  | 'compact'\n\nexport type ModelPointers = {\n  main: string // Main dialog model ID\n  task: string // Task tool model ID\n  reasoning: string // Reasoning model ID\n  quick: string // Quick model ID\n  compact: string // Compact/summary model ID (for context compression)\n}\n\nexport type AccountInfo = {\n  accountUuid: string\n  emailAddress: string\n  organizationUuid?: string\n}\n\nexport type GlobalConfig = {\n  projects?: Record<string, ProjectConfig>\n  numStartups: number\n  autoUpdaterStatus?: AutoUpdaterStatus\n  userID?: string\n  theme: ThemeNames\n  hasCompletedOnboarding?: boolean\n  // Tracks the last version that reset onboarding, used with MIN_VERSION_REQUIRING_ONBOARDING_RESET\n  lastOnboardingVersion?: string\n  // Tracks the last version for which release notes were seen, used for managing release notes\n  lastReleaseNotesSeen?: string\n  mcpServers?: Record<string, McpServerConfig>\n  preferredNotifChannel: NotificationChannel\n  /**\n   * Verbose mode: shows full parameters and complete outputs when enabled\n   * - false: Concise output (default)\n   * - true: Detailed/verbose output\n   */\n  verbose: boolean\n  /**\n   * @deprecated Use verbose boolean instead. Kept for backward compatibility migration.\n   */\n  displayMode?: DisplayMode\n  customApiKeyResponses?: {\n    approved?: string[]\n    rejected?: string[]\n  }\n  primaryProvider?: ProviderType\n  maxTokens?: number\n  hasAcknowledgedCostThreshold?: boolean\n  oauthAccount?: AccountInfo\n  iterm2KeyBindingInstalled?: boolean // Legacy - keeping for backward compatibility\n  shiftEnterKeyBindingInstalled?: boolean\n  proxy?: string\n  stream?: boolean\n\n  // New model system\n  modelProfiles?: ModelProfile[] // Model configuration list\n  modelPointers?: ModelPointers // Model pointer system\n  defaultModelName?: string // Default model\n  // Update notifications\n  lastDismissedUpdateVersion?: string\n  // Compression mode\n  compressionMode?: CompressionMode // Compression algorithm mode ('business' or 'code')\n  // Thinking mode (Phase 4.2)\n  thinking?: boolean // Whether thinking/extended reasoning mode is enabled\n  // UI Language\n  language?: UILanguage // UI language ('en' or 'zh-CN')\n}\n\nexport const DEFAULT_GLOBAL_CONFIG: GlobalConfig = {\n  numStartups: 0,\n  autoUpdaterStatus: 'not_configured',\n  theme: 'dark' as ThemeNames,\n  preferredNotifChannel: 'iterm2',\n  verbose: false,\n  primaryProvider: 'anthropic' as ProviderType,\n  customApiKeyResponses: {\n    approved: [],\n    rejected: [],\n  },\n  stream: true,\n\n  // New model system defaults\n  modelProfiles: [],\n  modelPointers: {\n    main: '',\n    task: '',\n    reasoning: '',\n    quick: '',\n    compact: '',\n  },\n  lastDismissedUpdateVersion: undefined,\n  compressionMode: 'business', // Default to business consulting compression\n  thinking: false, // Default to thinking mode off (Phase 4.2)\n  language: 'en', // Default to English\n}\n\nexport const GLOBAL_CONFIG_KEYS = [\n  'autoUpdaterStatus',\n  'theme',\n  'hasCompletedOnboarding',\n  'lastOnboardingVersion',\n  'lastReleaseNotesSeen',\n  'verbose',\n  'customApiKeyResponses',\n  'primaryProvider',\n  'preferredNotifChannel',\n  'shiftEnterKeyBindingInstalled',\n  'maxTokens',\n  'compressionMode',\n  'language',\n] as const\n\nexport type GlobalConfigKey = (typeof GLOBAL_CONFIG_KEYS)[number]\n\nexport function isGlobalConfigKey(key: string): key is GlobalConfigKey {\n  return GLOBAL_CONFIG_KEYS.includes(key as GlobalConfigKey)\n}\n\nexport const PROJECT_CONFIG_KEYS = [\n  'dontCrawlDirectory',\n  'enableArchitectTool',\n  'hasTrustDialogAccepted',\n  'hasCompletedProjectOnboarding',\n] as const\n\nexport type ProjectConfigKey = (typeof PROJECT_CONFIG_KEYS)[number]\n\nexport function checkHasTrustDialogAccepted(): boolean {\n  let currentPath = getCwd()\n  const config = getConfig(GLOBAL_CONFIG_FILE, DEFAULT_GLOBAL_CONFIG)\n\n  while (true) {\n    const projectConfig = config.projects?.[currentPath]\n    if (projectConfig?.hasTrustDialogAccepted) {\n      return true\n    }\n    const parentPath = resolve(currentPath, '..')\n    // Stop if we've reached the root (when parent is same as current)\n    if (parentPath === currentPath) {\n      break\n    }\n    currentPath = parentPath\n  }\n\n  return false\n}\n\n// We have to put this test code here because Jest doesn't support mocking ES modules :O\nconst TEST_GLOBAL_CONFIG_FOR_TESTING: GlobalConfig = {\n  ...DEFAULT_GLOBAL_CONFIG,\n  autoUpdaterStatus: 'disabled',\n}\nconst TEST_PROJECT_CONFIG_FOR_TESTING: ProjectConfig = {\n  ...DEFAULT_PROJECT_CONFIG,\n}\n\nexport function isProjectConfigKey(key: string): key is ProjectConfigKey {\n  return PROJECT_CONFIG_KEYS.includes(key as ProjectConfigKey)\n}\n\nexport function saveGlobalConfig(config: GlobalConfig): void {\n  if (process.env.NODE_ENV === 'test') {\n    for (const key in config) {\n      TEST_GLOBAL_CONFIG_FOR_TESTING[key] = config[key]\n    }\n    return\n  }\n\n  // \u76F4\u63A5\u4FDD\u5B58\u914D\u7F6E\uFF08\u65E0\u9700\u6E05\u9664\u7F13\u5B58\uFF0C\u56E0\u4E3A\u5DF2\u79FB\u9664\u7F13\u5B58\uFF09\n  saveConfig(\n    GLOBAL_CONFIG_FILE,\n    {\n      ...config,\n      projects: getConfig(GLOBAL_CONFIG_FILE, DEFAULT_GLOBAL_CONFIG).projects,\n    },\n    DEFAULT_GLOBAL_CONFIG,\n  )\n}\n\n/**\n * Migrate legacy displayMode to verbose boolean\n */\nfunction migrateDisplayModeToVerbose(config: GlobalConfig): GlobalConfig {\n  // If verbose is already set, no migration needed\n  if (config.verbose !== undefined) {\n    return config\n  }\n\n  // Check for legacy displayMode field\n  const legacyConfig = config as GlobalConfig & { displayMode?: DisplayMode }\n  if (legacyConfig.displayMode !== undefined) {\n    const migratedConfig: GlobalConfig = {\n      ...config,\n      verbose: legacyConfig.displayMode === 'detailed',\n    }\n    // Remove legacy field\n    delete (migratedConfig as any).displayMode\n    return migratedConfig\n  }\n\n  // Default to false if no verbose or displayMode\n  return {\n    ...config,\n    verbose: false,\n  }\n}\n\n// \u4E34\u65F6\u79FB\u9664\u7F13\u5B58\uFF0C\u786E\u4FDD\u603B\u662F\u83B7\u53D6\u6700\u65B0\u914D\u7F6E\nexport function getGlobalConfig(): GlobalConfig {\n  if (process.env.NODE_ENV === 'test') {\n    return TEST_GLOBAL_CONFIG_FOR_TESTING\n  }\n  const config = getConfig(GLOBAL_CONFIG_FILE, DEFAULT_GLOBAL_CONFIG)\n  const migratedConfig = migrateModelProfilesRemoveId(config)\n  return migrateDisplayModeToVerbose(migratedConfig)\n}\n\nexport function getAnthropicApiKey(): null | string {\n  return process.env.ANTHROPIC_API_KEY || null\n}\n\nexport function normalizeApiKeyForConfig(apiKey: string): string {\n  return apiKey?.slice(-20) ?? ''\n}\n\nexport function getCustomApiKeyStatus(\n  truncatedApiKey: string,\n): 'approved' | 'rejected' | 'new' {\n  const config = getGlobalConfig()\n  if (config.customApiKeyResponses?.approved?.includes(truncatedApiKey)) {\n    return 'approved'\n  }\n  if (config.customApiKeyResponses?.rejected?.includes(truncatedApiKey)) {\n    return 'rejected'\n  }\n  return 'new'\n}\n\nfunction saveConfig<A extends object>(\n  file: string,\n  config: A,\n  defaultConfig: A,\n): void {\n  // Filter out any values that match the defaults\n  const filteredConfig = Object.fromEntries(\n    Object.entries(config).filter(\n      ([key, value]) =>\n        JSON.stringify(value) !== JSON.stringify(defaultConfig[key as keyof A]),\n    ),\n  )\n  try {\n    writeFileSync(file, JSON.stringify(filteredConfig, null, 2), 'utf-8')\n  } catch (error) {\n    const err = error as NodeJS.ErrnoException\n    if (\n      err?.code === 'EACCES' ||\n      err?.code === 'EPERM' ||\n      err?.code === 'EROFS'\n    ) {\n      debugLogger.state('CONFIG_SAVE_SKIPPED', {\n        file,\n        reason: String(err.code),\n      })\n      return\n    }\n    throw error\n  }\n}\n\n// Flag to track if config reading is allowed\nlet configReadingAllowed = false\n\nexport function enableConfigs(): void {\n  // Any reads to configuration before this flag is set show an console warning\n  // to prevent us from adding config reading during module initialization\n  configReadingAllowed = true\n  // We only check the global config because currently all the configs share a file\n  getConfig(\n    GLOBAL_CONFIG_FILE,\n    DEFAULT_GLOBAL_CONFIG,\n    true /* throw on invalid */,\n  )\n}\n\nfunction getConfig<A>(\n  file: string,\n  defaultConfig: A,\n  throwOnInvalid?: boolean,\n): A {\n  // \u7B80\u5316\u914D\u7F6E\u8BBF\u95EE\u903B\u8F91\uFF0C\u79FB\u9664\u590D\u6742\u7684\u65F6\u5E8F\u68C0\u67E5\n\n  debugLogger.state('CONFIG_LOAD_START', {\n    file,\n    fileExists: String(existsSync(file)),\n    throwOnInvalid: String(!!throwOnInvalid),\n  })\n\n  if (!existsSync(file)) {\n    debugLogger.state('CONFIG_LOAD_DEFAULT', {\n      file,\n      reason: 'file_not_exists',\n      defaultConfigKeys: Object.keys(defaultConfig as object).join(', '),\n    })\n    return cloneDeep(defaultConfig)\n  }\n\n  try {\n    const fileContent = readFileSync(file, 'utf-8')\n    debugLogger.state('CONFIG_FILE_READ', {\n      file,\n      contentLength: String(fileContent.length),\n      contentPreview:\n        fileContent.substring(0, 100) + (fileContent.length > 100 ? '...' : ''),\n    })\n\n    try {\n      const parsedConfig = JSON.parse(fileContent)\n      debugLogger.state('CONFIG_JSON_PARSED', {\n        file,\n        parsedKeys: Object.keys(parsedConfig).join(', '),\n      })\n\n      // Handle backward compatibility - remove logic for deleted fields\n      const finalConfig = {\n        ...cloneDeep(defaultConfig),\n        ...parsedConfig,\n      }\n\n      debugLogger.state('CONFIG_LOAD_SUCCESS', {\n        file,\n        finalConfigKeys: Object.keys(finalConfig as object).join(', '),\n      })\n\n      return finalConfig\n    } catch (error) {\n      // Throw a ConfigParseError with the file path and default config\n      const errorMessage =\n        error instanceof Error ? error.message : String(error)\n\n      debugLogger.error('CONFIG_JSON_PARSE_ERROR', {\n        file,\n        errorMessage,\n        errorType:\n          error instanceof Error ? error.constructor.name : typeof error,\n        contentLength: String(fileContent.length),\n      })\n\n      throw new ConfigParseError(errorMessage, file, defaultConfig)\n    }\n  } catch (error: unknown) {\n    // Re-throw ConfigParseError if throwOnInvalid is true\n    if (error instanceof ConfigParseError && throwOnInvalid) {\n      debugLogger.error('CONFIG_PARSE_ERROR_RETHROWN', {\n        file,\n        throwOnInvalid: String(throwOnInvalid),\n        errorMessage: error.message,\n      })\n      throw error\n    }\n\n    debugLogger.warn('CONFIG_FALLBACK_TO_DEFAULT', {\n      file,\n      errorType: error instanceof Error ? error.constructor.name : typeof error,\n      errorMessage: error instanceof Error ? error.message : String(error),\n      action: 'using_default_config',\n    })\n\n    return cloneDeep(defaultConfig)\n  }\n}\n\nexport function getCurrentProjectConfig(): ProjectConfig {\n  if (process.env.NODE_ENV === 'test') {\n    return TEST_PROJECT_CONFIG_FOR_TESTING\n  }\n\n  const absolutePath = resolve(getCwd())\n  const config = getConfig(GLOBAL_CONFIG_FILE, DEFAULT_GLOBAL_CONFIG)\n\n  if (!config.projects) {\n    return defaultConfigForProject(absolutePath)\n  }\n\n  const projectConfig =\n    config.projects[absolutePath] ?? defaultConfigForProject(absolutePath)\n  // Not sure how this became a string\n  // TODO: Fix upstream\n  if (typeof projectConfig.allowedTools === 'string') {\n    projectConfig.allowedTools =\n      (safeParseJSON(projectConfig.allowedTools) as string[]) ?? []\n  }\n  return projectConfig\n}\n\nexport function saveCurrentProjectConfig(projectConfig: ProjectConfig): void {\n  if (process.env.NODE_ENV === 'test') {\n    for (const key in projectConfig) {\n      TEST_PROJECT_CONFIG_FOR_TESTING[key] = projectConfig[key]\n    }\n    return\n  }\n  const config = getConfig(GLOBAL_CONFIG_FILE, DEFAULT_GLOBAL_CONFIG)\n  saveConfig(\n    GLOBAL_CONFIG_FILE,\n    {\n      ...config,\n      projects: {\n        ...config.projects,\n        [resolve(getCwd())]: projectConfig,\n      },\n    },\n    DEFAULT_GLOBAL_CONFIG,\n  )\n}\n\nexport async function isAutoUpdaterDisabled(): Promise<boolean> {\n  return getGlobalConfig().autoUpdaterStatus === 'disabled'\n}\n\nexport const TEST_MCPRC_CONFIG_FOR_TESTING: Record<string, McpServerConfig> = {}\n\nexport function clearMcprcConfigForTesting(): void {\n  if (process.env.NODE_ENV === 'test') {\n    Object.keys(TEST_MCPRC_CONFIG_FOR_TESTING).forEach(key => {\n      delete TEST_MCPRC_CONFIG_FOR_TESTING[key]\n    })\n  }\n}\n\nexport function addMcprcServerForTesting(\n  name: string,\n  server: McpServerConfig,\n): void {\n  if (process.env.NODE_ENV === 'test') {\n    TEST_MCPRC_CONFIG_FOR_TESTING[name] = server\n  }\n}\n\nexport function removeMcprcServerForTesting(name: string): void {\n  if (process.env.NODE_ENV === 'test') {\n    if (!TEST_MCPRC_CONFIG_FOR_TESTING[name]) {\n      throw new Error(`No MCP server found with name: ${name} in .mcprc`)\n    }\n    delete TEST_MCPRC_CONFIG_FOR_TESTING[name]\n  }\n}\n\nexport const getMcprcConfig = memoize(\n  (): Record<string, McpServerConfig> => {\n    if (process.env.NODE_ENV === 'test') {\n      return TEST_MCPRC_CONFIG_FOR_TESTING\n    }\n\n    const mcprcPath = join(getCwd(), '.mcprc')\n    if (!existsSync(mcprcPath)) {\n      return {}\n    }\n\n    try {\n      const mcprcContent = readFileSync(mcprcPath, 'utf-8')\n      const config = safeParseJSON(mcprcContent)\n      if (config && typeof config === 'object') {\n        // Logging removed\n        return config as Record<string, McpServerConfig>\n      }\n    } catch {\n      // Ignore errors reading/parsing .mcprc (they're logged in safeParseJSON)\n    }\n    return {}\n  },\n  // This function returns the same value as long as the cwd and mcprc file content remain the same\n  () => {\n    const cwd = getCwd()\n    const mcprcPath = join(cwd, '.mcprc')\n    if (existsSync(mcprcPath)) {\n      try {\n        const stat = readFileSync(mcprcPath, 'utf-8')\n        return `${cwd}:${stat}`\n      } catch {\n        return cwd\n      }\n    }\n    return cwd\n  },\n)\n\nexport function getOrCreateUserID(): string {\n  const config = getGlobalConfig()\n  if (config.userID) {\n    return config.userID\n  }\n\n  const userID = randomBytes(32).toString('hex')\n  saveGlobalConfig({ ...config, userID })\n  return userID\n}\n\nexport function getConfigForCLI(key: string, global: boolean): unknown {\n  if (global) {\n    if (!isGlobalConfigKey(key)) {\n      console.error(\n        `Error: '${key}' is not a valid config key. Valid keys are: ${GLOBAL_CONFIG_KEYS.join(', ')}`,\n      )\n      process.exit(1)\n    }\n    return getGlobalConfig()[key]\n  } else {\n    if (!isProjectConfigKey(key)) {\n      console.error(\n        `Error: '${key}' is not a valid config key. Valid keys are: ${PROJECT_CONFIG_KEYS.join(', ')}`,\n      )\n      process.exit(1)\n    }\n    return getCurrentProjectConfig()[key]\n  }\n}\n\nexport function setConfigForCLI(\n  key: string,\n  value: unknown,\n  global: boolean,\n): void {\n  if (global) {\n    if (!isGlobalConfigKey(key)) {\n      console.error(\n        `Error: Cannot set '${key}'. Only these keys can be modified: ${GLOBAL_CONFIG_KEYS.join(', ')}`,\n      )\n      process.exit(1)\n    }\n\n    if (key === 'autoUpdaterStatus' && !isAutoUpdaterStatus(value as string)) {\n      console.error(\n        `Error: Invalid value for autoUpdaterStatus. Must be one of: disabled, enabled, no_permissions, not_configured`,\n      )\n      process.exit(1)\n    }\n\n    const currentConfig = getGlobalConfig()\n    saveGlobalConfig({\n      ...currentConfig,\n      [key]: value,\n    })\n  } else {\n    if (!isProjectConfigKey(key)) {\n      console.error(\n        `Error: Cannot set '${key}'. Only these keys can be modified: ${PROJECT_CONFIG_KEYS.join(', ')}. Did you mean --global?