@wrongstack/cli 0.284.0 → 0.285.0

package/dist/auth-menu/local.d.ts

@@ -0,0 +1,138 @@
+/**
+ * `wstack auth local` — quick-add shortcut for local-LLM servers.
+ *
+ * Three servers are first-class: Ollama, vLLM, LM Studio. They share an
+ * OpenAI-compatible wire format at `/v1/chat/completions`, so each entry
+ * here just declares the defaults that the matching wire preset
+ * (see `@wrongstack/providers/src/presets/local-llm.ts`) expects.
+ *
+ * Difference that matters at the config layer:
+ *   - Ollama  → no auth (the server rejects any Authorization header).
+ *   - vLLM    → optional Bearer auth; key is left blank when auth is
+ *               disabled on the server, so the prompt is "Enter to skip".
+ *   - LM Studio → same as vLLM (optional Bearer).
+ *
+ * Selection is interactive by default — the user picks `1/2/3` from a
+ * numbered list. A direct path is also exposed for scripting via the
+ * `--name <ollama|vllm|lmstudio>` flag.
+ *
+ * Before saving, the shortcut runs a health probe (`GET /v1/models`)
+ * to verify the server is actually reachable. The probe is opt-out via
+ * `--no-probe`; failures are non-fatal by default — the user is asked
+ * whether to save anyway. Every log line is run through the shared
+ * `SecretScrubber` before reaching the renderer, so a Bearer token
+ * accidentally captured in a probe log can never echo to the terminal
+ * in plaintext.
+ */
+import { type SecretScrubber } from '@wrongstack/core';
+import { LOCAL_LLM_PRESETS, type LocalLlmPresetEntry } from './local-presets.js';
+import { suggestLabel } from './shared.js';
+import type { AuthMenuDeps } from './types.js';
+import { probeLocalLlm } from '@wrongstack/runtime/probe';
+import type { ProbeOptions, ProbeResult } from '@wrongstack/runtime/probe';
+import { type AuthAuditLogger } from './auth-menu-audit.js';
+export { probeLocalLlm, type ProbeOptions, type ProbeResult };
+export { LOCAL_LLM_PRESETS, type LocalLlmPresetEntry };
+export interface RunAuthLocalOptions {
+    /**
+     * Direct pick: skip the interactive menu and configure this preset.
+     * `wstack auth local --name ollama` maps to `{ name: 'ollama' }`.
+     */
+    name?: string | undefined;
+    /**
+     * Override the default base URL. Empty / undefined falls back to the
+     * preset's `defaultBaseUrl`.
+     */
+    baseUrl?: string | undefined;
+    /**
+     * Optional key to save. When omitted, the shortcut prompts the user
+     * (unless the preset is `noAuth: true`).
+     */
+    apiKey?: string | undefined;
+    /**
+     * Optional label for the saved key. Defaults to "default" (matching
+     * `addKeyForProvider` and `runAuthDirect`).
+     */
+    label?: string | undefined;
+    /**
+     * Force-skip the key prompt even for presets that normally accept a
+     * key. Useful for scripting `wstack auth local --name ollama --no-key`
+     * so no TTY input is required.
+     */
+    skipKey?: boolean | undefined;
+    /**
+     * Skip the reachability probe entirely. Use for scripting when the
+     * local server may not be running yet (e.g. CI installing Ollama in
+     * the background) but the user still wants the config in place.
+     */
+    noProbe?: boolean | undefined;
+    /**
+     * Run the probe and report, but don't save. Useful for re-checking a
+     * previously-saved local provider.
+     */
+    probeOnly?: boolean | undefined;
+    /**
+     * Inject a custom `fetch` (test seam). Defaults to the global one.
+     */
+    fetchImpl?: typeof fetch | undefined;
+    /**
+     * Probe timeout override (test seam). Defaults to {@link PROBE_TIMEOUT_MS}.
+     */
+    probeTimeoutMs?: number | undefined;
+    /**
+     * Pre-populate `providers[id].models` so the user can launch
+     * `wstack --provider <id> --model <picked>` right after the shortcut
+     * completes. Four shapes are accepted:
+     *
+     *   - `undefined` (or omitted) → don't touch `cfg.models`.
+     *   - `'first'` → take the first model id from the probe.
+     *   - `<N>` (a positive integer string) → take the first N ids.
+     *     Caps at the available list size.
+     *   - Anything else → treated as a literal comma-separated list of
+     *     model ids. Used verbatim, ignoring the probe result.
+     *
+     * When the probe didn't run (`noProbe: true`) or failed, only the
+     * literal-list shape is meaningful — the count-based shapes return
+     * an empty list and the shortcut proceeds without writing models.
+     */
+    models?: string | undefined;
+    /**
+     * Audit logger (test seam). When supplied, the function emits
+     * structured `auth.local.*` events for the save lifecycle:
+     * `add` / `clear` / `undo` / `probe_skip` / `probe_failed_save`.
+     * The default is a no-op logger (production usage in
+     * `wstack auth local` doesn't currently wire one — the WS server
+     * is the source of truth for the dedicated `provider.*` message
+     * types on the WebUI side; this option exists so the
+     * integration test can capture the CLI flow's events for
+     * end-to-end verification).
+     */
+    audit?: AuthAuditLogger | undefined;
+}
+/**
+ * Quick-add entry point. Returns 0 on success, 1 on a hard error.
+ *
+ * The exit-code semantics are:
+ *   - 0 → provider saved (or `probeOnly` ran successfully / user
+ *         canceled with no state change / user declined save after
+ *         probe failure)
+ *   - 1 → hard failure: unknown --name, mutate threw, etc.
+ */
+export declare function runAuthLocal(deps: AuthMenuDeps, opts?: RunAuthLocalOptions): Promise<number>;
+/**
+ * Resolve the user-supplied `models` option against the probe result.
+ *
+ *   - `undefined`        → null (don't write `cfg.models`)
+ *   - `'first'`          → first probe id, or null if probe failed
+ *   - `<positive int>`   → first N probe ids, or null if probe failed
+ *   - literal csv        → parsed list, ignoring the probe (the
+ *                          user knows exactly which ids they want)
+ *
+ * Returns the resolved id list, or null when no `models` should be
+ * written. Each entry is scrubbed before return — the user's literal
+ * list could in theory contain a credential if they pasted it from
+ * a config dump; better to scrub once here than risk echoing it back.
+ */
+export declare function resolveModelList(models: string | undefined, probe: ProbeResult | undefined, scrubber: SecretScrubber): string[] | null;
+export { suggestLabel };
+//# sourceMappingURL=local.d.ts.map

package/dist/auth-menu/local.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../src/auth-menu/local.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,KAAK,cAAc,EAAgC,MAAM,kBAAkB,CAAC;AAQrF,OAAO,EAAE,iBAAiB,EAAE,KAAK,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EACL,KAAK,eAAe,EAIrB,MAAM,sBAAsB,CAAC;AAO9B,OAAO,EAAE,aAAa,EAAE,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,CAAC;AAM9D,OAAO,EAAE,iBAAiB,EAAE,KAAK,mBAAmB,EAAE,CAAC;AAIvD,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAChC;;OAEG;IACH,SAAS,CAAC,EAAE,OAAO,KAAK,GAAG,SAAS,CAAC;IACrC;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B;;;;;;;;;;OAUG;IACH,KAAK,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;CACrC;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,YAAY,EAClB,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,MAAM,CAAC,CAiNjB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,KAAK,EAAE,WAAW,GAAG,SAAS,EAC9B,QAAQ,EAAE,cAAc,GACvB,MAAM,EAAE,GAAG,IAAI,CAoCjB;AAqJD,OAAO,EAAE,YAAY,EAAE,CAAC"}

package/dist/auth-menu/oauth-menu.d.ts

@@ -0,0 +1,10 @@
+import type { AuthMenuDeps } from './types.js';
+/** Render subscription OAuth login choices shared by the top menu and add flow. */
+export declare function renderOAuthLoginOptions(deps: AuthMenuDeps, indent?: string): void;
+/** Run an OAuth login for a normalized menu choice. Returns true when handled. */
+export declare function runOAuthLoginChoice(deps: AuthMenuDeps, choice: string, opts?: {
+    allowNumeric?: boolean;
+}): Promise<boolean>;
+/** Sub-menu: pick a subscription to sign in with (OAuth). */
+export declare function runOAuthLoginMenu(deps: AuthMenuDeps): Promise<void>;
+//# sourceMappingURL=oauth-menu.d.ts.map

package/dist/auth-menu/oauth-menu.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-menu.d.ts","sourceRoot":"","sources":["../../src/auth-menu/oauth-menu.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,mFAAmF;AACnF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,SAAS,GAAG,IAAI,CAOjF;AAED,kFAAkF;AAClF,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAED,6DAA6D;AAC7D,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAYzE"}