`,\n      )\n      process.exit(1)\n    }\n    const currentConfig = getCurrentProjectConfig()\n    saveCurrentProjectConfig({\n      ...currentConfig,\n      [key]: value,\n    })\n  }\n  // Wait for the output to be flushed, to avoid clearing the screen.\n  setTimeout(() => {\n    // Without this we hang indefinitely.\n    process.exit(0)\n  }, 100)\n}\n\nexport function deleteConfigForCLI(key: string, global: boolean): void {\n  if (global) {\n    if (!isGlobalConfigKey(key)) {\n      console.error(\n        `Error: Cannot delete '${key}'. Only these keys can be modified: ${GLOBAL_CONFIG_KEYS.join(', ')}`,\n      )\n      process.exit(1)\n    }\n    const currentConfig = getGlobalConfig()\n    delete currentConfig[key]\n    saveGlobalConfig(currentConfig)\n  } else {\n    if (!isProjectConfigKey(key)) {\n      console.error(\n        `Error: Cannot delete '${key}'. Only these keys can be modified: ${PROJECT_CONFIG_KEYS.join(', ')}. Did you mean --global?`,\n      )\n      process.exit(1)\n    }\n    const currentConfig = getCurrentProjectConfig()\n    delete currentConfig[key]\n    saveCurrentProjectConfig(currentConfig)\n  }\n}\n\nexport function listConfigForCLI(global: true): GlobalConfig\nexport function listConfigForCLI(global: false): ProjectConfig\nexport function listConfigForCLI(global: boolean): object {\n  if (global) {\n    const currentConfig = pick(getGlobalConfig(), GLOBAL_CONFIG_KEYS)\n    return currentConfig\n  } else {\n    return pick(getCurrentProjectConfig(), PROJECT_CONFIG_KEYS)\n  }\n}\n\nexport function getOpenAIApiKey(): string | undefined {\n  return process.env.OPENAI_API_KEY\n}\n\n// Configuration migration utility functions\nfunction migrateModelProfilesRemoveId(config: GlobalConfig): GlobalConfig {\n  if (!config.modelProfiles) return config\n\n  // Cast to legacy type for migration - config may have old fields\n  const legacyConfig = config as GlobalConfig & LegacyGlobalConfigFields\n\n  // 1. Remove id field from ModelProfile objects and build ID to modelName mapping\n  const idToModelNameMap = new Map<string, string>()\n  const migratedProfiles = config.modelProfiles.map(profile => {\n    // Cast to legacy type that includes optional id field\n    const legacyProfile = profile as LegacyModelProfile\n    // Build mapping before removing id field\n    if (legacyProfile.id && profile.modelName) {\n      idToModelNameMap.set(legacyProfile.id, profile.modelName)\n    }\n\n    // Remove id field, keep everything else\n    const { id, ...profileWithoutId } = legacyProfile\n    return profileWithoutId as ModelProfile\n  })\n\n  // 2. Migrate ModelPointers from IDs to modelNames\n  const migratedPointers: ModelPointers = {\n    main: '',\n    task: '',\n    reasoning: '',\n    quick: '',\n    compact: '',\n  }\n\n  if (config.modelPointers) {\n    Object.entries(config.modelPointers).forEach(([pointer, value]) => {\n      if (value) {\n        // If value looks like an old ID (model_xxx), map it to modelName\n        const modelName = idToModelNameMap.get(value) || value\n        migratedPointers[pointer as ModelPointerType] = modelName\n      }\n    })\n  }\n\n  // 3. Migrate legacy config fields\n  let defaultModelName: string | undefined\n  if (legacyConfig.defaultModelId) {\n    defaultModelName =\n      idToModelNameMap.get(legacyConfig.defaultModelId) ||\n      legacyConfig.defaultModelId\n  } else if (legacyConfig.defaultModelName) {\n    defaultModelName = legacyConfig.defaultModelName\n  }\n\n  // 4. Remove legacy fields and return migrated config\n  const migratedConfig: GlobalConfig & Partial<LegacyGlobalConfigFields> = {\n    ...config,\n  }\n  delete migratedConfig.defaultModelId\n  delete migratedConfig.currentSelectedModelId\n  delete migratedConfig.mainAgentModelId\n  delete migratedConfig.taskToolModelId\n\n  return {\n    ...migratedConfig,\n    modelProfiles: migratedProfiles,\n    modelPointers: migratedPointers,\n    defaultModelName,\n  }\n}\n\n// New model system utility functions\n\nexport function setAllPointersToModel(modelName: string): void {\n  const config = getGlobalConfig()\n  const updatedConfig = {\n    ...config,\n    modelPointers: {\n      main: modelName,\n      task: modelName,\n      reasoning: modelName,\n      quick: modelName,\n      compact: modelName,\n    },\n    defaultModelName: modelName,\n  }\n  saveGlobalConfig(updatedConfig)\n}\n\nexport function setModelPointer(\n  pointer: ModelPointerType,\n  modelName: string,\n): void {\n  const config = getGlobalConfig()\n  const updatedConfig = {\n    ...config,\n    modelPointers: {\n      ...config.modelPointers,\n      [pointer]: modelName,\n    },\n  }\n  saveGlobalConfig(updatedConfig)\n\n  // \uD83D\uDD27 Fix: Force ModelManager reload after config change\n  // Import here to avoid circular dependency\n  import('./model').then(({ reloadModelManager }) => {\n    reloadModelManager()\n  })\n}\n\n// \uD83D\uDD25 GPT-5 Configuration Validation and Auto-Repair Functions\n\n/**\n * Check if a model name represents a GPT-5 model\n */\nexport function isGPT5ModelName(modelName: string): boolean {\n  if (!modelName || typeof modelName !== 'string') return false\n  const lowerName = modelName.toLowerCase()\n  return lowerName.startsWith('gpt-5') || lowerName.includes('gpt-5')\n}\n\n/**\n * Validate and auto-repair GPT-5 model configuration\n */\nexport function validateAndRepairGPT5Profile(\n  profile: ModelProfile,\n): ModelProfile {\n  const isGPT5 = isGPT5ModelName(profile.modelName)\n  const now = Date.now()\n\n  // Create a working copy\n  const repairedProfile: ModelProfile = { ...profile }\n  let wasRepaired = false\n\n  // \uD83D\uDD27 Set GPT-5 detection flag\n  if (isGPT5 !== profile.isGPT5) {\n    repairedProfile.isGPT5 = isGPT5\n    wasRepaired = true\n  }\n\n  if (isGPT5) {\n    // \uD83D\uDD27 GPT-5 Parameter Validation and Repair\n\n    // 1. Reasoning effort validation\n    const validReasoningEfforts = ['minimal', 'low', 'medium', 'high']\n    if (\n      !profile.reasoningEffort ||\n      !validReasoningEfforts.includes(profile.reasoningEffort)\n    ) {\n      repairedProfile.reasoningEffort = 'medium' // Default for coding tasks\n      wasRepaired = true\n      console.log(\n        `\uD83D\uDD27 GPT-5 Config: Set reasoning effort to 'medium' for ${profile.modelName}`,\n      )\n    }\n\n    // 2. Context length validation (GPT-5 models typically have 128k context)\n    if (profile.contextLength < 128000) {\n      repairedProfile.contextLength = 128000\n      wasRepaired = true\n      console.log(\n        `\uD83D\uDD27 GPT-5 Config: Updated context length to 128k for ${profile.modelName}`,\n      )\n    }\n\n    // 3. Output tokens validation (reasonable defaults for GPT-5)\n    if (profile.maxTokens < 4000) {\n      repairedProfile.maxTokens = 8192 // Good default for coding tasks\n      wasRepaired = true\n      console.log(\n        `\uD83D\uDD27 GPT-5 Config: Updated max tokens to 8192 for ${profile.modelName}`,\n      )\n    }\n\n    // 4. Provider validation\n    if (\n      profile.provider !== 'openai' &&\n      profile.provider !== 'custom-openai' &&\n      profile.provider !== 'azure'\n    ) {\n      console.warn(\n        `\u26A0\uFE0F  GPT-5 Config: Unexpected provider '${profile.provider}' for GPT-5 model ${profile.modelName}. Consider using 'openai' or 'custom-openai'.`,\n      )\n    }\n\n    // 5. Base URL validation for official models\n    if (profile.modelName.includes('gpt-5') && !profile.baseURL) {\n      repairedProfile.baseURL = 'https://api.openai.com/v1'\n      wasRepaired = true\n      console.log(\n        `\uD83D\uDD27 GPT-5 Config: Set default base URL for ${profile.modelName}`,\n      )\n    }\n  }\n\n  // Update validation metadata\n  repairedProfile.validationStatus = wasRepaired ? 'auto_repaired' : 'valid'\n  repairedProfile.lastValidation = now\n\n  if (wasRepaired) {\n    console.log(\n      `\u2705 GPT-5 Config: Auto-repaired configuration for ${profile.modelName}`,\n    )\n  }\n\n  return repairedProfile\n}\n\n/**\n * Validate and repair all GPT-5 profiles in the global configuration\n */\nexport function validateAndRepairAllGPT5Profiles(): {\n  repaired: number\n  total: number\n} {\n  const config = getGlobalConfig()\n  if (!config.modelProfiles) {\n    return { repaired: 0, total: 0 }\n  }\n\n  let repairCount = 0\n  const repairedProfiles = config.modelProfiles.map(profile => {\n    const repairedProfile = validateAndRepairGPT5Profile(profile)\n    if (repairedProfile.validationStatus === 'auto_repaired') {\n      repairCount++\n    }\n    return repairedProfile\n  })\n\n  // Save the repaired configuration\n  if (repairCount > 0) {\n    const updatedConfig = {\n      ...config,\n      modelProfiles: repairedProfiles,\n    }\n    saveGlobalConfig(updatedConfig)\n    console.log(`\uD83D\uDD27 GPT-5 Config: Auto-repaired ${repairCount} model profiles`)\n  }\n\n  return { repaired: repairCount, total: config.modelProfiles.length }\n}\n\n/**\n * Get GPT-5 configuration recommendations for a specific model\n */\nexport function getGPT5ConfigRecommendations(\n  modelName: string,\n): Partial<ModelProfile> {\n  if (!isGPT5ModelName(modelName)) {\n    return {}\n  }\n\n  const recommendations: Partial<ModelProfile> = {\n    contextLength: 128000, // GPT-5 standard context length\n    maxTokens: 8192, // Good default for coding tasks\n    reasoningEffort: 'medium', // Balanced for most coding tasks\n    isGPT5: true,\n  }\n\n  // Model-specific optimizations\n  if (modelName.includes('gpt-5-mini')) {\n    recommendations.maxTokens = 4096 // Smaller default for mini\n    recommendations.reasoningEffort = 'low' // Faster for simple tasks\n  } else if (modelName.includes('gpt-5-nano')) {\n    recommendations.maxTokens = 2048 // Even smaller for nano\n    recommendations.reasoningEffort = 'minimal' // Fastest option\n  }\n\n  return recommendations\n}\n\n/**\n * Create a properly configured GPT-5 model profile\n */\nexport function createGPT5ModelProfile(\n  name: string,\n  modelName: string,\n  apiKey: string,\n  baseURL?: string,\n  provider: ProviderType = 'openai',\n): ModelProfile {\n  const recommendations = getGPT5ConfigRecommendations(modelName)\n\n  const profile: ModelProfile = {\n    name,\n    provider,\n    modelName,\n    baseURL: baseURL || 'https://api.openai.com/v1',\n    apiKey,\n    maxTokens: recommendations.maxTokens || 8192,\n    contextLength: recommendations.contextLength || 128000,\n    reasoningEffort: recommendations.reasoningEffort || 'medium',\n    isActive: true,\n    createdAt: Date.now(),\n    isGPT5: true,\n    validationStatus: 'valid',\n    lastValidation: Date.now(),\n  }\n\n  console.log(`\u2705 Created GPT-5 model profile: ${name} (${modelName})`)\n  return profile\n}\n"],
-  "mappings": "AAAA,SAAS,YAAY,cAAc,qBAAqB;AACxD,SAAS,SAAS,YAAY;AAC9B,SAAS,WAAW,SAAS,YAAY;AACzC,SAAS,eAAe;AACxB,SAAS,0BAA0B;AACnC,SAAS,cAAc;AACvB,SAAS,mBAAmB;AAC5B,SAAS,qBAAqB;AAC9B,SAAS,wBAAwB;AAEjC,SAAS,SAAS,mBAAmB;AAoErC,MAAM,yBAAwC;AAAA,EAC5C,cAAc,CAAC;AAAA,EACf,SAAS,CAAC;AAAA,EACV,SAAS,CAAC;AAAA,EACV,oBAAoB;AAAA,EACpB,qBAAqB;AAAA,EACrB,gBAAgB,CAAC;AAAA,EACjB,YAAY,CAAC;AAAA,EACb,sBAAsB,CAAC;AAAA,EACvB,sBAAsB,CAAC;AAAA,EACvB,wBAAwB;AAC1B;AAEA,SAAS,wBAAwB,aAAoC;AACnE,QAAM,SAAS,EAAE,GAAG,uBAAuB;AAC3C,MAAI,gBAAgB,QAAQ,GAAG;AAC7B,WAAO,qBAAqB;AAAA,EAC9B;AACA,SAAO;AACT;AAQO,SAAS,oBAAoB,OAA2C;AAC7E,SAAO,CAAC,YAAY,WAAW,kBAAkB,gBAAgB,EAAE;AAAA,IACjE;AAAA,EACF;AACF;AAsBO,SAAS,gBAAgB,SAA0B;AAExD,MAAI;AACF,UAAM,EAAE,EAAE,IAAI,QAAQ,SAAS;AAC/B,WAAO,UAAU,EAAE,eAAe,IAAI,EAAE,gBAAgB;AAAA,EAC1D,QAAQ;AAEN,WAAO,UAAU,gBAAgB;AAAA,EACnC;AACF;AAKO,SAAS,oBAAoB,MAA2B;AAC7D,SAAO,SAAS,aAAa,gBAAgB;AAC/C;AAKO,MAAM,sBAAmD;AAAA,EAC9D,SAAS;AAAA,EACT,SAAS;AAAA,EACT,UAAU;AACZ;AAKO,SAAS,mBAAmB,SAAmC;AAEpE,SAAO,YAAY,aAAa,YAAY;AAC9C;AAMO,SAAS,qBAAqB,MAA4B;AAC/D,SAAO,SAAS;AAClB;AAKO,SAAS,qBAAqB,SAA+B;AAClE,SAAO,UAAU,aAAa;AAChC;AA+HO,MAAM,wBAAsC;AAAA,EACjD,aAAa;AAAA,EACb,mBAAmB;AAAA,EACnB,OAAO;AAAA,EACP,uBAAuB;AAAA,EACvB,SAAS;AAAA,EACT,iBAAiB;AAAA,EACjB,uBAAuB;AAAA,IACrB,UAAU,CAAC;AAAA,IACX,UAAU,CAAC;AAAA,EACb;AAAA,EACA,QAAQ;AAAA;AAAA,EAGR,eAAe,CAAC;AAAA,EAChB,eAAe;AAAA,IACb,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,SAAS;AAAA,EACX;AAAA,EACA,4BAA4B;AAAA,EAC5B,iBAAiB;AAAA;AAAA,EACjB,UAAU;AAAA;AAAA,EACV,UAAU;AAAA;AACZ;AAEO,MAAM,qBAAqB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAIO,SAAS,kBAAkB,KAAqC;AACrE,SAAO,mBAAmB,SAAS,GAAsB;AAC3D;AAEO,MAAM,sBAAsB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAIO,SAAS,8BAAuC;AACrD,MAAI,cAAc,OAAO;AACzB,QAAM,SAAS,UAAU,oBAAoB,qBAAqB;AAElE,SAAO,MAAM;AACX,UAAM,gBAAgB,OAAO,WAAW,WAAW;AACnD,QAAI,eAAe,wBAAwB;AACzC,aAAO;AAAA,IACT;AACA,UAAM,aAAa,QAAQ,aAAa,IAAI;AAE5C,QAAI,eAAe,aAAa;AAC9B;AAAA,IACF;AACA,kBAAc;AAAA,EAChB;AAEA,SAAO;AACT;AAGA,MAAM,iCAA+C;AAAA,EACnD,GAAG;AAAA,EACH,mBAAmB;AACrB;AACA,MAAM,kCAAiD;AAAA,EACrD,GAAG;AACL;AAEO,SAAS,mBAAmB,KAAsC;AACvE,SAAO,oBAAoB,SAAS,GAAuB;AAC7D;AAEO,SAAS,iBAAiB,QAA4B;AAC3D,MAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,eAAW,OAAO,QAAQ;AACxB,qCAA+B,GAAG,IAAI,OAAO,GAAG;AAAA,IAClD;AACA;AAAA,EACF;AAGA;AAAA,IACE;AAAA,IACA;AAAA,MACE,GAAG;AAAA,MACH,UAAU,UAAU,oBAAoB,qBAAqB,EAAE;AAAA,IACjE;AAAA,IACA;AAAA,EACF;AACF;AAKA,SAAS,4BAA4B,QAAoC;AAEvE,MAAI,OAAO,YAAY,QAAW;AAChC,WAAO;AAAA,EACT;AAGA,QAAM,eAAe;AACrB,MAAI,aAAa,gBAAgB,QAAW;AAC1C,UAAM,iBAA+B;AAAA,MACnC,GAAG;AAAA,MACH,SAAS,aAAa,gBAAgB;AAAA,IACxC;AAEA,WAAQ,eAAuB;AAC/B,WAAO;AAAA,EACT;AAGA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,SAAS;AAAA,EACX;AACF;AAGO,SAAS,kBAAgC;AAC9C,MAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