package/dist/auth-menu/openai-codex-oauth.d.ts

@@ -0,0 +1,167 @@
+/**
+ * OpenAI Codex — "Sign in with ChatGPT" OAuth (Authorization Code + PKCE).
+ *
+ * This is the ONLY login flow that actually works for using a ChatGPT
+ * Plus/Pro/Team subscription programmatically. It mirrors the real Codex CLI:
+ *
+ *   1. Generate a PKCE verifier/challenge (S256) + CSRF state.
+ *   2. Start a loopback HTTP server on http://localhost:1455/auth/callback.
+ *   3. Open the browser to https://auth.openai.com/oauth/authorize.
+ *   4. The browser redirects back to the loopback with `?code=...&state=...`.
+ *   5. Exchange the code at https://auth.openai.com/oauth/token for an
+ *      access_token + refresh_token (and an id_token carrying the account id).
+ *   6. Store the tokens in the vault as an `oauth` ProviderApiKey.
+ *
+ * The resulting access token is a JWT whose `https://api.openai.com/auth`
+ * claim contains `chatgpt_account_id`. Requests then go to the ChatGPT
+ * backend (`chatgpt.com/backend-api/codex/responses`) — NOT api.openai.com —
+ * which is what the `openai-codex` wire family handles. The standard
+ * API-key flow (`family: openai` → api.openai.com/chat/completions) is left
+ * completely untouched.
+ *
+ * NOTE: a ChatGPT web *session cookie* is NOT an API token. The old
+ * device-code + cookie-scraping attempts could never produce a usable
+ * credential; this module replaces them.
+ */
+import { type ModelsRegistry } from '@wrongstack/core';
+import type { AuthMenuDeps } from './types.js';
+/** Canonical provider id under which ChatGPT-login credentials are stored. */
+export declare const CODEX_PROVIDER_ID = "openai-codex";
+/** Default ChatGPT backend base. The wire family appends `/codex/responses`. */
+export declare const CODEX_BASE_URL = "https://chatgpt.com/backend-api";
+/**
+ * Fallback model list used when BOTH the live backend AND the models.dev
+ * catalog are unreachable. This should never happen in practice — the
+ * catalog is cached locally and the only scenario where both fail is a
+ * fresh install with no network on first login.
+ *
+ * The primary resolution order in `resolveCodexModels()` is:
+ *  1. Live backend (`GET /models`)
+ *  2. models.dev catalog (`family: gpt-codex*` under `openai` provider)
+ *  3. This inline fallback
+ */
+export interface CodexTokens {
+    access: string;
+    refresh: string;
+    /** Absolute expiry in epoch milliseconds. */
+    expires: number;
+    idToken?: string | undefined;
+}
+export interface Pkce {
+    verifier: string;
+    challenge: string;
+}
+/** Generate a PKCE verifier + S256 challenge. */
+export declare function generatePkce(): Pkce;
+/** Build the full authorize URL with all Codex-required query params. */
+export declare function buildAuthorizeUrl(challenge: string, state: string, port?: number): string;
+/**
+ * Extract `chatgpt_account_id` from an access/id token JWT. Returns null when
+ * the token isn't a JWT or lacks the claim (the caller decides whether that
+ * is fatal — for login it is; for a cached display value it isn't).
+ */
+export declare function extractAccountId(token: string): string | null;
+/**
+ * Recommended Codex models for ChatGPT sign-in. Live backend discovery
+ * wins; these values are only used when the backend/catalog cannot
+ * provide a list. Derived from `CODEX_MODELS` in core (the single source of
+ * truth for Codex id/name/description) — used both by OAuth login
+ * (resolveCodexModels → tier 3) and by the provider-boot synthesis
+ * path (wiring/provider.ts when the catalog is unavailable).
+ */
+export declare const FALLBACK_CODEX_MODELS: ReadonlyArray<{
+    id: string;
+    name: string;
+}>;
+/** Families in the models.dev catalog that indicate Codex / Responses API compatibility. */
+export declare const CODEX_CATALOG_FAMILIES: Set<string>;
+export declare function fallbackCodexModelIds(): string[];
+export declare function fallbackCodexProviderModels(): Array<{
+    id: string;
+    name: string;
+}>;
+/**
+ * Filter a list of available model ids down to the ones that are still
+ * current for ChatGPT sign-in (i.e. present in FALLBACK_CODEX_MODELS).
+ * Used by both OAuth login (to drop deprecated ids from the live /models
+ * response) and by the provider-boot synthesis (to pick current ids out
+ * of the models.dev catalog).
+ */
+export declare function filterCurrentCodexModelIds(ids: Iterable<string>): string[];
+export declare function isCodexCatalogModel(model: {
+    family?: string | undefined;
+}): boolean;
+/**
+ * Resolve the list of available Codex models using a 3-tier fallback chain:
+ *
+ *  1. **Live backend** — `fetchCodexModels()` hits `GET <baseUrl>/models`
+ *     and keeps only current Codex model ids.
+ *  2. **models.dev catalog** — queries the `openai` provider in the cached
+ *     models.dev registry and picks models whose `family` is `gpt-codex` or
+ *     `gpt-codex-spark` and whose ids are current for ChatGPT sign-in.
+ *  3. **Inline fallback** — a minimal list of documented mainstream models
+ *     (`gpt-5.6-sol`, `gpt-5.5`, `gpt-5.6-terra`, `gpt-5.6-luna`,
+ *     `gpt-5.4`, `gpt-5.4-mini`, `gpt-5.3-codex-spark`).
+ *
+ * The live/catalog tiers gate account availability, while the shared current
+ * model list filters out deprecated ChatGPT sign-in ids before config is saved.
+ */
+export declare function resolveCodexModels(modelsRegistry: ModelsRegistry, accessToken: Promise<string> | string, baseUrl?: string | undefined, signal?: AbortSignal): Promise<string[]>;
+/**
+ * Fetch the account's available Codex model ids live from the ChatGPT backend.
+ *
+ * Hits `GET <baseUrl>/models` — the standard OpenAI-compatible model listing
+ * endpoint, which the Codex backend may expose. Best-effort: returns an empty
+ * array on any failure so login still succeeds with the hardcoded fallback.
+ */
+export declare function fetchCodexModels(accessToken: string, baseUrl?: string | undefined, signal?: AbortSignal): Promise<string[]>;
+/** Exchange an authorization code (+ PKCE verifier) for tokens. */
+export declare function exchangeAuthorizationCode(code: string, verifier: string, signal?: AbortSignal, port?: number): Promise<CodexTokens>;
+/**
+ * Refresh an expired access token using the stored refresh token. Exported for
+ * the `openai-codex` provider, which calls it transparently before requests.
+ */
+export declare function refreshCodexToken(refreshToken: string, signal?: AbortSignal): Promise<CodexTokens>;
+interface LoopbackServer {
+    /** Resolves with the authorization code, or null if cancelled/failed to bind. */
+    waitForCode(): Promise<string | null>;
+    close(): void;
+    /** True when the server bound to a registered callback port; false means all ports were busy. */
+    readonly bound: boolean;
+    /** The actual callback port, matching the authorize URL and token exchange redirect_uri. */
+    readonly port: number;
+}
+/**
+ * Start the loopback server. Resolves once it is listening (or has failed to
+ * bind, in which case `bound` is false and the caller falls back to manual
+ * paste).
+ *
+ * When `signal` aborts (e.g. the user pressed Ctrl+C), the pending
+ * `waitForCode()` promise resolves to `null` and the underlying HTTP server is
+ * torn down — without this, the caller's `await waitForCode()` would never
+ * settle and the terminal would hang with no way out.
+ */
+export declare function startLoopbackServer(state: string, signal?: AbortSignal): Promise<LoopbackServer>;
+/** Parse a pasted authorization code or full redirect URL into { code, state }. */
+export declare function parseAuthorizationInput(input: string): {
+    code?: string | undefined;
+    state?: string | undefined;
+};
+export interface CodexLoginOptions {
+    /** Storage provider id. Defaults to the canonical `openai-codex`. */
+    providerId?: string;
+    /**
+     * External cancellation signal (e.g. the TUI auth panel's Esc). When
+     * provided, the flow does NOT install its own SIGINT handler — the
+     * caller owns cancellation, and a raw `process.exit` from inside a
+     * mounted Ink tree would corrupt the terminal.
+     */
+    signal?: AbortSignal | undefined;
+}
+/**
+ * Run the "Sign in with ChatGPT" flow and persist the resulting OAuth tokens.
+ * Returns 0 on success, 1 on cancel/error.
+ */
+export declare function runCodexOAuthLogin(deps: AuthMenuDeps, opts?: CodexLoginOptions): Promise<number>;
+export {};
+//# sourceMappingURL=openai-codex-oauth.d.ts.map

package/dist/auth-menu/openai-codex-oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-codex-oauth.d.ts","sourceRoot":"","sources":["../../src/auth-menu/openai-codex-oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAKH,OAAO,EAKL,KAAK,cAAc,EAGpB,MAAM,kBAAkB,CAAC;AAO1B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAiB/C,8EAA8E;AAC9E,eAAO,MAAM,iBAAiB,iBAAiB,CAAC;AAChD,gFAAgF;AAChF,eAAO,MAAM,cAAc,oCAAoC,CAAC;AAEhE;;;;;;;;;;GAUG;AAGH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAeD,MAAM,WAAW,IAAI;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,iDAAiD;AACjD,wBAAgB,YAAY,IAAI,IAAI,CAInC;AAUD,yEAAyE;AACzE,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,SAAgB,GAAG,MAAM,CAahG;AAmBD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK7D;AAID;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAE,aAAa,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAE7E,CAAC;AAEF,4FAA4F;AAC5F,eAAO,MAAM,sBAAsB,aAA4C,CAAC;AAEhF,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAEhD;AAED,wBAAgB,2BAA2B,IAAI,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAEjF;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAG1E;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAAG,OAAO,CAEnF;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,kBAAkB,CACtC,cAAc,EAAE,cAAc,EAC9B,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,EACrC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,EAC5B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,MAAM,EAAE,CAAC,CAuBnB;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,EAC5B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,MAAM,EAAE,CAAC,CAqCnB;AA6BD,mEAAmE;AACnE,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,SAAgB,GACnB,OAAO,CAAC,WAAW,CAAC,CAgBtB;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,WAAW,CAAC,CActB;AAgBD,UAAU,cAAc;IACtB,iFAAiF;IACjF,WAAW,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACtC,KAAK,IAAI,IAAI,CAAC;IACd,iGAAiG;IACjG,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,4FAA4F;IAC5F,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,cAAc,CAAC,CA+GzB;AAuBD,mFAAmF;AACnF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG;IACtD,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B,CAoBA;AAID,MAAM,WAAW,iBAAiB;IAChC,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CAClC;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,YAAY,EAClB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,MAAM,CAAC,CA0IjB"}