,WAAO;AAAA,EACT;AACA,QAAM,SAAS,UAAU,oBAAoB,qBAAqB;AAClE,QAAM,iBAAiB,6BAA6B,MAAM;AAC1D,SAAO,4BAA4B,cAAc;AACnD;AAEO,SAAS,qBAAoC;AAClD,SAAO,QAAQ,IAAI,qBAAqB;AAC1C;AAEO,SAAS,yBAAyB,QAAwB;AAC/D,SAAO,QAAQ,MAAM,GAAG,KAAK;AAC/B;AAEO,SAAS,sBACd,iBACiC;AACjC,QAAM,SAAS,gBAAgB;AAC/B,MAAI,OAAO,uBAAuB,UAAU,SAAS,eAAe,GAAG;AACrE,WAAO;AAAA,EACT;AACA,MAAI,OAAO,uBAAuB,UAAU,SAAS,eAAe,GAAG;AACrE,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,WACP,MACA,QACA,eACM;AAEN,QAAM,iBAAiB,OAAO;AAAA,IAC5B,OAAO,QAAQ,MAAM,EAAE;AAAA,MACrB,CAAC,CAAC,KAAK,KAAK,MACV,KAAK,UAAU,KAAK,MAAM,KAAK,UAAU,cAAc,GAAc,CAAC;AAAA,IAC1E;AAAA,EACF;AACA,MAAI;AACF,kBAAc,MAAM,KAAK,UAAU,gBAAgB,MAAM,CAAC,GAAG,OAAO;AAAA,EACtE,SAAS,OAAO;AACd,UAAM,MAAM;AACZ,QACE,KAAK,SAAS,YACd,KAAK,SAAS,WACd,KAAK,SAAS,SACd;AACA,kBAAY,MAAM,uBAAuB;AAAA,QACvC;AAAA,QACA,QAAQ,OAAO,IAAI,IAAI;AAAA,MACzB,CAAC;AACD;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;AAGA,IAAI,uBAAuB;AAEpB,SAAS,gBAAsB;AAGpC,yBAAuB;AAEvB;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,UACP,MACA,eACA,gBACG;AAGH,cAAY,MAAM,qBAAqB;AAAA,IACrC;AAAA,IACA,YAAY,OAAO,WAAW,IAAI,CAAC;AAAA,IACnC,gBAAgB,OAAO,CAAC,CAAC,cAAc;AAAA,EACzC,CAAC;AAED,MAAI,CAAC,WAAW,IAAI,GAAG;AACrB,gBAAY,MAAM,uBAAuB;AAAA,MACvC;AAAA,MACA,QAAQ;AAAA,MACR,mBAAmB,OAAO,KAAK,aAAuB,EAAE,KAAK,IAAI;AAAA,IACnE,CAAC;AACD,WAAO,UAAU,aAAa;AAAA,EAChC;AAEA,MAAI;AACF,UAAM,cAAc,aAAa,MAAM,OAAO;AAC9C,gBAAY,MAAM,oBAAoB;AAAA,MACpC;AAAA,MACA,eAAe,OAAO,YAAY,MAAM;AAAA,MACxC,gBACE,YAAY,UAAU,GAAG,GAAG,KAAK,YAAY,SAAS,MAAM,QAAQ;AAAA,IACxE,CAAC;AAED,QAAI;AACF,YAAM,eAAe,KAAK,MAAM,WAAW;AAC3C,kBAAY,MAAM,sBAAsB;AAAA,QACtC;AAAA,QACA,YAAY,OAAO,KAAK,YAAY,EAAE,KAAK,IAAI;AAAA,MACjD,CAAC;AAGD,YAAM,cAAc;AAAA,QAClB,GAAG,UAAU,aAAa;AAAA,QAC1B,GAAG;AAAA,MACL;AAEA,kBAAY,MAAM,uBAAuB;AAAA,QACvC;AAAA,QACA,iBAAiB,OAAO,KAAK,WAAqB,EAAE,KAAK,IAAI;AAAA,MAC/D,CAAC;AAED,aAAO;AAAA,IACT,SAAS,OAAO;AAEd,YAAM,eACJ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAEvD,kBAAY,MAAM,2BAA2B;AAAA,QAC3C;AAAA,QACA;AAAA,QACA,WACE,iBAAiB,QAAQ,MAAM,YAAY,OAAO,OAAO;AAAA,QAC3D,eAAe,OAAO,YAAY,MAAM;AAAA,MAC1C,CAAC;AAED,YAAM,IAAI,iBAAiB,cAAc,MAAM,aAAa;AAAA,IAC9D;AAAA,EACF,SAAS,OAAgB;AAEvB,QAAI,iBAAiB,oBAAoB,gBAAgB;AACvD,kBAAY,MAAM,+BAA+B;AAAA,QAC/C;AAAA,QACA,gBAAgB,OAAO,cAAc;AAAA,QACrC,cAAc,MAAM;AAAA,MACtB,CAAC;AACD,YAAM;AAAA,IACR;AAEA,gBAAY,KAAK,8BAA8B;AAAA,MAC7C;AAAA,MACA,WAAW,iBAAiB,QAAQ,MAAM,YAAY,OAAO,OAAO;AAAA,MACpE,cAAc,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MACnE,QAAQ;AAAA,IACV,CAAC;AAED,WAAO,UAAU,aAAa;AAAA,EAChC;AACF;AAEO,SAAS,0BAAyC;AACvD,MAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,QAAQ,OAAO,CAAC;AACrC,QAAM,SAAS,UAAU,oBAAoB,qBAAqB;AAElE,MAAI,CAAC,OAAO,UAAU;AACpB,WAAO,wBAAwB,YAAY;AAAA,EAC7C;AAEA,QAAM,gBACJ,OAAO,SAAS,YAAY,KAAK,wBAAwB,YAAY;AAGvE,MAAI,OAAO,cAAc,iBAAiB,UAAU;AAClD,kBAAc,eACX,cAAc,cAAc,YAAY,KAAkB,CAAC;AAAA,EAChE;AACA,SAAO;AACT;AAEO,SAAS,yBAAyB,eAAoC;AAC3E,MAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,eAAW,OAAO,eAAe;AAC/B,sCAAgC,GAAG,IAAI,cAAc,GAAG;AAAA,IAC1D;AACA;AAAA,EACF;AACA,QAAM,SAAS,UAAU,oBAAoB,qBAAqB;AAClE;AAAA,IACE;AAAA,IACA;AAAA,MACE,GAAG;AAAA,MACH,UAAU;AAAA,QACR,GAAG,OAAO;AAAA,QACV,CAAC,QAAQ,OAAO,CAAC,CAAC,GAAG;AAAA,MACvB;AAAA,IACF;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,wBAA0C;AAC9D,SAAO,gBAAgB,EAAE,sBAAsB;AACjD;AAEO,MAAM,gCAAiE,CAAC;AAExE,SAAS,6BAAmC;AACjD,MAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,WAAO,KAAK,6BAA6B,EAAE,QAAQ,SAAO;AACxD,aAAO,8BAA8B,GAAG;AAAA,IAC1C,CAAC;AAAA,EACH;AACF;AAEO,SAAS,yBACd,MACA,QACM;AACN,MAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,kCAA8B,IAAI,IAAI;AAAA,EACxC;AACF;AAEO,SAAS,4BAA4B,MAAoB;AAC9D,MAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,QAAI,CAAC,8BAA8B,IAAI,GAAG;AACxC,YAAM,IAAI,MAAM,kCAAkC,IAAI,YAAY;AAAA,IACpE;AACA,WAAO,8BAA8B,IAAI;AAAA,EAC3C;AACF;AAEO,MAAM,iBAAiB;AAAA,EAC5B,MAAuC;AACrC,QAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,aAAO;AAAA,IACT;AAEA,UAAM,YAAY,KAAK,OAAO,GAAG,QAAQ;AACzC,QAAI,CAAC,WAAW,SAAS,GAAG;AAC1B,aAAO,CAAC;AAAA,IACV;AAEA,QAAI;AACF,YAAM,eAAe,aAAa,WAAW,OAAO;AACpD,YAAM,SAAS,cAAc,YAAY;AACzC,UAAI,UAAU,OAAO,WAAW,UAAU;AAExC,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAER;AACA,WAAO,CAAC;AAAA,EACV;AAAA;AAAA,EAEA,MAAM;AACJ,UAAM,MAAM,OAAO;AACnB,UAAM,YAAY,KAAK,KAAK,QAAQ;AACpC,QAAI,WAAW,SAAS,GAAG;AACzB,UAAI;AACF,cAAM,OAAO,aAAa,WAAW,OAAO;AAC5C,eAAO,GAAG,GAAG,IAAI,IAAI;AAAA,MACvB,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AAEO,SAAS,oBAA4B;AAC1C,QAAM,SAAS,gBAAgB;AAC/B,MAAI,OAAO,QAAQ;AACjB,WAAO,OAAO;AAAA,EAChB;AAEA,QAAM,SAAS,YAAY,EAAE,EAAE,SAAS,KAAK;AAC7C,mBAAiB,EAAE,GAAG,QAAQ,OAAO,CAAC;AACtC,SAAO;AACT;AAEO,SAAS,gBAAgB,KAAa,QAA0B;AACrE,MAAI,QAAQ;AACV,QAAI,CAAC,kBAAkB,GAAG,GAAG;AAC3B,cAAQ;AAAA,QACN,WAAW,GAAG,gDAAgD,mBAAmB,KAAK,IAAI,CAAC;AAAA,MAC7F;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,WAAO,gBAAgB,EAAE,GAAG;AAAA,EAC9B,OAAO;AACL,QAAI,CAAC,mBAAmB,GAAG,GAAG;AAC5B,cAAQ;AAAA,QACN,WAAW,GAAG,gDAAgD,oBAAoB,KAAK,IAAI,CAAC;AAAA,MAC9F;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,WAAO,wBAAwB,EAAE,GAAG;AAAA,EACtC;AACF;AAEO,SAAS,gBACd,KACA,OACA,QACM;AACN,MAAI,QAAQ;AACV,QAAI,CAAC,kBAAkB,GAAG,GAAG;AAC3B,cAAQ;AAAA,QACN,sBAAsB,GAAG,uCAAuC,mBAAmB,KAAK,IAAI,CAAC;AAAA,MAC/F;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,QAAI,QAAQ,uBAAuB,CAAC,oBAAoB,KAAe,GAAG;AACxE,cAAQ;AAAA,QACN;AAAA,MACF;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,UAAM,gBAAgB,gBAAgB;AACtC,qBAAiB;AAAA,MACf,GAAG;AAAA,MACH,CAAC,GAAG,GAAG;AAAA,IACT,CAAC;AAAA,EACH,OAAO;AACL,QAAI,CAAC,mBAAmB,GAAG,GAAG;AAC5B,cAAQ;AAAA,QACN,sBAAsB,GAAG,uCAAuC,oBAAoB,KAAK,IAAI,CAAC;AAAA,MAChG;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,UAAM,gBAAgB,wBAAwB;AAC9C,6BAAyB;AAAA,MACvB,GAAG;AAAA,MACH,CAAC,GAAG,GAAG;AAAA,IACT,CAAC;AAAA,EACH;AAEA,aAAW,MAAM;AAEf,YAAQ,KAAK,CAAC;AAAA,EAChB,GAAG,GAAG;AACR;AAEO,SAAS,mBAAmB,KAAa,QAAuB;AACrE,MAAI,QAAQ;AACV,QAAI,CAAC,kBAAkB,GAAG,GAAG;AAC3B,cAAQ;AAAA,QACN,yBAAyB,GAAG,uCAAuC,mBAAmB,KAAK,IAAI,CAAC;AAAA,MAClG;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,UAAM,gBAAgB,gBAAgB;AACtC,WAAO,cAAc,GAAG;AACxB,qBAAiB,aAAa;AAAA,EAChC,OAAO;AACL,QAAI,CAAC,mBAAmB,GAAG,GAAG;AAC5B,cAAQ;AAAA,QACN,yBAAyB,GAAG,uCAAuC,oBAAoB,KAAK,IAAI,CAAC;AAAA,MACnG;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,UAAM,gBAAgB,wBAAwB;AAC9C,WAAO,cAAc,GAAG;AACxB,6BAAyB,aAAa;AAAA,EACxC;AACF;AAIO,SAAS,iBAAiB,QAAyB;AACxD,MAAI,QAAQ;AACV,UAAM,gBAAgB,KAAK,gBAAgB,GAAG,kBAAkB;AAChE,WAAO;AAAA,EACT,OAAO;AACL,WAAO,KAAK,wBAAwB,GAAG,mBAAmB;AAAA,EAC5D;AACF;AAEO,SAAS,kBAAsC;AACpD,SAAO,QAAQ,IAAI;AACrB;AAGA,SAAS,6BAA6B,QAAoC;AACxE,MAAI,CAAC,OAAO,cAAe,QAAO;AAGlC,QAAM,eAAe;AAGrB,QAAM,mBAAmB,oBAAI,IAAoB;AACjD,QAAM,mBAAmB,OAAO,cAAc,IAAI,aAAW;AAE3D,UAAM,gBAAgB;AAEtB,QAAI,cAAc,MAAM,QAAQ,WAAW;AACzC,uBAAiB,IAAI,cAAc,IAAI,QAAQ,SAAS;AAAA,IAC1D;AAGA,UAAM,EAAE,IAAI,GAAG,iBAAiB,IAAI;AACpC,WAAO;AAAA,EACT,CAAC;AAGD,QAAM,mBAAkC;AAAA,IACtC,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,SAAS;AAAA,EACX;AAEA,MAAI,OAAO,eAAe;AACxB,WAAO,QAAQ,OAAO,aAAa,EAAE,QAAQ,CAAC,CAAC,SAAS,KAAK,MAAM;AACjE,UAAI,OAAO;AAET,cAAM,YAAY,iBAAiB,IAAI,KAAK,KAAK;AACjD,yBAAiB,OAA2B,IAAI;AAAA,MAClD;AAAA,IACF,CAAC;AAAA,EACH;AAGA,MAAI;AACJ,MAAI,aAAa,gBAAgB;AAC/B,uBACE,iBAAiB,IAAI,aAAa,cAAc,KAChD,aAAa;AAAA,EACjB,WAAW,aAAa,kBAAkB;AACxC,uBAAmB,aAAa;AAAA,EAClC;AAGA,QAAM,iBAAmE;AAAA,IACvE,GAAG;AAAA,EACL;AACA,SAAO,eAAe;AACtB,SAAO,eAAe;AACtB,SAAO,eAAe;AACtB,SAAO,eAAe;AAEtB,SAAO;AAAA,IACL,GAAG;AAAA,IACH,eAAe;AAAA,IACf,eAAe;AAAA,IACf;AAAA,EACF;AACF;AAIO,SAAS,sBAAsB,WAAyB;AAC7D,QAAM,SAAS,gBAAgB;AAC/B,QAAM,gBAAgB;AAAA,IACpB,GAAG;AAAA,IACH,eAAe;AAAA,MACb,MAAM;AAAA,MACN,MAAM;AAAA,MACN,WAAW;AAAA,MACX,OAAO;AAAA,MACP,SAAS;AAAA,IACX;AAAA,IACA,kBAAkB;AAAA,EACpB;AACA,mBAAiB,aAAa;AAChC;AAEO,SAAS,gBACd,SACA,WACM;AACN,QAAM,SAAS,gBAAgB;AAC/B,QAAM,gBAAgB;AAAA,IACpB,GAAG;AAAA,IACH,eAAe;AAAA,MACb,GAAG,OAAO;AAAA,MACV,CAAC,OAAO,GAAG;AAAA,IACb;AAAA,EACF;AACA,mBAAiB,aAAa;AAI9B,SAAO,SAAS,EAAE,KAAK,CAAC,EAAE,mBAAmB,MAAM;AACjD,uBAAmB;AAAA,EACrB,CAAC;AACH;AAOO,SAAS,gBAAgB,WAA4B;AAC1D,MAAI,CAAC,aAAa,OAAO,cAAc,SAAU,QAAO;AACxD,QAAM,YAAY,UAAU,YAAY;AACxC,SAAO,UAAU,WAAW,OAAO,KAAK,UAAU,SAAS,OAAO;AACpE;AAKO,SAAS,6BACd,SACc;AACd,QAAM,SAAS,gBAAgB,QAAQ,SAAS;AAChD,QAAM,MAAM,KAAK,IAAI;AAGrB,QAAM,kBAAgC,EAAE,GAAG,QAAQ;AACnD,MAAI,cAAc;AAGlB,MAAI,WAAW,QAAQ,QAAQ;AAC7B,oBAAgB,SAAS;AACzB,kBAAc;AAAA,EAChB;AAEA,MAAI,QAAQ;AAIV,UAAM,wBAAwB,CAAC,WAAW,OAAO,UAAU,MAAM;AACjE,QACE,CAAC,QAAQ,mBACT,CAAC,sBAAsB,SAAS,QAAQ,eAAe,GACvD;AACA,sBAAgB,kBAAkB;AAClC,oBAAc;AACd,cAAQ;AAAA,QACN,gEAAyD,QAAQ,SAAS;AAAA,MAC5E;AAAA,IACF;AAGA,QAAI,QAAQ,gBAAgB,OAAQ;AAClC,sBAAgB,gBAAgB;AAChC,oBAAc;AACd,cAAQ;AAAA,QACN,8DAAuD,QAAQ,SAAS;AAAA,MAC1E;AAAA,IACF;AAGA,QAAI,QAAQ,YAAY,KAAM;AAC5B,sBAAgB,YAAY;AAC5B,oBAAc;AACd,cAAQ;AAAA,QACN,0DAAmD,QAAQ,SAAS;AAAA,MACtE;AAAA,IACF;AAGA,QACE,QAAQ,aAAa,YACrB,QAAQ,aAAa,mBACrB,QAAQ,aAAa,SACrB;AACA,cAAQ;AAAA,QACN,oDAA0C,QAAQ,QAAQ,qBAAqB,QAAQ,SAAS;AAAA,MAClG;AAAA,IACF;AAGA,QAAI,QAAQ,UAAU,SAAS,OAAO,KAAK,CAAC,QAAQ,SAAS;AAC3D,sBAAgB,UAAU;AAC1B,oBAAc;AACd,cAAQ;AAAA,QACN,oDAA6C,QAAQ,SAAS;AAAA,MAChE;AAAA,IACF;AAAA,EACF;AAGA,kBAAgB,mBAAmB,cAAc,kBAAkB;AACnE,kBAAgB,iBAAiB;AAEjC,MAAI,aAAa;AACf,YAAQ;AAAA,MACN,wDAAmD,QAAQ,SAAS;AAAA,IACtE;AAAA,EACF;AAEA,SAAO;AACT;AAKO,SAAS,mCAGd;AACA,QAAM,SAAS,gBAAgB;AAC/B,MAAI,CAAC,OAAO,eAAe;AACzB,WAAO,EAAE,UAAU,GAAG,OAAO,EAAE;AAAA,EACjC;AAEA,MAAI,cAAc;AAClB,QAAM,mBAAmB,OAAO,cAAc,IAAI,aAAW;AAC3D,UAAM,kBAAkB,6BAA6B,OAAO;AAC5D,QAAI,gBAAgB,qBAAqB,iBAAiB;AACxD;AAAA,IACF;AACA,WAAO;AAAA,EACT,CAAC;AAGD,MAAI,cAAc,GAAG;AACnB,UAAM,gBAAgB;AAAA,MACpB,GAAG;AAAA,MACH,eAAe;AAAA,IACjB;AACA,qBAAiB,aAAa;AAC9B,YAAQ,IAAI,yCAAkC,WAAW,iBAAiB;AAAA,EAC5E;AAEA,SAAO,EAAE,UAAU,aAAa,OAAO,OAAO,cAAc,OAAO;AACrE;AAKO,SAAS,6BACd,WACuB;AACvB,MAAI,CAAC,gBAAgB,SAAS,GAAG;AAC/B,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,kBAAyC;AAAA,IAC7C,eAAe;AAAA;AAAA,IACf,WAAW;AAAA;AAAA,IACX,iBAAiB;AAAA;AAAA,IACjB,QAAQ;AAAA,EACV;AAGA,MAAI,UAAU,SAAS,YAAY,GAAG;AACpC,oBAAgB,YAAY;AAC5B,oBAAgB,kBAAkB;AAAA,EACpC,WAAW,UAAU,SAAS,YAAY,GAAG;AAC3C,oBAAgB,YAAY;AAC5B,oBAAgB,kBAAkB;AAAA,EACpC;AAEA,SAAO;AACT;AAKO,SAAS,uBACd,MACA,WACA,QACA,SACA,WAAyB,UACX;AACd,QAAM,kBAAkB,6BAA6B,SAAS;AAE9D,QAAM,UAAwB;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,WAAW;AAAA,IACpB;AAAA,IACA,WAAW,gBAAgB,aAAa;AAAA,IACxC,eAAe,gBAAgB,iBAAiB;AAAA,IAChD,iBAAiB,gBAAgB,mBAAmB;AAAA,IACpD,UAAU;AAAA,IACV,WAAW,KAAK,IAAI;AAAA,IACpB,QAAQ;AAAA,IACR,kBAAkB;AAAA,IAClB,gBAAgB,KAAK,IAAI;AAAA,EAC3B;AAEA,UAAQ,IAAI,uCAAkC,IAAI,KAAK,SAAS,GAAG;AACnE,SAAO;AACT;",
+  "sourcesContent": ["import { existsSync, readFileSync, writeFileSync, renameSync, rmSync } from 'fs'\nimport { resolve, join, dirname } from 'path'\nimport { cloneDeep, memoize, pick } from 'lodash-es'\nimport { homedir } from 'os'\nimport { GLOBAL_CONFIG_FILE } from './env'\nimport { getCwd } from './state'\nimport { randomBytes } from 'crypto'\nimport { safeParseJSON } from './json'\nimport { ConfigParseError } from './errors'\nimport type { ThemeNames } from './theme'\nimport { debug as debugLogger } from './debugLogger'\nimport { getSessionState, setSessionState } from './sessionState'\nimport type { CompressionMode } from '@constants/compressionPrompts'\n\nexport type McpStdioServerConfig = {\n  type?: 'stdio' // Optional for backwards compatibility\n  command: string\n  args: string[]\n  env?: Record<string, string>\n  enabled?: boolean\n}\n\nexport type McpSSEServerConfig = {\n  type: 'sse'\n  url: string\n  enabled?: boolean\n}\n\nexport type McpServerConfig = McpStdioServerConfig | McpSSEServerConfig\n\n/**\n * Sandbox configuration for project-level security settings\n */\nexport type SandboxConfigData = {\n  /** Whether sandboxing is enabled */\n  enabled: boolean\n  /** Filesystem access policy */\n  filesystem?: {\n    writeAllowed?: string[]\n    readAllowed?: string[]\n    denied?: string[]\n  }\n  /** Network access policy */\n  network?: {\n    allowedDomains?: string[]\n    promptForNewDomains?: boolean\n    blockAll?: boolean\n  }\n  /** Process isolation policy */\n  process?: {\n    excludedCommands?: string[]\n    maxExecutionTime?: number\n  }\n}\n\nexport type ProjectConfig = {\n  allowedTools: string[]\n  context: Record<string, string>\n  contextFiles?: string[]\n  history: string[]\n  dontCrawlDirectory?: boolean\n  enableArchitectTool?: boolean\n  mcpContextUris: string[]\n  mcpServers?: Record<string, McpServerConfig>\n  approvedMcprcServers?: string[]\n  rejectedMcprcServers?: string[]\n  lastAPIDuration?: number\n  lastCost?: number\n  lastDuration?: number\n  lastSessionId?: string\n  exampleFiles?: string[]\n  exampleFilesGeneratedAt?: number\n  hasTrustDialogAccepted?: boolean\n  hasCompletedProjectOnboarding?: boolean\n  /** Sandbox configuration for command execution isolation */\n  sandbox?: SandboxConfigData\n}\n\nconst DEFAULT_PROJECT_CONFIG: ProjectConfig = {\n  allowedTools: [],\n  context: {},\n  history: [],\n  dontCrawlDirectory: false,\n  enableArchitectTool: false,\n  mcpContextUris: [],\n  mcpServers: {},\n  approvedMcprcServers: [],\n  rejectedMcprcServers: [],\n  hasTrustDialogAccepted: false,\n}\n\nfunction defaultConfigForProject(projectPath: string): ProjectConfig {\n  const config = { ...DEFAULT_PROJECT_CONFIG }\n  if (projectPath === homedir()) {\n    config.dontCrawlDirectory = true\n  }\n  return config\n}\n\nexport type AutoUpdaterStatus =\n  | 'disabled'\n  | 'enabled'\n  | 'no_permissions'\n  | 'not_configured'\n\nexport function isAutoUpdaterStatus(value: string): value is AutoUpdaterStatus {\n  return ['disabled', 'enabled', 'no_permissions', 'not_configured'].includes(\n    value as AutoUpdaterStatus,\n  )\n}\n\nexport type NotificationChannel =\n  | 'iterm2'\n  | 'terminal_bell'\n  | 'iterm2_with_bell'\n  | 'notifications_disabled'\n\n/**\n * @deprecated Use verbose boolean instead. Kept for backward compatibility migration.\n */\nexport type DisplayMode = 'minimal' | 'compact' | 'detailed'\n\n/**\n * Supported UI languages\n */\nexport type UILanguage = 'en' | 'zh-CN'\n\n/**\n * Safety mode for tool execution\n * - 'yolo': All tools allowed without confirmation (default for non-technical users)\n * - 'smart': Safe/monitored tools auto-allowed, dangerous tools need confirmation\n * - 'strict': Only safe tools auto-allowed, all others need confirmation\n */\nexport type SafetyMode = 'yolo' | 'smart' | 'strict'\n\n/**\n * Get verbose mode label (uses i18n)\n * Import dynamically to avoid circular dependency\n */\nexport function getVerboseLabel(verbose: boolean): string {\n  // Dynamic import to avoid circular dependency at module load time\n  try {\n    const { t } = require('../i18n')\n    return verbose ? t('ui.verbose.on') : t('ui.verbose.off')\n  } catch {\n    // Fallback if i18n not loaded yet\n    return verbose ? 'Verbose: On' : 'Verbose: Off'\n  }\n}\n\n/**\n * @deprecated Use getVerboseLabel() instead\n */\nexport function getDisplayModeLabel(mode: DisplayMode): string {\n  return mode === 'detailed' ? 'Verbose: On' : 'Verbose: Off'\n}\n\n/**\n * @deprecated No longer needed - use verbose boolean directly\n */\nexport const DISPLAY_MODE_LABELS: Record<DisplayMode, string> = {\n  minimal: 'Verbose: Off',\n  compact: 'Verbose: Off',\n  detailed: 'Verbose: On',\n}\n\n/**\n * @deprecated Use !verbose instead\n */\nexport function getNextDisplayMode(current: DisplayMode): DisplayMode {\n  // Simply toggle between compact (off) and detailed (on)\n  return current === 'detailed' ? 'compact' : 'detailed'\n}\n\n/**\n * Convert displayMode to verbose boolean for backward compatibility\n * @deprecated Components should use verbose directly\n */\nexport function displayModeToVerbose(mode: DisplayMode): boolean {\n  return mode === 'detailed'\n}\n\n/**\n * Convert verbose boolean to displayMode for backward compatibility\n */\nexport function verboseToDisplayMode(verbose: boolean): DisplayMode {\n  return verbose ? 'detailed' : 'compact'\n}\n\nexport type ProviderType =\n  | 'anthropic'\n  | 'openai'\n  | 'mistral'\n  | 'deepseek'\n  | 'kimi'\n  | 'qwen'\n  | 'glm'\n  | 'minimax'\n  | 'baidu-qianfan'\n  | 'siliconflow'\n  | 'bigdream'\n  | 'opendev'\n  | 'xai'\n  | 'groq'\n  | 'gemini'\n  | 'ollama'\n  | 'azure'\n  | 'custom'\n  | 'custom-openai'\n\n// New model system types\nexport type ModelProfile = {\n  name: string // User-friendly name\n  provider: ProviderType // Provider type\n  modelName: string // Primary key - actual model identifier\n  baseURL?: string // Custom endpoint\n  apiKey: string\n  maxTokens: number // Output token limit (for GPT-5, this maps to max_completion_tokens)\n  contextLength: number // Context window size\n  reasoningEffort?: 'low' | 'medium' | 'high' | 'minimal' | 'medium'\n  isActive: boolean // Whether profile is enabled\n  createdAt: number // Creation timestamp\n  lastUsed?: number // Last usage timestamp\n  // \uD83D\uDD25 GPT-5 specific metadata\n  isGPT5?: boolean // Auto-detected GPT-5 model flag\n  validationStatus?: 'valid' | 'needs_repair' | 'auto_repaired' // Configuration status\n  lastValidation?: number // Last validation timestamp\n}\n\n// Legacy type for config migration - includes deprecated 'id' field\ntype LegacyModelProfile = ModelProfile & {\n  id?: string\n}\n\n// Legacy global config fields for migration\ntype LegacyGlobalConfigFields = {\n  defaultModelId?: string\n  defaultModelName?: string\n  currentSelectedModelId?: string\n  mainAgentModelId?: string\n  taskToolModelId?: string\n}\n\nexport type ModelPointerType =\n  | 'main'\n  | 'task'\n  | 'reasoning'\n  | 'quick'\n  | 'compact'\n\nexport type ModelPointers = {\n  main: string // Main dialog model ID\n  task: string // Task tool model ID\n  reasoning: string // Reasoning model ID\n  quick: string // Quick model ID\n  compact: string // Compact/summary model ID (for context compression)\n}\n\nexport type AccountInfo = {\n  accountUuid: string\n  emailAddress: string\n  organizationUuid?: string\n}\n\nexport type GlobalConfig = {\n  projects?: Record<string, ProjectConfig>\n  numStartups: number\n  autoUpdaterStatus?: AutoUpdaterStatus\n  userID?: string\n  theme: ThemeNames\n  hasCompletedOnboarding?: boolean\n  // Tracks the last version that reset onboarding, used with MIN_VERSION_REQUIRING_ONBOARDING_RESET\n  lastOnboardingVersion?: string\n  // Tracks the last version for which release notes were seen, used for managing release notes\n  lastReleaseNotesSeen?: string\n  mcpServers?: Record<string, McpServerConfig>\n  preferredNotifChannel: NotificationChannel\n  /**\n   * Verbose mode: shows full parameters and complete outputs when enabled\n   * - false: Concise output (default)\n   * - true: Detailed/verbose output\n   */\n  verbose: boolean\n  /**\n   * @deprecated Use verbose boolean instead. Kept for backward compatibility migration.\n   */\n  displayMode?: DisplayMode\n  customApiKeyResponses?: {\n    approved?: string[]\n    rejected?: string[]\n  }\n  primaryProvider?: ProviderType\n  maxTokens?: number\n  hasAcknowledgedCostThreshold?: boolean\n  oauthAccount?: AccountInfo\n  iterm2KeyBindingInstalled?: boolean // Legacy - keeping for backward compatibility\n  shiftEnterKeyBindingInstalled?: boolean\n  proxy?: string\n  stream?: boolean\n\n  // New model system\n  modelProfiles?: ModelProfile[] // Model configuration list\n  modelPointers?: ModelPointers // Model pointer system\n  defaultModelName?: string // Default model\n  // Update notifications\n  lastDismissedUpdateVersion?: string\n  // Compression mode\n  compressionMode?: CompressionMode // Compression algorithm mode ('business' or 'code')\n  // Thinking mode (Phase 4.2)\n  thinking?: boolean // Whether thinking/extended reasoning mode is enabled\n  // UI Language\n  language?: UILanguage // UI language ('en' or 'zh-CN')\n  /**\n   * @deprecated Use safetyMode instead. Kept for backward compatibility.\n   * Safe mode: when enabled, requires user confirmation for all tool executions\n   */\n  safeMode?: boolean\n  /**\n   * Safety mode for tool execution (new 3-tier system):\n   * - 'yolo': All tools allowed without confirmation (default for non-technical users)\n   * - 'smart': Safe/monitored tools auto-allowed, dangerous tools need confirmation\n   * - 'strict': Only safe tools auto-allowed, all others need confirmation\n   */\n  safetyMode?: SafetyMode\n}\n\nexport const DEFAULT_GLOBAL_CONFIG: GlobalConfig = {\n  numStartups: 0,\n  autoUpdaterStatus: 'not_configured',\n  theme: 'dark' as ThemeNames,\n  preferredNotifChannel: 'iterm2',\n  verbose: false,\n  primaryProvider: 'anthropic' as ProviderType,\n  customApiKeyResponses: {\n    approved: [],\n    rejected: [],\n  },\n  stream: true,\n\n  // New model system defaults\n  modelProfiles: [],\n  modelPointers: {\n    main: '',\n    task: '',\n    reasoning: '',\n    quick: '',\n    compact: '',\n  },\n  lastDismissedUpdateVersion: undefined,\n  compressionMode: 'business', // Default to business consulting compression\n  thinking: false, // Default to thinking mode off (Phase 4.2)\n  language: 'en', // Default to English\n  safeMode: false, // Deprecated: use safetyMode instead\n  safetyMode: 'yolo', // Default to YOLO mode for non-technical users (zero interruption)\n}\n\nexport const GLOBAL_CONFIG_KEYS = [\n  'autoUpdaterStatus',\n  'theme',\n  'hasCompletedOnboarding',\n  'lastOnboardingVersion',\n  'lastReleaseNotesSeen',\n  'verbose',\n  'customApiKeyResponses',\n  'primaryProvider',\n  'preferredNotifChannel',\n  'shiftEnterKeyBindingInstalled',\n  'maxTokens',\n  'compressionMode',\n  'language',\n  'safetyMode',\n] as const\n\nexport type GlobalConfigKey = (typeof GLOBAL_CONFIG_KEYS)[number]\n\nexport function isGlobalConfigKey(key: string): key is GlobalConfigKey {\n  return GLOBAL_CONFIG_KEYS.includes(key as GlobalConfigKey)\n}\n\nexport const PROJECT_CONFIG_KEYS = [\n  'dontCrawlDirectory',\n  'enableArchitectTool',\n  'hasTrustDialogAccepted',\n  'hasCompletedProjectOnboarding',\n] as const\n\nexport type ProjectConfigKey = (typeof PROJECT_CONFIG_KEYS)[number]\n\nexport function checkHasTrustDialogAccepted(): boolean {\n  let currentPath = getCwd()\n  const config = getConfig(GLOBAL_CONFIG_FILE, DEFAULT_GLOBAL_CONFIG)\n\n  while (true) {\n    const projectConfig = config.projects?.[currentPath]\n    if (projectConfig?.hasTrustDialogAccepted) {\n      return true\n    }\n    const parentPath = resolve(currentPath, '..')\n    // Stop if we've reached the root (when parent is same as current)\n    if (parentPath === currentPath) {\n      break\n    }\n    currentPath = parentPath\n  }\n\n  return false\n}\n\n// We have to put this test code here because Jest doesn't support mocking ES modules :O\nconst TEST_GLOBAL_CONFIG_FOR_TESTING: GlobalConfig = {\n  ...DEFAULT_GLOBAL_CONFIG,\n  autoUpdaterStatus: 'disabled',\n}\nconst TEST_PROJECT_CONFIG_FOR_TESTING: ProjectConfig = {\n  ...DEFAULT_PROJECT_CONFIG,\n}\n\nexport function isProjectConfigKey(key: string): key is ProjectConfigKey {\n  return PROJECT_CONFIG_KEYS.includes(key as ProjectConfigKey)\n}\n\nexport function saveGlobalConfig(config: GlobalConfig): void {\n  if (process.env.NODE_ENV === 'test') {\n    for (const key in config) {\n      TEST_GLOBAL_CONFIG_FOR_TESTING[key] = config[key]\n    }\n    return\n  }\n\n  // \u76F4\u63A5\u4FDD\u5B58\u914D\u7F6E\uFF08\u65E0\u9700\u6E05\u9664\u7F13\u5B58\uFF0C\u56E0\u4E3A\u5DF2\u79FB\u9664\u7F13\u5B58\uFF09\n  saveConfig(\n    GLOBAL_CONFIG_FILE,\n    {\n      ...config,\n      projects: getConfig(GLOBAL_CONFIG_FILE, DEFAULT_GLOBAL_CONFIG).projects,\n    },\n    DEFAULT_GLOBAL_CONFIG,\n  )\n}\n\n/**\n * Migrate legacy displayMode to verbose boolean\n */\nfunction migrateDisplayModeToVerbose(config: GlobalConfig): GlobalConfig {\n  // If verbose is already set, no migration needed\n  if (config.verbose !== undefined) {\n    return config\n  }\n\n  // Check for legacy displayMode field\n  const legacyConfig = config as GlobalConfig & { displayMode?: DisplayMode }\n  if (legacyConfig.displayMode !== undefined) {\n    const migratedConfig: GlobalConfig = {\n      ...config,\n      verbose: legacyConfig.displayMode === 'detailed',\n    }\n    // Remove legacy field\n    delete (migratedConfig as any).displayMode\n    return migratedConfig\n  }\n\n  // Default to false if no verbose or displayMode\n  return {\n    ...config,\n    verbose: false,\n  }\n}\n\n// \u4E34\u65F6\u79FB\u9664\u7F13\u5B58\uFF0C\u786E\u4FDD\u603B\u662F\u83B7\u53D6\u6700\u65B0\u914D\u7F6E\nexport function getGlobalConfig(): GlobalConfig {\n  if (process.env.NODE_ENV === 'test') {\n    return TEST_GLOBAL_CONFIG_FOR_TESTING\n  }\n  const config = getConfig(GLOBAL_CONFIG_FILE, DEFAULT_GLOBAL_CONFIG)\n  const migratedConfig = migrateModelProfilesRemoveId(config)\n  return migrateDisplayModeToVerbose(migratedConfig)\n}\n\nexport function getAnthropicApiKey(): null | string {\n  return process.env.ANTHROPIC_API_KEY || null\n}\n\nexport function normalizeApiKeyForConfig(apiKey: string): string {\n  return apiKey?.slice(-20) ?? ''\n}\n\nexport function getCustomApiKeyStatus(\n  truncatedApiKey: string,\n): 'approved' | 'rejected' | 'new' {\n  const config = getGlobalConfig()\n  if (config.customApiKeyResponses?.approved?.includes(truncatedApiKey)) {\n    return 'approved'\n  }\n  if (config.customApiKeyResponses?.rejected?.includes(truncatedApiKey)) {\n    return 'rejected'\n  }\n  return 'new'\n}\n\n/**\n * Atomically write content to a file using temp file + rename pattern.\n * This prevents data corruption if writes are interrupted or multiple processes\n * attempt to write concurrently.\n *\n * @param filePath - The target file path to write to\n * @param content - The content to write\n * @throws {Error} If write or rename operation fails\n */\nfunction atomicWriteFileSync(filePath: string, content: string): void {\n  const dir = dirname(filePath)\n  const tempPath = join(\n    dir,\n    `.${Date.now()}-${Math.random().toString(36).slice(2)}.tmp`,\n  )\n\n  try {\n    // Write to temporary file\n    writeFileSync(tempPath, content, 'utf-8')\n    // Atomically rename temp to target (atomic on most filesystems)\n    renameSync(tempPath, filePath)\n  } catch (error) {\n    // Clean up temporary file on failure\n    try {\n      rmSync(tempPath, { force: true })\n    } catch {\n      // Ignore cleanup errors\n    }\n    throw error\n  }\n}\n\nfunction saveConfig<A extends object>(\n  file: string,\n  config: A,\n  defaultConfig: A,\n): void {\n  // Filter out any values that match the defaults\n  const filteredConfig = Object.fromEntries(\n    Object.entries(config).filter(\n      ([key, value]) =>\n        JSON.stringify(value) !== JSON.stringify(defaultConfig[key as keyof A]),\n    ),\n  )\n  try {\n    atomicWriteFileSync(file, JSON.stringify(filteredConfig, null, 2))\n  } catch (error) {\n    const err = error as NodeJS.ErrnoException\n    if (\n      err?.code === 'EACCES' ||\n      err?.code === 'EPERM' ||\n      err?.code === 'EROFS'\n    ) {\n      debugLogger.state('CONFIG_SAVE_SKIPPED', {\n        file,\n        reason: String(err.code),\n      })\n      return\n    }\n    throw error\n  }\n}\n\n// Flag to track if config reading is allowed\nlet configReadingAllowed = false\n\nexport function enableConfigs(): void {\n  // Any reads to configuration before this flag is set show an console warning\n  // to prevent us from adding config reading during module initialization\n  configReadingAllowed = true\n  // We only check the global config because currently all the configs share a file\n  getConfig(\n    GLOBAL_CONFIG_FILE,\n    DEFAULT_GLOBAL_CONFIG,\n    true /* throw on invalid */,\n  )\n}\n\nfunction getConfig<A>(\n  file: string,\n  defaultConfig: A,\n  throwOnInvalid?: boolean,\n): A {\n  // \u7B80\u5316\u914D\u7F6E\u8BBF\u95EE\u903B\u8F91\uFF0C\u79FB\u9664\u590D\u6742\u7684\u65F6\u5E8F\u68C0\u67E5\n\n  debugLogger.state('CONFIG_LOAD_START', {\n    file,\n    fileExists: String(existsSync(file)),\n    throwOnInvalid: String(!!throwOnInvalid),\n  })\n\n  if (!existsSync(file)) {\n    debugLogger.state('CONFIG_LOAD_DEFAULT', {\n      file,\n      reason: 'file_not_exists',\n      defaultConfigKeys: Object.keys(defaultConfig as object).join(', '),\n    })\n    return cloneDeep(defaultConfig)\n  }\n\n  try {\n    const fileContent = readFileSync(file, 'utf-8')\n    debugLogger.state('CONFIG_FILE_READ', {\n      file,\n      contentLength: String(fileContent.length),\n      contentPreview:\n        fileContent.substring(0, 100) + (fileContent.length > 100 ? '...' : ''),\n    })\n\n    try {\n      const parsedConfig = JSON.parse(fileContent)\n      debugLogger.state('CONFIG_JSON_PARSED', {\n        file,\n        parsedKeys: Object.keys(parsedConfig).join(', '),\n      })\n\n      // Handle backward compatibility - remove logic for deleted fields\n      const finalConfig = {\n        ...cloneDeep(defaultConfig),\n        ...parsedConfig,\n      }\n\n      debugLogger.state('CONFIG_LOAD_SUCCESS', {\n        file,\n        finalConfigKeys: Object.keys(finalConfig as object).join(', '),\n      })\n\n      return finalConfig\n    } catch (error) {\n      // Throw a ConfigParseError with the file path and default config\n      const errorMessage =\n        error instanceof Error ? error.message : String(error)\n\n      debugLogger.error('CONFIG_JSON_PARSE_ERROR', {\n        file,\n        errorMessage,\n        errorType:\n          error instanceof Error ? error.constructor.name : typeof error,\n        contentLength: String(fileContent.length),\n      })\n\n      throw new ConfigParseError(errorMessage, file, defaultConfig)\n    }\n  } catch (error: unknown) {\n    // Re-throw ConfigParseError if throwOnInvalid is true\n    if (error instanceof ConfigParseError && throwOnInvalid) {\n      debugLogger.error('CONFIG_PARSE_ERROR_RETHROWN', {\n        file,\n        