package/dist/auth-menu/panel-service.d.ts

@@ -0,0 +1,32 @@
+/**
+ * TUI auth-panel host — the structured, UI-agnostic surface behind the
+ * interactive `/auth` panel in the Ink TUI.
+ *
+ * Two kinds of operations:
+ *
+ *   - **Direct mutations** (set active key, delete key, remove provider):
+ *     plain async methods that mutate the config atomically and return an
+ *     error string or `null`.
+ *
+ *   - **Flows** (add key, add from catalog, add custom, add local, OAuth
+ *     sign-in, field edits): the existing battle-tested readline flows from
+ *     this package, driven through an {@link AuthFlowIo} bridge. The bridge
+ *     adapts `renderer.write*` → panel log lines (ANSI-stripped) and
+ *     `reader.readLine/readSecret` → the panel's modal prompt. A rejected
+ *     prompt (TUI Esc) aborts the flow before anything is saved.
+ *
+ * Secrets never cross into the TUI: key values are masked here, and the
+ * modal prompt sends the plaintext only INTO the flow (never back out).
+ */
+import type { ModelsRegistry, SecretScrubber, SecretVault } from '@wrongstack/core';
+import type { AuthPanelHost } from '@wrongstack/tui';
+export interface AuthPanelServiceDeps {
+    vault: SecretVault;
+    modelsRegistry: ModelsRegistry;
+    globalConfigPath: string;
+    secretScrubber?: SecretScrubber | undefined;
+}
+/** Plain (color-free) key mask: first 4 + last 4 characters. */
+export declare function plainMaskedKey(key: string): string;
+export declare function createAuthPanelHost(deps: AuthPanelServiceDeps): AuthPanelHost;
+//# sourceMappingURL=panel-service.d.ts.map

package/dist/auth-menu/panel-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"panel-service.d.ts","sourceRoot":"","sources":["../../src/auth-menu/panel-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAkB,cAAc,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpG,OAAO,KAAK,EAOV,aAAa,EAEd,MAAM,iBAAiB,CAAC;AAkBzB,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,WAAW,CAAC;IACnB,cAAc,EAAE,cAAc,CAAC;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;CAC7C;AAqED,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAIlD;AAID,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,oBAAoB,GAAG,aAAa,CA0S7E"}

package/dist/auth-menu/provider-menu.d.ts

@@ -0,0 +1,7 @@
+import type { AuthMenuDeps } from './types.js';
+/**
+ * Interactive submenu for managing a single provider's keys and settings.
+ * Loops until the user goes back or quits.
+ */
+export declare function manageProvider(providerId: string, deps: AuthMenuDeps): Promise<void>;
+//# sourceMappingURL=provider-menu.d.ts.map

package/dist/auth-menu/provider-menu.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-menu.d.ts","sourceRoot":"","sources":["../../src/auth-menu/provider-menu.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;;GAGG;AACH,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CA2B1F"}

package/dist/auth-menu/shared.d.ts

@@ -0,0 +1,32 @@
+import { type ProviderApiKey, type ProviderConfig, type WireFamily } from '@wrongstack/core';
+import type { AuthMenuDeps } from './types.js';
+/** Render a provider entry line in the top-level listing. */
+export declare function renderProviderLine(renderer: AuthMenuDeps['renderer'], id: string, cfg: ProviderConfig, idx: number): void;
+/** Render the header for the provider management submenu. */
+export declare function renderProviderHeader(renderer: AuthMenuDeps['renderer'], providerId: string, cfg: ProviderConfig): void;
+/** Render a single key entry line. */
+export declare function renderKeyLine(renderer: AuthMenuDeps['renderer'], key: ProviderApiKey, idx: number, active: string | undefined): void;
+/** Render action shortcuts. */
+export declare function renderActions(renderer: AuthMenuDeps['renderer'], keysLength: number): void;
+/** Render the top-level menu header. */
+export declare function renderTopMenu(renderer: AuthMenuDeps['renderer'], providers: Record<string, ProviderConfig>): void;
+/** Prompt for a hidden API key. Returns undefined on empty input. */
+export declare function readKeyInput(deps: {
+    reader: AuthMenuDeps['reader'];
+    renderer: AuthMenuDeps['renderer'];
+}, intent: string): Promise<string | undefined>;
+/**
+ * Ask a yes/no confirmation. Returns:
+ *   true  → user confirmed (y/yes)
+ *   false → user declined (n/no)
+ *   null  → user cancelled (q)
+ */
+export declare function confirm(deps: {
+    reader: AuthMenuDeps['reader'];
+    renderer: AuthMenuDeps['renderer'];
+}, question: string): Promise<boolean | null>;
+/** Suggest a default label that doesn't conflict with existing keys. */
+export declare function suggestLabel(usedLabels: Set<string>): string;
+/** Validate a wire family string. Returns the WireFamily or null. */
+export declare function validateFamily(raw: string): WireFamily | null;
+//# sourceMappingURL=shared.d.ts.map