throwOnInvalid: String(throwOnInvalid),\n        errorMessage: error.message,\n      })\n      throw error\n    }\n\n    debugLogger.warn('CONFIG_FALLBACK_TO_DEFAULT', {\n      file,\n      errorType: error instanceof Error ? error.constructor.name : typeof error,\n      errorMessage: error instanceof Error ? error.message : String(error),\n      action: 'using_default_config',\n    })\n\n    return cloneDeep(defaultConfig)\n  }\n}\n\nexport function getCurrentProjectConfig(): ProjectConfig {\n  if (process.env.NODE_ENV === 'test') {\n    return TEST_PROJECT_CONFIG_FOR_TESTING\n  }\n\n  const absolutePath = resolve(getCwd())\n  const config = getConfig(GLOBAL_CONFIG_FILE, DEFAULT_GLOBAL_CONFIG)\n\n  if (!config.projects) {\n    return defaultConfigForProject(absolutePath)\n  }\n\n  const projectConfig =\n    config.projects[absolutePath] ?? defaultConfigForProject(absolutePath)\n  // Not sure how this became a string\n  // TODO: Fix upstream\n  if (typeof projectConfig.allowedTools === 'string') {\n    projectConfig.allowedTools =\n      (safeParseJSON(projectConfig.allowedTools) as string[]) ?? []\n  }\n  return projectConfig\n}\n\nexport function saveCurrentProjectConfig(projectConfig: ProjectConfig): void {\n  if (process.env.NODE_ENV === 'test') {\n    for (const key in projectConfig) {\n      TEST_PROJECT_CONFIG_FOR_TESTING[key] = projectConfig[key]\n    }\n    return\n  }\n  const config = getConfig(GLOBAL_CONFIG_FILE, DEFAULT_GLOBAL_CONFIG)\n  saveConfig(\n    GLOBAL_CONFIG_FILE,\n    {\n      ...config,\n      projects: {\n        ...config.projects,\n        [resolve(getCwd())]: projectConfig,\n      },\n    },\n    DEFAULT_GLOBAL_CONFIG,\n  )\n}\n\nexport async function isAutoUpdaterDisabled(): Promise<boolean> {\n  return getGlobalConfig().autoUpdaterStatus === 'disabled'\n}\n\nexport const TEST_MCPRC_CONFIG_FOR_TESTING: Record<string, McpServerConfig> = {}\n\nexport function clearMcprcConfigForTesting(): void {\n  if (process.env.NODE_ENV === 'test') {\n    Object.keys(TEST_MCPRC_CONFIG_FOR_TESTING).forEach(key => {\n      delete TEST_MCPRC_CONFIG_FOR_TESTING[key]\n    })\n  }\n}\n\nexport function addMcprcServerForTesting(\n  name: string,\n  server: McpServerConfig,\n): void {\n  if (process.env.NODE_ENV === 'test') {\n    TEST_MCPRC_CONFIG_FOR_TESTING[name] = server\n  }\n}\n\nexport function removeMcprcServerForTesting(name: string): void {\n  if (process.env.NODE_ENV === 'test') {\n    if (!TEST_MCPRC_CONFIG_FOR_TESTING[name]) {\n      throw new Error(`No MCP server found with name: ${name} in .mcprc`)\n    }\n    delete TEST_MCPRC_CONFIG_FOR_TESTING[name]\n  }\n}\n\nexport const getMcprcConfig = memoize(\n  (): Record<string, McpServerConfig> => {\n    if (process.env.NODE_ENV === 'test') {\n      return TEST_MCPRC_CONFIG_FOR_TESTING\n    }\n\n    const mcprcPath = join(getCwd(), '.mcprc')\n    if (!existsSync(mcprcPath)) {\n      return {}\n    }\n\n    try {\n      const mcprcContent = readFileSync(mcprcPath, 'utf-8')\n      const config = safeParseJSON(mcprcContent)\n      if (config && typeof config === 'object') {\n        // Logging removed\n        return config as Record<string, McpServerConfig>\n      }\n    } catch {\n      // Ignore errors reading/parsing .mcprc (they're logged in safeParseJSON)\n    }\n    return {}\n  },\n  // This function returns the same value as long as the cwd and mcprc file content remain the same\n  () => {\n    const cwd = getCwd()\n    const mcprcPath = join(cwd, '.mcprc')\n    if (existsSync(mcprcPath)) {\n      try {\n        const stat = readFileSync(mcprcPath, 'utf-8')\n        return `${cwd}:${stat}`\n      } catch {\n        return cwd\n      }\n    }\n    return cwd\n  },\n)\n\nexport function getOrCreateUserID(): string {\n  const config = getGlobalConfig()\n  if (config.userID) {\n    return config.userID\n  }\n\n  const userID = randomBytes(32).toString('hex')\n  saveGlobalConfig({ ...config, userID })\n  return userID\n}\n\nexport function getConfigForCLI(key: string, global: boolean): unknown {\n  if (global) {\n    if (!isGlobalConfigKey(key)) {\n      console.error(\n        `Error: '${key}' is not a valid config key. Valid keys are: ${GLOBAL_CONFIG_KEYS.join(', ')}`,\n      )\n      process.exit(1)\n    }\n    return getGlobalConfig()[key]\n  } else {\n    if (!isProjectConfigKey(key)) {\n      console.error(\n        `Error: '${key}' is not a valid config key. Valid keys are: ${PROJECT_CONFIG_KEYS.join(', ')}`,\n      )\n      process.exit(1)\n    }\n    return getCurrentProjectConfig()[key]\n  }\n}\n\nexport function setConfigForCLI(\n  key: string,\n  value: unknown,\n  global: boolean,\n): void {\n  if (global) {\n    if (!isGlobalConfigKey(key)) {\n      console.error(\n        `Error: Cannot set '${key}'. Only these keys can be modified: ${GLOBAL_CONFIG_KEYS.join(', ')}`,\n      )\n      process.exit(1)\n    }\n\n    if (key === 'autoUpdaterStatus' && !isAutoUpdaterStatus(value as string)) {\n      console.error(\n        `Error: Invalid value for autoUpdaterStatus. Must be one of: disabled, enabled, no_permissions, not_configured`,\n      )\n      process.exit(1)\n    }\n\n    const currentConfig = getGlobalConfig()\n    saveGlobalConfig({\n      ...currentConfig,\n      [key]: value,\n    })\n  } else {\n    if (!isProjectConfigKey(key)) {\n      console.error(\n        `Error: Cannot set '${key}'. Only these keys can be modified: ${PROJECT_CONFIG_KEYS.join(', ')}. Did you mean --global?`,\n      )\n      process.exit(1)\n    }\n    const currentConfig = getCurrentProjectConfig()\n    saveCurrentProjectConfig({\n      ...currentConfig,\n      [key]: value,\n    })\n  }\n  // Wait for the output to be flushed, to avoid clearing the screen.\n  setTimeout(() => {\n    // Without this we hang indefinitely.\n    process.exit(0)\n  }, 100)\n}\n\nexport function deleteConfigForCLI(key: string, global: boolean): void {\n  if (global) {\n    if (!isGlobalConfigKey(key)) {\n      console.error(\n        `Error: Cannot delete '${key}'. Only these keys can be modified: ${GLOBAL_CONFIG_KEYS.join(', ')}`,\n      )\n      process.exit(1)\n    }\n    const currentConfig = getGlobalConfig()\n    delete currentConfig[key]\n    saveGlobalConfig(currentConfig)\n  } else {\n    if (!isProjectConfigKey(key)) {\n      console.error(\n        `Error: Cannot delete '${key}'. Only these keys can be modified: ${PROJECT_CONFIG_KEYS.join(', ')}. Did you mean --global?`,\n      )\n      process.exit(1)\n    }\n    const currentConfig = getCurrentProjectConfig()\n    delete currentConfig[key]\n    saveCurrentProjectConfig(currentConfig)\n  }\n}\n\nexport function listConfigForCLI(global: true): GlobalConfig\nexport function listConfigForCLI(global: false): ProjectConfig\nexport function listConfigForCLI(global: boolean): object {\n  if (global) {\n    const currentConfig = pick(getGlobalConfig(), GLOBAL_CONFIG_KEYS)\n    return currentConfig\n  } else {\n    return pick(getCurrentProjectConfig(), PROJECT_CONFIG_KEYS)\n  }\n}\n\nexport function getOpenAIApiKey(): string | undefined {\n  return process.env.OPENAI_API_KEY\n}\n\n// Configuration migration utility functions\nfunction migrateModelProfilesRemoveId(config: GlobalConfig): GlobalConfig {\n  if (!config.modelProfiles) return config\n\n  // Cast to legacy type for migration - config may have old fields\n  const legacyConfig = config as GlobalConfig & LegacyGlobalConfigFields\n\n  // 1. Remove id field from ModelProfile objects and build ID to modelName mapping\n  const idToModelNameMap = new Map<string, string>()\n  const migratedProfiles = config.modelProfiles.map(profile => {\n    // Cast to legacy type that includes optional id field\n    const legacyProfile = profile as LegacyModelProfile\n    // Build mapping before removing id field\n    if (legacyProfile.id && profile.modelName) {\n      idToModelNameMap.set(legacyProfile.id, profile.modelName)\n    }\n\n    // Remove id field, keep everything else\n    const { id, ...profileWithoutId } = legacyProfile\n    return profileWithoutId as ModelProfile\n  })\n\n  // 2. Migrate ModelPointers from IDs to modelNames\n  const migratedPointers: ModelPointers = {\n    main: '',\n    task: '',\n    reasoning: '',\n    quick: '',\n    compact: '',\n  }\n\n  if (config.modelPointers) {\n    Object.entries(config.modelPointers).forEach(([pointer, value]) => {\n      if (value) {\n        // If value looks like an old ID (model_xxx), map it to modelName\n        const modelName = idToModelNameMap.get(value) || value\n        migratedPointers[pointer as ModelPointerType] = modelName\n      }\n    })\n  }\n\n  // 3. Migrate legacy config fields\n  let defaultModelName: string | undefined\n  if (legacyConfig.defaultModelId) {\n    defaultModelName =\n      idToModelNameMap.get(legacyConfig.defaultModelId) ||\n      legacyConfig.defaultModelId\n  } else if (legacyConfig.defaultModelName) {\n    defaultModelName = legacyConfig.defaultModelName\n  }\n\n  // 4. Remove legacy fields and return migrated config\n  const migratedConfig: GlobalConfig & Partial<LegacyGlobalConfigFields> = {\n    ...config,\n  }\n  delete migratedConfig.defaultModelId\n  delete migratedConfig.currentSelectedModelId\n  delete migratedConfig.mainAgentModelId\n  delete migratedConfig.taskToolModelId\n\n  return {\n    ...migratedConfig,\n    modelProfiles: migratedProfiles,\n    modelPointers: migratedPointers,\n    defaultModelName,\n  }\n}\n\n// New model system utility functions\n\nexport function setAllPointersToModel(modelName: string): void {\n  const config = getGlobalConfig()\n  const updatedConfig = {\n    ...config,\n    modelPointers: {\n      main: modelName,\n      task: modelName,\n      reasoning: modelName,\n      quick: modelName,\n      compact: modelName,\n    },\n    defaultModelName: modelName,\n  }\n  saveGlobalConfig(updatedConfig)\n}\n\nexport function setModelPointer(\n  pointer: ModelPointerType,\n  modelName: string,\n): void {\n  const config = getGlobalConfig()\n  const updatedConfig = {\n    ...config,\n    modelPointers: {\n      ...config.modelPointers,\n      [pointer]: modelName,\n    },\n  }\n  saveGlobalConfig(updatedConfig)\n\n  // \uD83D\uDD27 Fix: Force ModelManager reload after config change\n  // Import here to avoid circular dependency\n  import('./model').then(({ reloadModelManager }) => {\n    reloadModelManager()\n  })\n}\n\n// Credential resolution functions for secure API key management\n\n/**\n * Resolve an API key for a ModelProfile.\n * Supports both plaintext keys (backward compatibility) and encrypted references.\n *\n * For plaintext keys (legacy):\n *   Returns the key directly from the profile\n *\n * For encrypted references (encrypted:modelName):\n *   Retrieves the key from the encrypted credential store\n *\n * @param profile The model profile to resolve the API key for\n * @returns The resolved API key, or null if not found\n * @throws Error if credential store access fails\n */\nexport async function resolveApiKey(\n  profile: ModelProfile,\n): Promise<string | null> {\n  if (!profile.apiKey) {\n    return null\n  }\n\n  // Check if this is an encrypted reference\n  if (profile.apiKey.startsWith('encrypted:')) {\n    // Extract model name from the encrypted reference\n    const modelName = profile.apiKey.slice('encrypted:'.length)\n\n    // Import dynamically to avoid circular dependencies\n    try {\n      const { getApiKey } = await import('./credentials')\n      return getApiKey(modelName)\n    } catch (error) {\n      const errorMsg = error instanceof Error ? error.message : String(error)\n      console.warn(\n        `Failed to resolve encrypted API key for ${modelName}: ${errorMsg}`,\n      )\n      return null\n    }\n  }\n\n  // Return plaintext key for backward compatibility\n  return profile.apiKey\n}\n\n// \uD83D\uDD25 GPT-5 Configuration Validation and Auto-Repair Functions\n\n/**\n * Check if a model name represents a GPT-5 model\n */\nexport function isGPT5ModelName(modelName: string): boolean {\n  if (!modelName || typeof modelName !== 'string') return false\n  const lowerName = modelName.toLowerCase()\n  return lowerName.startsWith('gpt-5') || lowerName.includes('gpt-5')\n}\n\n/**\n * Validate and auto-repair GPT-5 model configuration\n */\nexport function validateAndRepairGPT5Profile(\n  profile: ModelProfile,\n): ModelProfile {\n  const isGPT5 = isGPT5ModelName(profile.modelName)\n  const now = Date.now()\n\n  // Create a working copy\n  const repairedProfile: ModelProfile = { ...profile }\n  let wasRepaired = false\n\n  // \uD83D\uDD27 Set GPT-5 detection flag\n  if (isGPT5 !== profile.isGPT5) {\n    repairedProfile.isGPT5 = isGPT5\n    wasRepaired = true\n  }\n\n  if (isGPT5) {\n    // \uD83D\uDD27 GPT-5 Parameter Validation and Repair\n\n    // 1. Reasoning effort validation\n    const validReasoningEfforts = ['minimal', 'low', 'medium', 'high']\n    if (\n      !profile.reasoningEffort ||\n      !validReasoningEfforts.includes(profile.reasoningEffort)\n    ) {\n      repairedProfile.reasoningEffort = 'medium' // Default for coding tasks\n      wasRepaired = true\n      console.log(\n        `\uD83D\uDD27 GPT-5 Config: Set reasoning effort to 'medium' for ${profile.modelName}`,\n      )\n    }\n\n    // 2. Context length validation (GPT-5 models typically have 128k context)\n    if (profile.contextLength < 128000) {\n      repairedProfile.contextLength = 128000\n      wasRepaired = true\n      console.log(\n        `\uD83D\uDD27 GPT-5 Config: Updated context length to 128k for ${profile.modelName}`,\n      )\n    }\n\n    // 3. Output tokens validation (reasonable defaults for GPT-5)\n    if (profile.maxTokens < 4000) {\n      repairedProfile.maxTokens = 8192 // Good default for coding tasks\n      wasRepaired = true\n      console.log(\n        `\uD83D\uDD27 GPT-5 Config: Updated max tokens to 8192 for ${profile.modelName}`,\n      )\n    }\n\n    // 4. Provider validation\n    if (\n      profile.provider !== 'openai' &&\n      profile.provider !== 'custom-openai' &&\n      profile.provider !== 'azure'\n    ) {\n      console.warn(\n        `\u26A0\uFE0F  GPT-5 Config: Unexpected provider '${profile.provider}' for GPT-5 model ${profile.modelName}. Consider using 'openai' or 'custom-openai'.`,\n      )\n    }\n\n    // 5. Base URL validation for official models\n    if (profile.modelName.includes('gpt-5') && !profile.baseURL) {\n      repairedProfile.baseURL = 'https://api.openai.com/v1'\n      wasRepaired = true\n      console.log(\n        `\uD83D\uDD27 GPT-5 Config: Set default base URL for ${profile.modelName}`,\n      )\n    }\n  }\n\n  // Update validation metadata\n  repairedProfile.validationStatus = wasRepaired ? 'auto_repaired' : 'valid'\n  repairedProfile.lastValidation = now\n\n  if (wasRepaired) {\n    console.log(\n      `\u2705 GPT-5 Config: Auto-repaired configuration for ${profile.modelName}`,\n    )\n  }\n\n  return repairedProfile\n}\n\n/**\n * Validate and repair all GPT-5 profiles in the global configuration\n */\nexport function validateAndRepairAllGPT5Profiles(): {\n  repaired: number\n  total: number\n} {\n  const config = getGlobalConfig()\n  if (!config.modelProfiles) {\n    return { repaired: 0, total: 0 }\n  }\n\n  let repairCount = 0\n  const repairedProfiles = config.modelProfiles.map(profile => {\n    const repairedProfile = validateAndRepairGPT5Profile(profile)\n    if (repairedProfile.validationStatus === 'auto_repaired') {\n      repairCount++\n    }\n    return repairedProfile\n  })\n\n  // Save the repaired configuration\n  if (repairCount > 0) {\n    const updatedConfig = {\n      ...config,\n      modelProfiles: repairedProfiles,\n    }\n    saveGlobalConfig(updatedConfig)\n    console.log(`\uD83D\uDD27 GPT-5 Config: Auto-repaired ${repairCount} model profiles`)\n  }\n\n  return { repaired: repairCount, total: config.modelProfiles.length }\n}\n\n/**\n * Get GPT-5 configuration recommendations for a specific model\n */\nexport function getGPT5ConfigRecommendations(\n  modelName: string,\n): Partial<ModelProfile> {\n  if (!isGPT5ModelName(modelName)) {\n    return {}\n  }\n\n  const recommendations: Partial<ModelProfile> = {\n    contextLength: 128000, // GPT-5 standard context length\n    maxTokens: 8192, // Good default for coding tasks\n    reasoningEffort: 'medium', // Balanced for most coding tasks\n    isGPT5: true,\n  }\n\n  // Model-specific optimizations\n  if (modelName.includes('gpt-5-mini')) {\n    recommendations.maxTokens = 4096 // Smaller default for mini\n    recommendations.reasoningEffort = 'low' // Faster for simple tasks\n  } else if (modelName.includes('gpt-5-nano')) {\n    recommendations.maxTokens = 2048 // Even smaller for nano\n    recommendations.reasoningEffort = 'minimal' // Fastest option\n  }\n\n  return recommendations\n}\n\n/**\n * Create a properly configured GPT-5 model profile\n */\nexport function createGPT5ModelProfile(\n  name: string,\n  modelName: string,\n  apiKey: string,\n  baseURL?: string,\n  provider: ProviderType = 'openai',\n): ModelProfile {\n  const recommendations = getGPT5ConfigRecommendations(modelName)\n\n  const profile: ModelProfile = {\n    name,\n    provider,\n    modelName,\n    baseURL: baseURL || 'https://api.openai.com/v1',\n    apiKey,\n    maxTokens: recommendations.maxTokens || 8192,\n    contextLength: recommendations.contextLength || 128000,\n    reasoningEffort: recommendations.reasoningEffort || 'medium',\n    isActive: true,\n    createdAt: Date.now(),\n    isGPT5: true,\n    validationStatus: 'valid',\n    lastValidation: Date.now(),\n  }\n\n  console.log(`\u2705 Created GPT-5 model profile: ${name} (${modelName})`)\n  return profile\n}\n"],
+  "mappings": "AAAA,SAAS,YAAY,cAAc,eAAe,YAAY,cAAc;AAC5E,SAAS,SAAS,MAAM,eAAe;AACvC,SAAS,WAAW,SAAS,YAAY;AACzC,SAAS,eAAe;AACxB,SAAS,0BAA0B;AACnC,SAAS,cAAc;AACvB,SAAS,mBAAmB;AAC5B,SAAS,qBAAqB;AAC9B,SAAS,wBAAwB;AAEjC,SAAS,SAAS,mBAAmB;AAoErC,MAAM,yBAAwC;AAAA,EAC5C,cAAc,CAAC;AAAA,EACf,SAAS,CAAC;AAAA,EACV,SAAS,CAAC;AAAA,EACV,oBAAoB;AAAA,EACpB,qBAAqB;AAAA,EACrB,gBAAgB,CAAC;AAAA,EACjB,YAAY,CAAC;AAAA,EACb,sBAAsB,CAAC;AAAA,EACvB,sBAAsB,CAAC;AAAA,EACvB,wBAAwB;AAC1B;AAEA,SAAS,wBAAwB,aAAoC;AACnE,QAAM,SAAS,EAAE,GAAG,uBAAuB;AAC3C,MAAI,gBAAgB,QAAQ,GAAG;AAC7B,WAAO,qBAAqB;AAAA,EAC9B;AACA,SAAO;AACT;AAQO,SAAS,oBAAoB,OAA2C;AAC7E,SAAO,CAAC,YAAY,WAAW,kBAAkB,gBAAgB,EAAE;AAAA,IACjE;AAAA,EACF;AACF;AA8BO,SAAS,gBAAgB,SAA0B;AAExD,MAAI;AACF,UAAM,EAAE,EAAE,IAAI,QAAQ,SAAS;AAC/B,WAAO,UAAU,EAAE,eAAe,IAAI,EAAE,gBAAgB;AAAA,EAC1D,QAAQ;AAEN,WAAO,UAAU,gBAAgB;AAAA,EACnC;AACF;AAKO,SAAS,oBAAoB,MAA2B;AAC7D,SAAO,SAAS,aAAa,gBAAgB;AAC/C;AAKO,MAAM,sBAAmD;AAAA,EAC9D,SAAS;AAAA,EACT,SAAS;AAAA,EACT,UAAU;AACZ;AAKO,SAAS,mBAAmB,SAAmC;AAEpE,SAAO,YAAY,aAAa,YAAY;AAC9C;AAMO,SAAS,qBAAqB,MAA4B;AAC/D,SAAO,SAAS;AAClB;AAKO,SAAS,qBAAqB,SAA+B;AAClE,SAAO,UAAU,aAAa;AAChC;AA2IO,MAAM,wBAAsC;AAAA,EACjD,aAAa;AAAA,EACb,mBAAmB;AAAA,EACnB,OAAO;AAAA,EACP,uBAAuB;AAAA,EACvB,SAAS;AAAA,EACT,iBAAiB;AAAA,EACjB,uBAAuB;AAAA,IACrB,UAAU,CAAC;AAAA,IACX,UAAU,CAAC;AAAA,EACb;AAAA,EACA,QAAQ;AAAA;AAAA,EAGR,eAAe,CAAC;AAAA,EAChB,eAAe;AAAA,IACb,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,SAAS;AAAA,EACX;AAAA,EACA,4BAA4B;AAAA,EAC5B,iBAAiB;AAAA;AAAA,EACjB,UAAU;AAAA;AAAA,EACV,UAAU;AAAA;AAAA,EACV,UAAU;AAAA;AAAA,EACV,YAAY;AAAA;AACd;AAEO,MAAM,qBAAqB;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAIO,SAAS,kBAAkB,KAAqC;AACrE,SAAO,mBAAmB,SAAS,GAAsB;AAC3D;AAEO,MAAM,sBAAsB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAIO,SAAS,8BAAuC;AACrD,MAAI,cAAc,OAAO;AACzB,QAAM,SAAS,UAAU,oBAAoB,qBAAqB;AAElE,SAAO,MAAM;AACX,UAAM,gBAAgB,OAAO,WAAW,WAAW;AACnD,QAAI,eAAe,wBAAwB;AACzC,aAAO;AAAA,IACT;AACA,UAAM,aAAa,QAAQ,aAAa,IAAI;AAE5C,QAAI,eAAe,aAAa;AAC9B;AAAA,IACF;AACA,kBAAc;AAAA,EAChB;AAEA,SAAO;AACT;AAGA,MAAM,iCAA+C;AAAA,EACnD,GAAG;AAAA,EACH,mBAAmB;AACrB;AACA,MAAM,kCAAiD;AAAA,EACrD,GAAG;AACL;AAEO,SAAS,mBAAmB,KAAsC;AACvE,SAAO,oBAAoB,SAAS,GAAuB;AAC7D;AAEO,SAAS,iBAAiB,QAA4B;AAC3D,MAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,eAAW,OAAO,QAAQ;AACxB,qCAA+B,GAAG,IAAI,OAAO,GAAG;AAAA,IAClD;AACA;AAAA,EACF;AAGA;AAAA,IACE;AAAA,IACA;AAAA,MACE,GAAG;AAAA,MACH,UAAU,UAAU,oBAAoB,qBAAqB,EAAE;AAAA,IACjE;AAAA,IACA;AAAA,EACF;AACF;AAKA,SAAS,4BAA4B,QAAoC;AAEvE,MAAI,OAAO,YAAY,QAAW;AAChC,WAAO;AAAA,EACT;AAGA,QAAM,eAAe;AACrB,MAAI,aAAa,gBAAgB,QAAW;AAC1C,UAAM,iBAA+B;AAAA,MACnC,GAAG;AAAA,MACH,SAAS,aAAa,gBAAgB;AAAA,IACxC;AAEA,WAAQ,eAAuB;AAC/B,WAAO;AAAA,EACT;AAGA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,SAAS;AAAA,EACX;AACF;AAGO,SAAS,kBAAgC;AAC9C,MAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,WAAO;AAAA,EACT;AACA,QAAM,SAAS,UAAU,oBAAoB,qBAAqB;AAClE,QAAM,iBAAiB,6BAA6B,MAAM;AAC1D,SAAO,4BAA4B,cAAc;AACnD;AAEO,SAAS,qBAAoC;AAClD,SAAO,QAAQ,IAAI,qBAAqB;AAC1C;AAEO,SAAS,yBAAyB,QAAwB;AAC/D,SAAO,QAAQ,MAAM,GAAG,KAAK;AAC/B;AAEO,SAAS,sBACd,iBACiC;AACjC,QAAM,SAAS,gBAAgB;AAC/B,MAAI,OAAO,uBAAuB,UAAU,SAAS,eAAe,GAAG;AACrE,WAAO;AAAA,EACT;AACA,MAAI,OAAO,uBAAuB,UAAU,SAAS,eAAe,GAAG;AACrE,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAWA,SAAS,oBAAoB,UAAkB,SAAuB;AACpE,QAAM,MAAM,QAAQ,QAAQ;AAC5B,QAAM,WAAW;AAAA,IACf;AAAA,IACA,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AAAA,EACvD;AAEA,MAAI;AAEF,kBAAc,UAAU,SAAS,OAAO;AAExC,eAAW,UAAU,QAAQ;AAAA,EAC/B,SAAS,OAAO;AAEd,QAAI;AACF,aAAO,UAAU,EAAE,OAAO,KAAK,CAAC;AAAA,IAClC,QAAQ;AAAA,IAER;AACA,UAAM;AAAA,EACR;AACF;AAEA,SAAS,WACP,MACA,QACA,eACM;AAEN,QAAM,iBAAiB,OAAO;AAAA,IAC5B,OAAO,QAAQ,MAAM,EAAE;AAAA,MACrB,CAAC,CAAC,KAAK,KAAK,MACV,KAAK,UAAU,KAAK,MAAM,KAAK,UAAU,cAAc,GAAc,CAAC;AAAA,IAC1E;AAAA,EACF;AACA,MAAI;AACF,wBAAoB,MAAM,KAAK,UAAU,gBAAgB,MAAM,CAAC,CAAC;AAAA,EACnE,SAAS,OAAO;AACd,UAAM,MAAM;AACZ,QACE,KAAK,SAAS,YACd,KAAK,SAAS,WACd,KAAK,SAAS,SACd;AACA,kBAAY,MAAM,uBAAuB;AAAA,QACvC;AAAA,QACA,QAAQ,OAAO,IAAI,IAAI;AAAA,MACzB,CAAC;AACD;AAAA,IACF;AACA,UAAM;AAAA,EACR;AACF;AAGA,IAAI,uBAAuB;AAEpB,SAAS,gBAAsB;AAGpC,yBAAuB;AAEvB;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,UACP,MACA,eACA,gBACG;AAGH,cAAY,MAAM,qBAAqB;AAAA,IACrC;AAAA,IACA,YAAY,OAAO,WAAW,IAAI,CAAC;AAAA,IACnC,gBAAgB,OAAO,CAAC,CAAC,cAAc;AAAA,EACzC,CAAC;AAED,MAAI,CAAC,WAAW,IAAI,GAAG;AACrB,gBAAY,MAAM,uBAAuB;AAAA,MACvC;AAAA,MACA,QAAQ;AAAA,MACR,mBAAmB,OAAO,KAAK,aAAuB,EAAE,KAAK,IAAI;AAAA,IACnE,CAAC;AACD,WAAO,UAAU,aAAa;AAAA,EAChC;AAEA,MAAI;AACF,UAAM,cAAc,aAAa,MAAM,OAAO;AAC9C,gBAAY,MAAM,oBAAoB;AAAA,MACpC;AAAA,MACA,eAAe,OAAO,YAAY,MAAM;AAAA,MACxC,gBACE,YAAY,UAAU,GAAG,GAAG,KAAK,YAAY,SAAS,MAAM,QAAQ;AAAA,IACxE,CAAC;AAED,QAAI;AACF,YAAM,eAAe,KAAK,MAAM,WAAW;AAC3C,kBAAY,MAAM,sBAAsB;AAAA,QACtC;AAAA,QACA,YAAY,OAAO,KAAK,YAAY,EAAE,KAAK,IAAI;AAAA,MACjD,CAAC;AAGD,YAAM,cAAc;AAAA,QAClB,GAAG,UAAU,aAAa;AAAA,QAC1B,GAAG;AAAA,MACL;AAEA,kBAAY,MAAM,uBAAuB;AAAA,QACvC;AAAA,QACA,iBAAiB,OAAO,KAAK,WAAqB,EAAE,KAAK,IAAI;AAAA,MAC/D,CAAC;AAED,aAAO;AAAA,IACT,SAAS,OAAO;AAEd,YAAM,eACJ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAEvD,kBAAY,MAAM,2BAA2B;AAAA,QAC3C;AAAA,QACA;AAAA,QACA,WACE,iBAAiB,QAAQ,MAAM,YAAY,OAAO,OAAO;AAAA,QAC3D,eAAe,OAAO,YAAY,MAAM;AAAA,MAC1C,CAAC;AAED,YAAM,IAAI,iBAAiB,cAAc,MAAM,aAAa;AAAA,IAC9D;AAAA,EACF,SAAS,OAAgB;AAEvB,QAAI,iBAAiB,oBAAoB,gBAAgB;AACvD,kBAAY,MAAM,+BAA+B;AAAA,QAC/C;AAAA,QACA,gBAAgB,OAAO,cAAc;AAAA,QACrC,cAAc,MAAM;AAAA,MACtB,CAAC;AACD,YAAM;AAAA,IACR;AAEA,gBAAY,KAAK,8BAA8B;AAAA,MAC7C;AAAA,MACA,WAAW,iBAAiB,QAAQ,MAAM,YAAY,OAAO,OAAO;AAAA,MACpE,cAAc,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MACnE,QAAQ;AAAA,IACV,CAAC;AAED,WAAO,UAAU,aAAa;AAAA,EAChC;AACF;AAEO,SAAS,0BAAyC;AACvD,MAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,QAAQ,OAAO,CAAC;AACrC,QAAM,SAAS,UAAU,oBAAoB,qBAAqB;AAElE,MAAI,CAAC,OAAO,UAAU;AACpB,WAAO,wBAAwB,YAAY;AAAA,EAC7C;AAEA,QAAM,gBACJ,OAAO,SAAS,YAAY,KAAK,wBAAwB,YAAY;AAGvE,MAAI,OAAO,cAAc,iBAAiB,UAAU;AAClD,kBAAc,eACX,cAAc,cAAc,YAAY,KAAkB,CAAC;AAAA,EAChE;AACA,SAAO;AACT;AAEO,SAAS,yBAAyB,eAAoC;AAC3E,MAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,eAAW,OAAO,eAAe;AAC/B,sCAAgC,GAAG,IAAI,cAAc,GAAG;AAAA,IAC1D;AACA;AAAA,EACF;AACA,QAAM,SAAS,UAAU,oBAAoB,qBAAqB;AAClE;AAAA,IACE;AAAA,IACA;AAAA,MACE,GAAG;AAAA,MACH,UAAU;AAAA,QACR,GAAG,OAAO;AAAA,QACV,CAAC,QAAQ,OAAO,CAAC,CAAC,GAAG;AAAA,MACvB;AAAA,IACF;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,wBAA0C;AAC9D,SAAO,gBAAgB,EAAE,sBAAsB;AACjD;AAEO,MAAM,gCAAiE,CAAC;AAExE,SAAS,6BAAmC;AACjD,MAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,WAAO,KAAK,6BAA6B,EAAE,QAAQ,SAAO;AACxD,aAAO,8BAA8B,GAAG;AAAA,IAC1C,CAAC;AAAA,EACH;AACF;AAEO,SAAS,yBACd,MACA,QACM;AACN,MAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,kCAA8B,IAAI,IAAI;AAAA,EACxC;AACF;AAEO,SAAS,4BAA4B,MAAoB;AAC9D,MAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,QAAI,CAAC,8BAA8B,IAAI,GAAG;AACxC,YAAM,IAAI,MAAM,kCAAkC,IAAI,YAAY;AAAA,IACpE;AACA,WAAO,8BAA8B,IAAI;AAAA,EAC3C;AACF;AAEO,MAAM,iBAAiB;AAAA,EAC5B,MAAuC;AACrC,QAAI,QAAQ,IAAI,aAAa,QAAQ;AACnC,aAAO;AAAA,IACT;AAEA,UAAM,YAAY,KAAK,OAAO,GAAG,QAAQ;AACzC,QAAI,CAAC,WAAW,SAAS,GAAG;AAC1B,aAAO,CAAC;AAAA,IACV;AAEA,QAAI;AACF,YAAM,eAAe,aAAa,WAAW,OAAO;AACpD,YAAM,SAAS,cAAc,YAAY;AACzC,UAAI,UAAU,OAAO,WAAW,UAAU;AAExC,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAER;AACA,WAAO,CAAC;AAAA,EACV;AAAA;AAAA,EAEA,MAAM;AACJ,UAAM,MAAM,OAAO;AACnB,UAAM,YAAY,KAAK,KAAK,QAAQ;AACpC,QAAI,WAAW,SAAS,GAAG;AACzB,UAAI;AACF,cAAM,OAAO,aAAa,WAAW,OAAO;AAC5C,eAAO,GAAG,GAAG,IAAI,IAAI;AAAA,MACvB,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AACA,WAAO;AAAA,EACT;AACF;AAEO,SAAS,oBAA4B;AAC1C,QAAM,SAAS,gBAAgB;AAC/B,MAAI,OAAO,QAAQ;AACjB,WAAO,OAAO;AAAA,EAChB;AAEA,QAAM,SAAS,YAAY,EAAE,EAAE,SAAS,KAAK;AAC7C,mBAAiB,EAAE,GAAG,QAAQ,OAAO,CAAC;AACtC,SAAO;AACT;AAEO,SAAS,gBAAgB,KAAa,QAA0B;AACrE,MAAI,QAAQ;AACV,QAAI,CAAC,kBAAkB,GAAG,GAAG;AAC3B,cAAQ;AAAA,QACN,WAAW,GAAG,gDAAgD,mBAAmB,KAAK,IAAI,CAAC;AAAA,MAC7F;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,WAAO,gBAAgB,EAAE,GAAG;AAAA,EAC9B,OAAO;AACL,QAAI,CAAC,mBAAmB,GAAG,GAAG;AAC5B,cAAQ;AAAA,QACN,WAAW,GAAG,gDAAgD,oBAAoB,KAAK,IAAI,CAAC;AAAA,MAC9F;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,WAAO,wBAAwB,EAAE,GAAG;AAAA,EACtC;AACF;AAEO,SAAS,gBACd,KACA,OACA,QACM;AACN,MAAI,QAAQ;AACV,QAAI,CAAC,kBAAkB,GAAG,GAAG;AAC3B,cAAQ;AAAA,QACN,sBAAsB,GAAG,uCAAuC,mBAAmB,KAAK,IAAI,CAAC;AAAA,MAC/F;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,QAAI,QAAQ,uBAAuB,CAAC,oBAAoB,KAAe,GAAG;AACxE,cAAQ;AAAA,QACN;AAAA,MACF;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,UAAM,gBAAgB,gBAAgB;AACtC,qBAAiB;AAAA,MACf,GAAG;AAAA,MACH,CAAC,GAAG,GAAG;AAAA,IACT,CAAC;AAAA,EACH,OAAO;AACL,QAAI,CAAC,mBAAmB,GAAG,GAAG;AAC5B,cAAQ;AAAA,QACN,sBAAsB,GAAG,uCAAuC,oBAAoB,KAAK,IAAI,CAAC;AAAA,MAChG;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,UAAM,gBAAgB,wBAAwB;AAC9C,6BAAyB;AAAA,MACvB,GAAG;AAAA,MACH,CAAC,GAAG,GAAG;AAAA,IACT,CAAC;AAAA,EACH;AAEA,aAAW,MAAM;AAEf,YAAQ,KAAK,CAAC;AAAA,EAChB,GAAG,GAAG;AACR;AAEO,SAAS,mBAAmB,KAAa,QAAuB;AACrE,MAAI,QAAQ;AACV,QAAI,CAAC,kBAAkB,GAAG,GAAG;AAC3B,cAAQ;AAAA,QACN,yBAAyB,GAAG,uCAAuC,mBAAmB,KAAK,IAAI,CAAC;AAAA,MAClG;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,UAAM,gBAAgB,gBAAgB;AACtC,WAAO,cAAc,GAAG;AACxB,qBAAiB,aAAa;AAAA,EAChC,OAAO;AACL,QAAI,CAAC,mBAAmB,GAAG,GAAG;AAC5B,cAAQ;AAAA,QACN,yBAAyB,GAAG,uCAAuC,oBAAoB,KAAK,IAAI,CAAC;AAAA,MACnG;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,UAAM,gBAAgB,wBAAwB;AAC9C,WAAO,cAAc,GAAG;AACxB,6BAAyB,aAAa;AAAA,EACxC;AACF;AAIO,SAAS,iBAAiB,QAAyB;AACxD,MAAI,QAAQ;AACV,UAAM,gBAAgB,KAAK,gBAAgB,GAAG,kBAAkB;AAChE,WAAO;AAAA,EACT,OAAO;AACL,WAAO,KAAK,wBAAwB,GAAG,mBAAmB;AAAA,EAC5D;AACF;AAEO,SAAS,kBAAsC;AACpD,SAAO,QAAQ,IAAI;AACrB;AAGA,SAAS,6BAA6B,QAAoC;AACxE,MAAI,CAAC,OAAO,cAAe,QAAO;AAGlC,QAAM,eAAe;AAGrB,QAAM,mBAAmB,oBAAI,IAAoB;AACjD,QAAM,mBAAmB,OAAO,cAAc,IAAI,aAAW;AAE3D,UAAM,gBAAgB;AAEtB,QAAI,cAAc,MAAM,QAAQ,WAAW;AACzC,uBAAiB,IAAI,cAAc,IAAI,QAAQ,SAAS;AAAA,IAC1D;AAGA,UAAM,EAAE,IAAI,GAAG,iBAAiB,IAAI;AACpC,WAAO;AAAA,EACT,CAAC;AAGD,QAAM,mBAAkC;AAAA,IACtC,MAAM;AAAA,IACN,MAAM;AAAA,IACN,WAAW;AAAA,IACX,OAAO;AAAA,IACP,SAAS;AAAA,EACX;AAEA,MAAI,OAAO,eAAe;AACxB,WAAO,QAAQ,OAAO,aAAa,EAAE,QAAQ,CAAC,CAAC,SAAS,KAAK,MAAM;AACjE,UAAI,OAAO;AAET,cAAM,YAAY,iBAAiB,IAAI,KAAK,KAAK;AACjD,yBAAiB,OAA2B,IAAI;AAAA,MAClD;AAAA,IACF,CAAC;AAAA,EACH;AAGA,MAAI;AACJ,MAAI,aAAa,gBAAgB;AAC/B,uBACE,iBAAiB,IAAI,aAAa,cAAc,KAChD,aAAa;AAAA,EACjB,WAAW,aAAa,kBAAkB;AACxC,uBAAmB,aAAa;AAAA,EAClC;AAGA,QAAM,iBAAmE;AAAA,IACvE,GAAG;AAAA,EACL;AACA,SAAO,eAAe;AACtB,SAAO,eAAe;AACtB,SAAO,eAAe;AACtB,SAAO,eAAe;AAEtB,SAAO;AAAA,IACL,GAAG;AAAA,IACH,eAAe;AAAA,IACf,eAAe;AAAA,IACf;AAAA,EACF;AACF;AAIO,SAAS,sBAAsB,WAAyB;AAC7D,QAAM,SAAS,gBAAgB;AAC/B,QAAM,gBAAgB;AAAA,IACpB,GAAG;AAAA,IACH,eAAe;AAAA,MACb,MAAM;AAAA,MACN,MAAM;AAAA,MACN,WAAW;AAAA,MACX,OAAO;AAAA,MACP,SAAS;AAAA,IACX;AAAA,IACA,kBAAkB;AAAA,EACpB;AACA,mBAAiB,aAAa;AAChC;AAEO,SAAS,gBACd,SACA,WACM;AACN,QAAM,SAAS,gBAAgB;AAC/B,QAAM,gBAAgB;AAAA,IACpB,GAAG;AAAA,IACH,eAAe;AAAA,MACb,GAAG,OAAO;AAAA,MACV,CAAC,OAAO,GAAG;AAAA,IACb;AAAA,EACF;AACA,mBAAiB,aAAa;AAI9B,SAAO,SAAS,EAAE,KAAK,CAAC,EAAE,mBAAmB,MAAM;AACjD,uBAAmB;AAAA,EACrB,CAAC;AACH;AAkBA,eAAsB,cACpB,SACwB;AACxB,MAAI,CAAC,QAAQ,QAAQ;AACnB,WAAO;AAAA,EACT;AAGA,MAAI,QAAQ,OAAO,WAAW,YAAY,GAAG;AAE3C,UAAM,YAAY,QAAQ,OAAO,MAAM,aAAa,MAAM;AAG1D,QAAI;AACF,YAAM,EAAE,UAAU,IAAI,MAAM,OAAO,eAAe;AAClD,aAAO,UAAU,SAAS;AAAA,IAC5B,SAAS,OAAO;AACd,YAAM,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACtE,cAAQ;AAAA,QACN,2CAA2C,SAAS,KAAK,QAAQ;AAAA,MACnE;AACA,aAAO;AAAA,IACT;AAAA,EACF;AAGA,SAAO,QAAQ;AACjB;AAOO,SAAS,gBAAgB,WAA4B;AAC1D,MAAI,CAAC,aAAa,OAAO,cAAc,SAAU,QAAO;AACxD,QAAM,YAAY,UAAU,YAAY;AACxC,SAAO,UAAU,WAAW,OAAO,KAAK,UAAU,SAAS,OAAO;AACpE;AAKO,SAAS,6BACd,SACc;AACd,QAAM,SAAS,gBAAgB,QAAQ,SAAS;AAChD,QAAM,MAAM,KAAK,IAAI;AAGrB,QAAM,kBAAgC,EAAE,GAAG,QAAQ;AACnD,MAAI,cAAc;AAGlB,MAAI,WAAW,QAAQ,QAAQ;AAC7B,oBAAgB,SAAS;AACzB,kBAAc;AAAA,EAChB;AAEA,MAAI,QAAQ;AAIV,UAAM,wBAAwB,CAAC,WAAW,OAAO,UAAU,MAAM;AACjE,QACE,CAAC,QAAQ,mBACT,CAAC,sBAAsB,SAAS,QAAQ,eAAe,GACvD;AACA,sBAAgB,kBAAkB;AAClC,oBAAc;AACd,cAAQ;AAAA,QACN,gEAAyD,QAAQ,SAAS;AAAA,MAC5E;AAAA,IACF;AAGA,QAAI,QAAQ,gBAAgB,OAAQ;AAClC,sBAAgB,gBAAgB;AAChC,oBAAc;AACd,cAAQ;AAAA,QACN,8DAAuD,QAAQ,SAAS;AAAA,MAC1E;AAAA,IACF;AAGA,QAAI,QAAQ,YAAY,KAAM;AAC5B,sBAAgB,YAAY;AAC5B,oBAAc;AACd,cAAQ;AAAA,QACN,0DAAmD,QAAQ,SAAS;AAAA,MACtE;AAAA,IACF;AAGA,QACE,QAAQ,aAAa,YACrB,QAAQ,aAAa,mBACrB,QAAQ,aAAa,SACrB;AACA,cAAQ;AAAA,QACN,oDAA0C,QAAQ,QAAQ,qBAAqB,QAAQ,SAAS;AAAA,MAClG;AAAA,IACF;AAGA,QAAI,QAAQ,UAAU,SAAS,OAAO,KAAK,CAAC,QAAQ,SAAS;AAC3D,sBAAgB,UAAU;AAC1B,oBAAc;AACd,cAAQ;AAAA,QACN,oDAA6C,QAAQ,SAAS;AAAA,MAChE;AAAA,IACF;AAAA,EACF;AAGA,kBAAgB,mBAAmB,cAAc,kBAAkB;AACnE,kBAAgB,iBAAiB;AAEjC,MAAI,aAAa;AACf,YAAQ;AAAA,MACN,wDAAmD,QAAQ,SAAS;AAAA,IACtE;AAAA,EACF;AAEA,SAAO;AACT;AAKO,SAAS,mCAGd;AACA,QAAM,SAAS,gBAAgB;AAC/B,MAAI,CAAC,OAAO,eAAe;AACzB,WAAO,EAAE,UAAU,GAAG,OAAO,EAAE;AAAA,EACjC;AAEA,MAAI,cAAc;AAClB,QAAM,mBAAmB,OAAO,cAAc,IAAI,aAAW;AAC3D,UAAM,kBAAkB,6BAA6B,OAAO;AAC5D,QAAI,gBAAgB,qBAAqB,iBAAiB;AACxD;AAAA,IACF;AACA,WAAO;AAAA,EACT,CAAC;AAGD,MAAI,cAAc,GAAG;AACnB,UAAM,gBAAgB;AAAA,MACpB,GAAG;AAAA,MACH,eAAe;AAAA,IACjB;AACA,qBAAiB,aAAa;AAC9B,YAAQ,IAAI,yCAAkC,WAAW,iBAAiB;AAAA,EAC5E;AAEA,SAAO,EAAE,UAAU,aAAa,OAAO,OAAO,cAAc,OAAO;AACrE;AAKO,SAAS,6BACd,WACuB;AACvB,MAAI,CAAC,gBAAgB,SAAS,GAAG;AAC/B,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,kBAAyC;AAAA,IAC7C,eAAe;AAAA;AAAA,IACf,WAAW;AAAA;AAAA,IACX,iBAAiB;AAAA;AAAA,IACjB,QAAQ;AAAA,EACV;AAGA,MAAI,UAAU,SAAS,YAAY,GAAG;AACpC,oBAAgB,YAAY;AAC5B,oBAAgB,kBAAkB;AAAA,EACpC,WAAW,UAAU,SAAS,YAAY,GAAG;AAC3C,oBAAgB,YAAY;AAC5B,oBAAgB,kBAAkB;AAAA,EACpC;AAEA,SAAO;AACT;AAKO,SAAS,uBACd,MACA,WACA,QACA,SACA,WAAyB,UACX;AACd,QAAM,kBAAkB,6BAA6B,SAAS;AAE9D,QAAM,UAAwB;AAAA,IAC5B;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,WAAW;AAAA,IACpB;AAAA,IACA,WAAW,gBAAgB,aAAa;AAAA,IACxC,eAAe,gBAAgB,iBAAiB;AAAA,IAChD,iBAAiB,gBAAgB,mBAAmB;AAAA,IACpD,UAAU;AAAA,IACV,WAAW,KAAK,IAAI;AAAA,IACpB,QAAQ;AAAA,IACR,kBAAkB;AAAA,IAClB,gBAAgB,KAAK,IAAI;AAAA,EAC3B;AAEA,UAAQ,IAAI,uCAAkC,IAAI,KAAK,SAAS,GAAG;AACnE,SAAO;AACT;",