package/dist/auth-menu/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../src/auth-menu/shared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEpG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAM/C,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,YAAY,CAAC,UAAU,CAAC,EAClC,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,MAAM,GACV,IAAI,CAwBN;AAED,6DAA6D;AAC7D,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,YAAY,CAAC,UAAU,CAAC,EAClC,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,cAAc,GAClB,IAAI,CAgCN;AAED,sCAAsC;AACtC,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,YAAY,CAAC,UAAU,CAAC,EAClC,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,IAAI,CAMN;AAED,+BAA+B;AAC/B,wBAAgB,aAAa,CAAC,QAAQ,EAAE,YAAY,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAc1F;AAED,wCAAwC;AACxC,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,YAAY,CAAC,UAAU,CAAC,EAClC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,GACxC,IAAI,CAqCN;AAMD,qEAAqE;AACrE,wBAAsB,YAAY,CAChC,IAAI,EAAE;IAAE,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;IAAC,QAAQ,EAAE,YAAY,CAAC,UAAU,CAAC,CAAA;CAAE,EAC5E,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAW7B;AAED;;;;;GAKG;AACH,wBAAsB,OAAO,CAC3B,IAAI,EAAE;IAAE,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;IAAC,QAAQ,EAAE,YAAY,CAAC,UAAU,CAAC,CAAA;CAAE,EAC5E,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAQzB;AAED,wEAAwE;AACxE,wBAAgB,YAAY,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,CAM5D;AAED,qEAAqE;AACrE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAG7D"}

package/dist/auth-menu/top-menu.d.ts

@@ -0,0 +1,11 @@
+import type { AuthMenuDeps } from './types.js';
+/**
+ * Interactive auth manager. Shows saved providers + keys, lets the user
+ * add/manage providers, and loops until they exit.
+ *
+ * The legacy single-key `apiKey` field is migrated to `apiKeys[]` lazily
+ * on first edit, so users who set up under the old schema upgrade
+ * transparently the first time they open this menu.
+ */
+export declare function runTopMenu(deps: AuthMenuDeps): Promise<number>;
+//# sourceMappingURL=top-menu.d.ts.map

package/dist/auth-menu/top-menu.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"top-menu.d.ts","sourceRoot":"","sources":["../../src/auth-menu/top-menu.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAyDpE"}

package/dist/auth-menu/types.d.ts

@@ -0,0 +1,42 @@
+import type { ModelsRegistry, SecretScrubber, SecretVault } from '@wrongstack/core';
+/**
+ * Minimal output surface the auth-menu flows need. `TerminalRenderer`
+ * satisfies this structurally, and so does the TUI auth-panel adapter
+ * (which forwards each line into the panel's flow log) — keeping the
+ * flows reusable from both the readline CLI and the Ink TUI.
+ */
+export interface AuthMenuRenderer {
+    write(input: string): void;
+    writeInfo(text: string): void;
+    writeWarning(text: string): void;
+    writeError(text: string): void;
+}
+/**
+ * Minimal input surface the auth-menu flows need. `ReadlineInputReader`
+ * satisfies this structurally; the TUI adapter resolves both from the
+ * panel's modal prompt (masked for `readSecret`). Implementations may
+ * REJECT to cancel the surrounding flow (the TUI does this on Esc) —
+ * every flow treats a thrown prompt as user-cancel.
+ */
+export interface AuthMenuReader {
+    readLine(prompt?: string): Promise<string>;
+    readSecret(prompt: string): Promise<string>;
+}
+/**
+ * Dependencies shared across all auth-menu modules.
+ * Kept deliberately light — each sub-module takes only the subset it needs.
+ */
+export interface AuthMenuDeps {
+    renderer: AuthMenuRenderer;
+    reader: AuthMenuReader;
+    modelsRegistry: ModelsRegistry;
+    vault: SecretVault;
+    globalConfigPath: string;
+    /**
+     * Optional scrubber used by `wstack auth local` to redact Bearer
+     * tokens from probe logs before they reach the renderer. Falls back
+     * to a fresh {@link DefaultSecretScrubber} when not supplied.
+     */
+    secretScrubber?: SecretScrubber | undefined;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/auth-menu/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth-menu/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpF;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC7C;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,MAAM,EAAE,cAAc,CAAC;IACvB,cAAc,EAAE,cAAc,CAAC;IAC/B,KAAK,EAAE,WAAW,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,cAAc,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;CAC7C"}

package/dist/auth-menu.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Backward-compatible re-export. All functionality has moved to
+ * `auth-menu/index.ts` and its submodules. This file exists so
+ * existing imports don't break during the transition.
+ */
+export { type AuthMenuDeps, runAuthDirect, runAuthMenu } from './auth-menu/index.js';
+//# sourceMappingURL=auth-menu.d.ts.map

package/dist/auth-menu.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-menu.d.ts","sourceRoot":"","sources":["../src/auth-menu.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,KAAK,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/autophase-host.d.ts