   "names": []
 }

package/dist/utils/credentials/CredentialStore.js

@@ -0,0 +1 @@
+//# sourceMappingURL=CredentialStore.js.map

package/dist/utils/credentials/CredentialStore.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/utils/credentials/EncryptedFileStore.js

@@ -0,0 +1,157 @@
+import {
+  createCipheriv,
+  createDecipheriv,
+  randomBytes,
+  scryptSync
+} from "crypto";
+import {
+  readFileSync,
+  writeFileSync,
+  existsSync,
+  chmodSync,
+  mkdirSync
+} from "fs";
+import { join } from "path";
+import { homedir, hostname } from "os";
+import { debug as debugLogger } from "../debugLogger.js";
+const ALGORITHM = "aes-256-gcm";
+const SALT = "minto-credentials-salt-v1";
+const CREDENTIALS_DIR = join(homedir(), ".minto");
+const CREDENTIALS_FILE = join(CREDENTIALS_DIR, "credentials.enc");
+function getMachineId() {
+  const username = process.env.USER || process.env.USERNAME || "unknown";
+  const machineHostname = hostname();
+  const homeDir = homedir();
+  return `${machineHostname}:${username}:${homeDir}`;
+}
+class EncryptedFileStore {
+  /**
+   * Derive a consistent encryption key from the machine ID using scrypt KDF
+   */
+  getEncryptionKey() {
+    const machineId = getMachineId();
+    return scryptSync(machineId, SALT, 32);
+  }
+  /**
+   * Ensure credentials directory exists with proper permissions
+   */
+  ensureCredentialsDir() {
+    if (!existsSync(CREDENTIALS_DIR)) {
+      mkdirSync(CREDENTIALS_DIR, { mode: 448, recursive: true });
+    }
+  }
+  /**
+   * Load and decrypt credentials from disk
+   */
+  loadCredentials() {
+    if (!existsSync(CREDENTIALS_FILE)) {
+      debugLogger.state("CREDENTIALS_FILE_NOT_FOUND", {
+        path: CREDENTIALS_FILE
+      });
+      return {};
+    }
+    try {
+      const encryptedData = readFileSync(CREDENTIALS_FILE);
+      if (encryptedData.length < 32) {
+        debugLogger.warn("CREDENTIALS_FILE_TOO_SHORT", {
+          path: CREDENTIALS_FILE,
+          size: encryptedData.length
+        });
+        return {};
+      }
+      const iv = encryptedData.subarray(0, 16);
+      const authTag = encryptedData.subarray(16, 32);
+      const encrypted = encryptedData.subarray(32);
+      const key = this.getEncryptionKey();
+      const decipher = createDecipheriv(ALGORITHM, key, iv);
+      decipher.setAuthTag(authTag);
+      const decrypted = Buffer.concat([
+        decipher.update(encrypted),
+        decipher.final()
+      ]);
+      const credentials = JSON.parse(decrypted.toString("utf-8"));
+      debugLogger.state("CREDENTIALS_LOADED", {
+        path: CREDENTIALS_FILE,
+        count: Object.keys(credentials).length
+      });
+      return credentials;
+    } catch (error) {
+      const errorMsg = error instanceof Error ? error.message : String(error);
+      debugLogger.error("CREDENTIALS_LOAD_ERROR", {
+        path: CREDENTIALS_FILE,
+        error: errorMsg,
+        errorType: error instanceof Error ? error.constructor.name : typeof error
+      });
+      return {};
+    }
+  }
+  /**
+   * Encrypt and save credentials to disk
+   */
+  saveCredentials(credentials) {
+    try {
+      this.ensureCredentialsDir();
+      const key = this.getEncryptionKey();
+      const iv = randomBytes(16);
+      const cipher = createCipheriv(ALGORITHM, key, iv);
+      const plaintext = JSON.stringify(credentials);
+      const encrypted = Buffer.concat([
+        cipher.update(plaintext, "utf-8"),
+        cipher.final()
+      ]);
+      const authTag = cipher.getAuthTag();
+      const combined = Buffer.concat([iv, authTag, encrypted]);
+      writeFileSync(CREDENTIALS_FILE, combined);
+      chmodSync(CREDENTIALS_FILE, 384);
+      debugLogger.state("CREDENTIALS_SAVED", {
+        path: CREDENTIALS_FILE,
+        size: combined.length
+      });
+    } catch (error) {
+      const errorMsg = error instanceof Error ? error.message : String(error);
+      debugLogger.error("CREDENTIALS_SAVE_ERROR", {
+        path: CREDENTIALS_FILE,
+        error: errorMsg
+      });
+      throw error;
+    }
+  }
+  /**
+   * Generate a composite key for storing credentials
+   */
+  makeKey(service, account) {
+    return `${service}:${account}`;
+  }
+  async get(service, account) {
+    const credentials = this.loadCredentials();
+    const key = this.makeKey(service, account);
+    return credentials[key] ?? null;
+  }
+  async set(service, account, password) {
+    const credentials = this.loadCredentials();
+    credentials[this.makeKey(service, account)] = password;
+    this.saveCredentials(credentials);
+  }
+  async delete(service, account) {
+    const credentials = this.loadCredentials();
+    const key = this.makeKey(service, account);
+    delete credentials[key];
+    this.saveCredentials(credentials);
+  }
+  async findCredentials(service) {
+    const credentials = this.loadCredentials();
+    const prefix = `${service}:`;
+    const results = [];
+    for (const [key, password] of Object.entries(credentials)) {
+      if (key.startsWith(prefix)) {
+        const account = key.slice(prefix.length);
+        results.push({ account, password });
+      }
+    }
+    return results;
+  }
+}
+export {
+  EncryptedFileStore
+};
+//# sourceMappingURL=EncryptedFileStore.js.map

package/dist/utils/credentials/EncryptedFileStore.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/utils/credentials/EncryptedFileStore.ts"],
+  "sourcesContent": ["import {\n  createCipheriv,\n  createDecipheriv,\n  randomBytes,\n  scryptSync,\n} from 'crypto'\nimport {\n  readFileSync,\n  writeFileSync,\n  existsSync,\n  chmodSync,\n  mkdirSync,\n} from 'fs'\nimport { join, dirname } from 'path'\nimport { homedir, hostname } from 'os'\nimport type { CredentialStore } from './CredentialStore'\nimport { debug as debugLogger } from '../debugLogger'\n\nconst ALGORITHM = 'aes-256-gcm'\nconst SALT = 'minto-credentials-salt-v1'\nconst CREDENTIALS_DIR = join(homedir(), '.minto')\nconst CREDENTIALS_FILE = join(CREDENTIALS_DIR, 'credentials.enc')\n\n/**\n * Get a machine identifier for deterministic key derivation.\n * Uses hostname + username + homedir to create a stable machine-specific identifier.\n */\nfunction getMachineId(): string {\n  const username = process.env.USER || process.env.USERNAME || 'unknown'\n  const machineHostname = hostname()\n  const homeDir = homedir()\n  return `${machineHostname}:${username}:${homeDir}`\n}\n\n/**\n * Encrypted file-based credential store using AES-256-GCM encryption.\n * Credentials are stored in ~/.minto/credentials.enc with machine-specific encryption.\n */\nexport class EncryptedFileStore implements CredentialStore {\n  /**\n   * Derive a consistent encryption key from the machine ID using scrypt KDF\n   */\n  private getEncryptionKey(): Buffer {\n    const machineId = getMachineId()\n    // scrypt(password, salt, keylen, options)\n    return scryptSync(machineId, SALT, 32)\n  }\n\n  /**\n   * Ensure credentials directory exists with proper permissions\n   */\n  private ensureCredentialsDir(): void {\n    if (!existsSync(CREDENTIALS_DIR)) {\n      mkdirSync(CREDENTIALS_DIR, { mode: 0o700, recursive: true })\n    }\n  }\n\n  /**\n   * Load and decrypt credentials from disk\n   */\n  private loadCredentials(): Record<string, string> {\n    if (!existsSync(CREDENTIALS_FILE)) {\n      debugLogger.state('CREDENTIALS_FILE_NOT_FOUND', {\n        path: CREDENTIALS_FILE,\n      })\n      return {}\n    }\n\n    try {\n      const encryptedData = readFileSync(CREDENTIALS_FILE)\n\n      // Format: iv (16) + authTag (16) + encryptedContent\n      if (encryptedData.length < 32) {\n        debugLogger.warn('CREDENTIALS_FILE_TOO_SHORT', {\n          path: CREDENTIALS_FILE,\n          size: encryptedData.length,\n        })\n        return {}\n      }\n\n      const iv = encryptedData.subarray(0, 16)\n      const authTag = encryptedData.subarray(16, 32)\n      const encrypted = encryptedData.subarray(32)\n\n      const key = this.getEncryptionKey()\n      const decipher = createDecipheriv(ALGORITHM, key, iv)\n      decipher.setAuthTag(authTag)\n\n      const decrypted = Buffer.concat([\n        decipher.update(encrypted),\n        decipher.final(),\n      ])\n\n      const credentials = JSON.parse(decrypted.toString('utf-8'))\n      debugLogger.state('CREDENTIALS_LOADED', {\n        path: CREDENTIALS_FILE,\n        count: Object.keys(credentials).length,\n      })\n\n      return credentials as Record<string, string>\n    } catch (error) {\n      const errorMsg = error instanceof Error ? error.message : String(error)\n      debugLogger.error('CREDENTIALS_LOAD_ERROR', {\n        path: CREDENTIALS_FILE,\n        error: errorMsg,\n        errorType:\n          error instanceof Error ? error.constructor.name : typeof error,\n      })\n      return {}\n    }\n  }\n\n  /**\n   * Encrypt and save credentials to disk\n   */\n  private saveCredentials(credentials: Record<string, string>): void {\n    try {\n      this.ensureCredentialsDir()\n\n      const key = this.getEncryptionKey()\n      const iv = randomBytes(16)\n      const cipher = createCipheriv(ALGORITHM, key, iv)\n\n      const plaintext = JSON.stringify(credentials)\n      const encrypted = Buffer.concat([\n        cipher.update(plaintext, 'utf-8'),\n        cipher.final(),\n      ])\n      const authTag = cipher.getAuthTag()\n\n      // Format: iv (16) + authTag (16) + encryptedContent\n      const combined = Buffer.concat([iv, authTag, encrypted])\n\n      writeFileSync(CREDENTIALS_FILE, combined)\n      // Set strict permissions: readable/writable only by owner\n      chmodSync(CREDENTIALS_FILE, 0o600)\n\n      debugLogger.state('CREDENTIALS_SAVED', {\n        path: CREDENTIALS_FILE,\n        size: combined.length,\n      })\n    } catch (error) {\n      const errorMsg = error instanceof Error ? error.message : String(error)\n      debugLogger.error('CREDENTIALS_SAVE_ERROR', {\n        path: CREDENTIALS_FILE,\n        error: errorMsg,\n      })\n      throw error\n    }\n  }\n\n  /**\n   * Generate a composite key for storing credentials\n   */\n  private makeKey(service: string, account: string): string {\n    return `${service}:${account}`\n  }\n\n  async get(service: string, account: string): Promise<string | null> {\n    const credentials = this.loadCredentials()\n    const key = this.makeKey(service, account)\n    return credentials[key] ?? null\n  }\n\n  async set(service: string, account: string, password: string): Promise<void> {\n    const credentials = this.loadCredentials()\n    credentials[this.makeKey(service, account)] = password\n    this.saveCredentials(credentials)\n  }\n\n  async delete(service: string, account: string): Promise<void> {\n    const credentials = this.loadCredentials()\n    const key = this.makeKey(service, account)\n    delete credentials[key]\n    this.saveCredentials(credentials)\n  }\n\n  async findCredentials(\n    service: string,\n  ): Promise<{ account: string; password: string }[]> {\n    const credentials = this.loadCredentials()\n    const prefix = `${service}:`\n    const results: { account: string; password: string }[] = []\n\n    for (const [key, password] of Object.entries(credentials)) {\n      if (key.startsWith(prefix)) {\n        const account = key.slice(prefix.length)\n        results.push({ account, password })\n      }\n    }\n\n    return results\n  }\n}\n"],