@@ -0,0 +1,103 @@
+/**
+ * AutoPhase host wiring for the CLI.
+ *
+ * Turns a free-text goal into a real, LLM-driven phase run:
+ *   1. PLAN   — a one-shot subagent generates a phase-by-phase plan where each
+ *               phase carries many concrete todos (AutoPhasePlanner).
+ *   2. BUILD  — PhaseGraphBuilder materializes the plan into a PhaseGraph with a
+ *               populated TaskGraph per phase, persisted as per-project JSON.
+ *   3. RUN    — PhaseOrchestrator drives the graph in the background; every task
+ *               is executed by a fresh subagent (full tool access). Phase/task
+ *               events flow on the shared EventBus so the TUI PhaseMonitor stays
+ *               live, and the graph is re-persisted as phases complete.
+ *
+ * This is "SDD logic but different": phased, persisted task-lists like SDD, but
+ * driven by the autonomous orchestrator + concurrent subagents rather than
+ * single-thread turn injection.
+ */
+import { type BrainArbiter, type Config, type EventBus, type PhaseGraph, type PhaseProgress, type TaskNode } from '@wrongstack/core';
+import type { MultiAgentHost } from './multi-agent.js';
+/**
+ * Extend/trim the autonomous autophase command allowlist from the user's exec
+ * policy. Mirrors `configureExecPolicy` but keeps autophase's narrower base.
+ * Idempotent (always rebuilt from the base).
+ */
+export declare function configureAutophasePolicy(opts?: {
+    allow?: readonly string[] | undefined;
+    deny?: readonly string[] | undefined;
+}): void;
+/** Reset the autophase allowlist to its built-in base (tests / re-init). */
+export declare function resetAutophasePolicy(): void;
+/** Whether `cmd` may run in autonomous autophase verification. */
+export declare function isAutophaseCommandAllowed(cmd: string): boolean;
+export interface AutoPhaseHostDeps {
+    multiAgentHost: MultiAgentHost;
+    /** Read the *current* Config lazily (it may be patched, e.g. YOLO toggles). */
+    getConfig: () => Config;
+    /** Shared app EventBus — orchestrator events feed the TUI PhaseMonitor. */
+    events: EventBus;
+    /** Current parent session id for worktree lifecycle events. */
+    getSessionId?: (() => string | undefined) | undefined;
+    /** Directory for per-project phase-graph JSON (wpaths.projectAutophase). */
+    storeDir: string;
+    /** Project root — base for git-worktree isolation. */
+    projectRoot: string;
+    /**
+     * Enable per-phase git-worktree isolation (default true). When on and the
+     * project is a git repo, parallelizable phases run in isolated worktrees and
+     * merge back sequentially. Disable with WRONGSTACK_AUTOPHASE_WORKTREES=0.
+     */
+    worktrees?: boolean | undefined;
+    /** Max parallel phases when worktrees are active (default 4). */
+    maxConcurrentPhases?: number | undefined;
+    /** Optional global Brain arbiter for AutoPhase policy decisions. */
+    brain?: BrainArbiter | undefined;
+    /** Optional progress logger (rendered to the user during start). */
+    log?: ((line: string) => void) | undefined;
+}
+/** A live, read-only view of the running AutoPhase, exposed to slash commands. */
+export interface AutoPhaseRunnerView {
+    graph: PhaseGraph;
+    getProgress: () => PhaseProgress | null;
+    isRunning: () => boolean;
+}
+export type AutoPhaseStartResult = {
+    ok: true;
+    graph: PhaseGraph;
+} | {
+    ok: false;
+    error: string;
+};
+export interface AutoPhaseHostHooks {
+    onAutoPhaseStart: (opts: {
+        goal: string;
+        projectContext?: string | undefined;
+    }) => Promise<AutoPhaseStartResult>;
+    onAutoPhasePause: () => void;
+    onAutoPhaseResume: () => void;
+    /**
+     * Resume a persisted PhaseGraph. The graph must already have been loaded
+     * from the PhaseStore. Creates a fresh orchestrator and starts executing
+     * pending tasks.
+     */
+    onAutoPhaseResumeFromGraph: (graph: PhaseGraph) => Promise<AutoPhaseStartResult>;
+    onAutoPhaseStop: () => void;
+    getAutoPhaseRunner: () => AutoPhaseRunnerView | null;
+    /** Interactive board: move a task to another phase. */
+    onAutoPhaseMoveTask: (taskId: string, toPhaseId: string) => boolean;
+    /** Interactive board: (re)assign a task to a specific agent (clear with both omitted). */
+    onAutoPhaseAssignTask: (taskId: string, agentId?: string, agentName?: string) => boolean;
+    /** Interactive board: add a new task to a phase. Returns the new task id. */
+    onAutoPhaseAddTask: (phaseId: string, spec: {
+        title: string;
+        description?: string;
+        type?: TaskNode['type'];
+        priority?: TaskNode['priority'];
+    }) => string | null;
+    /** Interactive board: requeue a task to pending so it (re)runs. */
+    onAutoPhaseRetryTask: (taskId: string) => boolean;
+    /** Backs the /worktree slash command (list / merge / prune / clean). */
+    onWorktree: (action: 'list' | 'merge' | 'prune' | 'clean', target?: string) => Promise<string>;
+}
+export declare function createAutoPhaseHost(deps: AutoPhaseHostDeps): AutoPhaseHostHooks;
+//# sourceMappingURL=autophase-host.d.ts.map

package/dist/autophase-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autophase-host.d.ts","sourceRoot":"","sources":["../src/autophase-host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAgBH,OAAO,EAGL,KAAK,YAAY,EAEjB,KAAK,MAAM,EACX,KAAK,QAAQ,EACb,KAAK,UAAU,EAGf,KAAK,aAAa,EAElB,KAAK,QAAQ,EAEd,MAAM,kBAAkB,CAAC;AAY1B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAmEvD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAA;CAAO,GACzF,IAAI,CAQN;AAED,4EAA4E;AAC5E,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAED,kEAAkE;AAClE,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE9D;AA+GD,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,cAAc,CAAC;IAC/B,+EAA+E;IAC/E,SAAS,EAAE,MAAM,MAAM,CAAC;IACxB,2EAA2E;IAC3E,MAAM,EAAE,QAAQ,CAAC;IACjB,+DAA+D;IAC/D,YAAY,CAAC,EAAE,CAAC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;IACtD,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAChC,iEAAiE;IACjE,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,oEAAoE;IACpE,KAAK,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IACjC,oEAAoE;IACpE,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC5C;AAED,kFAAkF;AAClF,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,UAAU,CAAC;IAClB,WAAW,EAAE,MAAM,aAAa,GAAG,IAAI,CAAC;IACxC,SAAS,EAAE,MAAM,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,oBAAoB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAElG,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,EAAE,CAAC,IAAI,EAAE;QACvB,IAAI,EAAE,MAAM,CAAC;QACb,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACrC,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACpC,gBAAgB,EAAE,MAAM,IAAI,CAAC;IAC7B,iBAAiB,EAAE,MAAM,IAAI,CAAC;IAC9B;;;;OAIG;IACH,0BAA0B,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjF,eAAe,EAAE,MAAM,IAAI,CAAC;IAC5B,kBAAkB,EAAE,MAAM,mBAAmB,GAAG,IAAI,CAAC;IACrD,uDAAuD;IACvD,mBAAmB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IACpE,0FAA0F;IAC1F,qBAAqB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IACzF,6EAA6E;IAC7E,kBAAkB,EAAE,CAClB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxB,QAAQ,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;KACjC,KACE,MAAM,GAAG,IAAI,CAAC;IACnB,mEAAmE;IACnE,oBAAoB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;IAClD,wEAAwE;IACxE,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAChG;AAgBD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,kBAAkB,CAmkB/E"}

package/dist/boot/auto-discover-providers.d.ts

@@ -0,0 +1,20 @@
+import type { Config, Logger } from '@wrongstack/core';
+import type { DefaultModelsRegistry } from '@wrongstack/core';
+/**
+ * Fetch model lists for every auto-discovery provider in the config and merge
+ * them into the catalog. Best-effort end to end: a down server or missing key
+ * falls back to the last cached list (any age — a local proxy being offline at
+ * boot shouldn't wipe its models), and any failure is a logged no-op so boot
+ * never breaks.
+ *
+ * Caches the most recent successful fetch per provider+baseUrl so the models
+ * survive a restart while the server is briefly unavailable.
+ */
+export declare function discoverAndMergeProviders(opts: {
+    config: Config;
+    registry: DefaultModelsRegistry;
+    cacheDir: string;
+    logger?: Logger | undefined;
+    fetchImpl?: typeof fetch | undefined;
+}): Promise<void>;
+//# sourceMappingURL=auto-discover-providers.d.ts.map

package/dist/boot/auto-discover-providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-discover-providers.d.ts","sourceRoot":"","sources":["../../src/boot/auto-discover-providers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAqC,MAAM,kBAAkB,CAAC;AAC1F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAiD9D;;;;;;;;;GASG;AACH,wBAAsB,yBAAyB,CAAC,IAAI,EAAE;IACpD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,qBAAqB,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,GAAG,SAAS,CAAC;CACtC,GAAG,OAAO,CAAC,IAAI,CAAC,CAmDhB"}