+  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,YAAqB;AAC9B,SAAS,SAAS,gBAAgB;AAElC,SAAS,SAAS,mBAAmB;AAErC,MAAM,YAAY;AAClB,MAAM,OAAO;AACb,MAAM,kBAAkB,KAAK,QAAQ,GAAG,QAAQ;AAChD,MAAM,mBAAmB,KAAK,iBAAiB,iBAAiB;AAMhE,SAAS,eAAuB;AAC9B,QAAM,WAAW,QAAQ,IAAI,QAAQ,QAAQ,IAAI,YAAY;AAC7D,QAAM,kBAAkB,SAAS;AACjC,QAAM,UAAU,QAAQ;AACxB,SAAO,GAAG,eAAe,IAAI,QAAQ,IAAI,OAAO;AAClD;AAMO,MAAM,mBAA8C;AAAA;AAAA;AAAA;AAAA,EAIjD,mBAA2B;AACjC,UAAM,YAAY,aAAa;AAE/B,WAAO,WAAW,WAAW,MAAM,EAAE;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA,EAKQ,uBAA6B;AACnC,QAAI,CAAC,WAAW,eAAe,GAAG;AAChC,gBAAU,iBAAiB,EAAE,MAAM,KAAO,WAAW,KAAK,CAAC;AAAA,IAC7D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAA0C;AAChD,QAAI,CAAC,WAAW,gBAAgB,GAAG;AACjC,kBAAY,MAAM,8BAA8B;AAAA,QAC9C,MAAM;AAAA,MACR,CAAC;AACD,aAAO,CAAC;AAAA,IACV;AAEA,QAAI;AACF,YAAM,gBAAgB,aAAa,gBAAgB;AAGnD,UAAI,cAAc,SAAS,IAAI;AAC7B,oBAAY,KAAK,8BAA8B;AAAA,UAC7C,MAAM;AAAA,UACN,MAAM,cAAc;AAAA,QACtB,CAAC;AACD,eAAO,CAAC;AAAA,MACV;AAEA,YAAM,KAAK,cAAc,SAAS,GAAG,EAAE;AACvC,YAAM,UAAU,cAAc,SAAS,IAAI,EAAE;AAC7C,YAAM,YAAY,cAAc,SAAS,EAAE;AAE3C,YAAM,MAAM,KAAK,iBAAiB;AAClC,YAAM,WAAW,iBAAiB,WAAW,KAAK,EAAE;AACpD,eAAS,WAAW,OAAO;AAE3B,YAAM,YAAY,OAAO,OAAO;AAAA,QAC9B,SAAS,OAAO,SAAS;AAAA,QACzB,SAAS,MAAM;AAAA,MACjB,CAAC;AAED,YAAM,cAAc,KAAK,MAAM,UAAU,SAAS,OAAO,CAAC;AAC1D,kBAAY,MAAM,sBAAsB;AAAA,QACtC,MAAM;AAAA,QACN,OAAO,OAAO,KAAK,WAAW,EAAE;AAAA,MAClC,CAAC;AAED,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACtE,kBAAY,MAAM,0BAA0B;AAAA,QAC1C,MAAM;AAAA,QACN,OAAO;AAAA,QACP,WACE,iBAAiB,QAAQ,MAAM,YAAY,OAAO,OAAO;AAAA,MAC7D,CAAC;AACD,aAAO,CAAC;AAAA,IACV;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,gBAAgB,aAA2C;AACjE,QAAI;AACF,WAAK,qBAAqB;AAE1B,YAAM,MAAM,KAAK,iBAAiB;AAClC,YAAM,KAAK,YAAY,EAAE;AACzB,YAAM,SAAS,eAAe,WAAW,KAAK,EAAE;AAEhD,YAAM,YAAY,KAAK,UAAU,WAAW;AAC5C,YAAM,YAAY,OAAO,OAAO;AAAA,QAC9B,OAAO,OAAO,WAAW,OAAO;AAAA,QAChC,OAAO,MAAM;AAAA,MACf,CAAC;AACD,YAAM,UAAU,OAAO,WAAW;AAGlC,YAAM,WAAW,OAAO,OAAO,CAAC,IAAI,SAAS,SAAS,CAAC;AAEvD,oBAAc,kBAAkB,QAAQ;AAExC,gBAAU,kBAAkB,GAAK;AAEjC,kBAAY,MAAM,qBAAqB;AAAA,QACrC,MAAM;AAAA,QACN,MAAM,SAAS;AAAA,MACjB,CAAC;AAAA,IACH,SAAS,OAAO;AACd,YAAM,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACtE,kBAAY,MAAM,0BAA0B;AAAA,QAC1C,MAAM;AAAA,QACN,OAAO;AAAA,MACT,CAAC;AACD,YAAM;AAAA,IACR;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,QAAQ,SAAiB,SAAyB;AACxD,WAAO,GAAG,OAAO,IAAI,OAAO;AAAA,EAC9B;AAAA,EAEA,MAAM,IAAI,SAAiB,SAAyC;AAClE,UAAM,cAAc,KAAK,gBAAgB;AACzC,UAAM,MAAM,KAAK,QAAQ,SAAS,OAAO;AACzC,WAAO,YAAY,GAAG,KAAK;AAAA,EAC7B;AAAA,EAEA,MAAM,IAAI,SAAiB,SAAiB,UAAiC;AAC3E,UAAM,cAAc,KAAK,gBAAgB;AACzC,gBAAY,KAAK,QAAQ,SAAS,OAAO,CAAC,IAAI;AAC9C,SAAK,gBAAgB,WAAW;AAAA,EAClC;AAAA,EAEA,MAAM,OAAO,SAAiB,SAAgC;AAC5D,UAAM,cAAc,KAAK,gBAAgB;AACzC,UAAM,MAAM,KAAK,QAAQ,SAAS,OAAO;AACzC,WAAO,YAAY,GAAG;AACtB,SAAK,gBAAgB,WAAW;AAAA,EAClC;AAAA,EAEA,MAAM,gBACJ,SACkD;AAClD,UAAM,cAAc,KAAK,gBAAgB;AACzC,UAAM,SAAS,GAAG,OAAO;AACzB,UAAM,UAAmD,CAAC;AAE1D,eAAW,CAAC,KAAK,QAAQ,KAAK,OAAO,QAAQ,WAAW,GAAG;AACzD,UAAI,IAAI,WAAW,MAAM,GAAG;AAC1B,cAAM,UAAU,IAAI,MAAM,OAAO,MAAM;AACvC,gBAAQ,KAAK,EAAE,SAAS,SAAS,CAAC;AAAA,MACpC;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AACF;",
+  "names": []
+}

package/dist/utils/credentials/index.js

@@ -0,0 +1,37 @@
+import { EncryptedFileStore } from "./EncryptedFileStore.js";
+let store = null;
+const SERVICE_NAME = "minto-api";
+function getCredentialStore() {
+  if (!store) {
+    store = new EncryptedFileStore();
+  }
+  return store;
+}
+function resetCredentialStore() {
+  store = null;
+}
+async function getApiKey(modelName) {
+  return getCredentialStore().get(SERVICE_NAME, modelName);
+}
+async function setApiKey(modelName, apiKey) {
+  return getCredentialStore().set(SERVICE_NAME, modelName, apiKey);
+}
+async function deleteApiKey(modelName) {
+  return getCredentialStore().delete(SERVICE_NAME, modelName);
+}
+async function findAllApiKeys() {
+  const credentials = await getCredentialStore().findCredentials(SERVICE_NAME);
+  return credentials.map(({ account, password }) => ({
+    modelName: account,
+    apiKey: password
+  }));
+}
+export {
+  deleteApiKey,
+  findAllApiKeys,
+  getApiKey,
+  getCredentialStore,
+  resetCredentialStore,
+  setApiKey
+};
+//# sourceMappingURL=index.js.map

package/dist/utils/credentials/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/utils/credentials/index.ts"],
+  "sourcesContent": ["import { EncryptedFileStore } from './EncryptedFileStore'\nimport type { CredentialStore } from './CredentialStore'\n\n// Current credential store implementation (using encrypted files)\n// In Phase 2, this can be extended to support keytar for native OS keychains\nlet store: CredentialStore | null = null\n\nconst SERVICE_NAME = 'minto-api'\n\n/**\n * Get the current credential store instance\n * Currently uses encrypted file storage; will be extended to support keytar in Phase 2\n */\nexport function getCredentialStore(): CredentialStore {\n  if (!store) {\n    store = new EncryptedFileStore()\n  }\n  return store\n}\n\n/**\n * Reset the credential store (primarily for testing)\n */\nexport function resetCredentialStore(): void {\n  store = null\n}\n\n/**\n * Retrieve an API key for a specific model from the credential store.\n * Returns null if the key is not found.\n *\n * @param modelName The name of the model to retrieve the API key for\n * @returns The API key or null if not stored in credential store\n */\nexport async function getApiKey(modelName: string): Promise<string | null> {\n  return getCredentialStore().get(SERVICE_NAME, modelName)\n}\n\n/**\n * Store an API key for a specific model in the credential store.\n * This stores the key securely in encrypted storage.\n *\n * @param modelName The name of the model\n * @param apiKey The API key to store\n */\nexport async function setApiKey(\n  modelName: string,\n  apiKey: string,\n): Promise<void> {\n  return getCredentialStore().set(SERVICE_NAME, modelName, apiKey)\n}\n\n/**\n * Delete an API key for a specific model from the credential store.\n *\n * @param modelName The name of the model\n */\nexport async function deleteApiKey(modelName: string): Promise<void> {\n  return getCredentialStore().delete(SERVICE_NAME, modelName)\n}\n\n/**\n * Find all stored API keys for the service\n *\n * @returns Array of model names and their API keys\n */\nexport async function findAllApiKeys(): Promise<\n  { modelName: string; apiKey: string }[]\n> {\n  const credentials = await getCredentialStore().findCredentials(SERVICE_NAME)\n  return credentials.map(({ account, password }) => ({\n    modelName: account,\n    apiKey: password,\n  }))\n}\n"],
+  "mappings": "AAAA,SAAS,0BAA0B;AAKnC,IAAI,QAAgC;AAEpC,MAAM,eAAe;AAMd,SAAS,qBAAsC;AACpD,MAAI,CAAC,OAAO;AACV,YAAQ,IAAI,mBAAmB;AAAA,EACjC;AACA,SAAO;AACT;AAKO,SAAS,uBAA6B;AAC3C,UAAQ;AACV;AASA,eAAsB,UAAU,WAA2C;AACzE,SAAO,mBAAmB,EAAE,IAAI,cAAc,SAAS;AACzD;AASA,eAAsB,UACpB,WACA,QACe;AACf,SAAO,mBAAmB,EAAE,IAAI,cAAc,WAAW,MAAM;AACjE;AAOA,eAAsB,aAAa,WAAkC;AACnE,SAAO,mBAAmB,EAAE,OAAO,cAAc,SAAS;AAC5D;AAOA,eAAsB,iBAEpB;AACA,QAAM,cAAc,MAAM,mBAAmB,EAAE,gBAAgB,YAAY;AAC3E,SAAO,YAAY,IAAI,CAAC,EAAE,SAAS,SAAS,OAAO;AAAA,IACjD,WAAW;AAAA,IACX,QAAQ;AAAA,EACV,EAAE;AACJ;",
+  "names": []
+}

package/dist/utils/credentials/migration.js

@@ -0,0 +1,82 @@
+import { getGlobalConfig, saveGlobalConfig } from "../config.js";
+import { setApiKey } from "./index.js";
+import { debug as debugLogger } from "../debugLogger.js";
+async function migrateApiKeysToEncrypted() {
+  const config = getGlobalConfig();
+  let migrated = 0;
+  let skipped = 0;
+  const errors = [];
+  if (!config.modelProfiles || config.modelProfiles.length === 0) {
+    debugLogger.state("MIGRATION_NO_PROFILES", {});
+    return { migrated: 0, errors: [], skipped: 0 };
+  }
+  try {
+    debugLogger.state("MIGRATION_START", {
+      profileCount: config.modelProfiles.length
+    });
+    const migratedProfiles = await Promise.all(
+      config.modelProfiles.map(async (profile) => {
+        if (!profile.apiKey) {
+          skipped++;
+          return profile;
+        }
+        if (profile.apiKey.startsWith("encrypted:")) {
+          debugLogger.state("MIGRATION_SKIP_ALREADY_ENCRYPTED", {
+            modelName: profile.modelName
+          });
+          skipped++;
+          return profile;
+        }
+        try {
+          await setApiKey(profile.modelName, profile.apiKey);
+          const migratedProfile = {
+            ...profile,
+            apiKey: `encrypted:${profile.modelName}`
+          };
+          debugLogger.state("MIGRATION_SUCCESS", {
+            modelName: profile.modelName,
+            provider: profile.provider
+          });
+          migrated++;
+          return migratedProfile;
+        } catch (error) {
+          const errorMsg = error instanceof Error ? error.message : String(error);
+          const errorText = `Failed to migrate ${profile.modelName}: ${errorMsg}`;
+          errors.push(errorText);
+          debugLogger.error("MIGRATION_PROFILE_ERROR", {
+            modelName: profile.modelName,
+            error: errorMsg
+          });
+          return profile;
+        }
+      })
+    );
+    if (migrated > 0) {
+      const updatedConfig = {
+        ...config,
+        modelProfiles: migratedProfiles
+      };
+      saveGlobalConfig(updatedConfig);
+      debugLogger.state("MIGRATION_CONFIG_SAVED", {
+        profilesMigrated: migrated,
+        profilesSkipped: skipped
+      });
+    }
+    debugLogger.state("MIGRATION_COMPLETE", {
+      migrated,
+      skipped,
+      errors: errors.length
+    });
+  } catch (error) {
+    const errorMsg = error instanceof Error ? error.message : String(error);
+    debugLogger.error("MIGRATION_FATAL_ERROR", {
+      error: errorMsg
+    });
+    errors.push(`Fatal migration error: ${errorMsg}`);
+  }
+  return { migrated, errors, skipped };
+}
+export {
+  migrateApiKeysToEncrypted
+};
+//# sourceMappingURL=migration.js.map

package/dist/utils/credentials/migration.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/utils/credentials/migration.ts"],
+  "sourcesContent": ["import { getGlobalConfig, saveGlobalConfig, type GlobalConfig } from '../config'\nimport { setApiKey } from './index'\nimport { debug as debugLogger } from '../debugLogger'\n\nexport interface MigrationResult {\n  migrated: number\n  errors: string[]\n  skipped: number\n}\n\n/**\n * Migrate API keys from plaintext config to encrypted credential store.\n * This function:\n * 1. Reads all model profiles from the global config\n * 2. For each profile with a plaintext apiKey (not already encrypted):\n *    - Stores the key in the encrypted credential store\n *    - Updates the config to use the `encrypted:modelName` reference\n * 3. Saves the updated config\n *\n * After migration, the actual API keys are removed from the config file and stored\n * securely in ~/.minto/credentials.enc\n *\n * @returns Migration result with counts of migrated, skipped, and error entries\n */\nexport async function migrateApiKeysToEncrypted(): Promise<MigrationResult> {\n  const config = getGlobalConfig()\n  let migrated = 0\n  let skipped = 0\n  const errors: string[] = []\n\n  if (!config.modelProfiles || config.modelProfiles.length === 0) {\n    debugLogger.state('MIGRATION_NO_PROFILES', {})\n    return { migrated: 0, errors: [], skipped: 0 }\n  }\n\n  try {\n    debugLogger.state('MIGRATION_START', {\n      profileCount: config.modelProfiles.length,\n    })\n\n    // Process each model profile\n    const migratedProfiles = await Promise.all(\n      config.modelProfiles.map(async profile => {\n        if (!profile.apiKey) {\n          skipped++\n          return profile\n        }\n\n        // Skip if already encrypted\n        if (profile.apiKey.startsWith('encrypted:')) {\n          debugLogger.state('MIGRATION_SKIP_ALREADY_ENCRYPTED', {\n            modelName: profile.modelName,\n          })\n          skipped++\n          return profile\n        }\n\n        try {\n          // Store the plaintext key in encrypted credential store\n          await setApiKey(profile.modelName, profile.apiKey)\n\n          // Update the profile to reference the encrypted key\n          const migratedProfile = {\n            ...profile,\n            apiKey: `encrypted:${profile.modelName}`,\n          }\n\n          debugLogger.state('MIGRATION_SUCCESS', {\n            modelName: profile.modelName,\n            provider: profile.provider,\n          })\n\n          migrated++\n          return migratedProfile\n        } catch (error) {\n          const errorMsg =\n            error instanceof Error ? error.message : String(error)\n          const errorText = `Failed to migrate ${profile.modelName}: ${errorMsg}`\n          errors.push(errorText)\n          debugLogger.error('MIGRATION_PROFILE_ERROR', {\n            modelName: profile.modelName,\n            error: errorMsg,\n          })\n          // Return unchanged profile on error\n          return profile\n        }\n      }),\n    )\n\n    // Save the migrated config only if something changed\n    if (migrated > 0) {\n      const updatedConfig: GlobalConfig = {\n        ...config,\n        modelProfiles: migratedProfiles,\n      }\n      saveGlobalConfig(updatedConfig)\n      debugLogger.state('MIGRATION_CONFIG_SAVED', {\n        profilesMigrated: migrated,\n        profilesSkipped: skipped,\n      })\n    }\n\n    debugLogger.state('MIGRATION_COMPLETE', {\n      migrated,\n      skipped,\n      errors: errors.length,\n    })\n  } catch (error) {\n    const errorMsg = error instanceof Error ? error.message : String(error)\n    debugLogger.error('MIGRATION_FATAL_ERROR', {\n      error: errorMsg,\n    })\n    errors.push(`Fatal migration error: ${errorMsg}`)\n  }\n\n  return { migrated, errors, skipped }\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB,wBAA2C;AACrE,SAAS,iBAAiB;AAC1B,SAAS,SAAS,mBAAmB;AAsBrC,eAAsB,4BAAsD;AAC1E,QAAM,SAAS,gBAAgB;AAC/B,MAAI,WAAW;AACf,MAAI,UAAU;AACd,QAAM,SAAmB,CAAC;AAE1B,MAAI,CAAC,OAAO,iBAAiB,OAAO,cAAc,WAAW,GAAG;AAC9D,gBAAY,MAAM,yBAAyB,CAAC,CAAC;AAC7C,WAAO,EAAE,UAAU,GAAG,QAAQ,CAAC,GAAG,SAAS,EAAE;AAAA,EAC/C;AAEA,MAAI;AACF,gBAAY,MAAM,mBAAmB;AAAA,MACnC,cAAc,OAAO,cAAc;AAAA,IACrC,CAAC;AAGD,UAAM,mBAAmB,MAAM,QAAQ;AAAA,MACrC,OAAO,cAAc,IAAI,OAAM,YAAW;AACxC,YAAI,CAAC,QAAQ,QAAQ;AACnB;AACA,iBAAO;AAAA,QACT;AAGA,YAAI,QAAQ,OAAO,WAAW,YAAY,GAAG;AAC3C,sBAAY,MAAM,oCAAoC;AAAA,YACpD,WAAW,QAAQ;AAAA,UACrB,CAAC;AACD;AACA,iBAAO;AAAA,QACT;AAEA,YAAI;AAEF,gBAAM,UAAU,QAAQ,WAAW,QAAQ,MAAM;AAGjD,gBAAM,kBAAkB;AAAA,YACtB,GAAG;AAAA,YACH,QAAQ,aAAa,QAAQ,SAAS;AAAA,UACxC;AAEA,sBAAY,MAAM,qBAAqB;AAAA,YACrC,WAAW,QAAQ;AAAA,YACnB,UAAU,QAAQ;AAAA,UACpB,CAAC;AAED;AACA,iBAAO;AAAA,QACT,SAAS,OAAO;AACd,gBAAM,WACJ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACvD,gBAAM,YAAY,qBAAqB,QAAQ,SAAS,KAAK,QAAQ;AACrE,iBAAO,KAAK,SAAS;AACrB,sBAAY,MAAM,2BAA2B;AAAA,YAC3C,WAAW,QAAQ;AAAA,YACnB,OAAO;AAAA,UACT,CAAC;AAED,iBAAO;AAAA,QACT;AAAA,MACF,CAAC;AAAA,IACH;AAGA,QAAI,WAAW,GAAG;AAChB,YAAM,gBAA8B;AAAA,QAClC,GAAG;AAAA,QACH,eAAe;AAAA,MACjB;AACA,uBAAiB,aAAa;AAC9B,kBAAY,MAAM,0BAA0B;AAAA,QAC1C,kBAAkB;AAAA,QAClB,iBAAiB;AAAA,MACnB,CAAC;AAAA,IACH;AAEA,gBAAY,MAAM,sBAAsB;AAAA,MACtC;AAAA,MACA;AAAA,MACA,QAAQ,OAAO;AAAA,IACjB,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM,WAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACtE,gBAAY,MAAM,yBAAyB;AAAA,MACzC,OAAO;AAAA,IACT,CAAC;AACD,WAAO,KAAK,0BAA0B,QAAQ,EAAE;AAAA,EAClD;AAEA,SAAO,EAAE,UAAU,QAAQ,QAAQ;AACrC;",
+  "names": []
+}

package/dist/utils/markdown.js

@@ -4,8 +4,20 @@ import chalk from "chalk";
 import { EOL } from "os";
 import { highlight, supportsLanguage } from "cli-highlight";
 import { logError } from "./log.js";
+function stripMarkdownCodeBlockWrapper(content) {
+  const trimmed = content.trim();
+  const codeBlockRegex = /^```(?:markdown|md)?\s*\n([\s\S]*?)\n```$/;
+  const match = trimmed.match(codeBlockRegex);
+  if (match) {
+    return match[1] ?? trimmed;
+  }
+  return content;
+}
 function applyMarkdown(content) {
-  return marked.lexer(stripSystemMessages(content)).map((_) => format(_)).join("").trim();
+  const preprocessed = stripMarkdownCodeBlockWrapper(
+    stripSystemMessages(content)
+  );
+  return marked.lexer(preprocessed).map((_) => format(_)).join("").trim();
 }
 function format(token, listDepth = 0, orderedListNumber = null, parent = null) {
   switch (token.type) {