@wrongstack/cli 1.0.1 → 1.0.3

package/data/providers.json

@@ -22,7 +22,7 @@
           "output": ["text"]
         },
         "limit": {
-          "context": 1050000,
+          "context": 872000,
           "output": 128000
         }
       },
@@ -44,22 +44,7 @@
           "output": ["text"]
         },
         "limit": {
-          "context": 1050000,
-          "output": 128000
-        }
-      },
-      "gpt-5.5": {
-        "id": "gpt-5.5",
-        "name": "GPT-5.5",
-        "description": "Frontier model for complex coding, research, and real-world work.",
-        "reasoning": true,
-        "tool_call": true,
-        "modalities": {
-          "input": ["text", "image"],
-          "output": ["text"]
-        },
-        "limit": {
-          "context": 1050000,
+          "context": 872000,
           "output": 128000
         }
       },
@@ -81,7 +66,7 @@
           "output": ["text"]
         },
         "limit": {
-          "context": 1050000,
+          "context": 872000,
           "output": 128000
         }
       },
@@ -103,7 +88,22 @@
           "output": ["text"]
         },
         "limit": {
-          "context": 1050000,
+          "context": 872000,
+          "output": 128000
+        }
+      },
+      "gpt-5.5": {
+        "id": "gpt-5.5",
+        "name": "GPT-5.5",
+        "description": "Proven previous-generation model for coding and general work.",
+        "reasoning": true,
+        "tool_call": true,
+        "modalities": {
+          "input": ["text", "image"],
+          "output": ["text"]
+        },
+        "limit": {
+          "context": 272000,
           "output": 128000
         }
       },
@@ -118,7 +118,7 @@
           "output": ["text"]
         },
         "limit": {
-          "context": 1050000,
+          "context": 272000,
           "output": 128000
         }
       },
@@ -133,7 +133,7 @@
           "output": ["text"]
         },
         "limit": {
-          "context": 1050000,
+          "context": 128000,
           "output": 128000
         }
       }

package/dist/{acp-3LARESEO.js → acp-JK4ZQO3R.js}

@@ -3,11 +3,12 @@ import {
   loadCachedAcpRegistry,
   refreshAcpRegistry,
   setupProvider
-} from "./chunk-ZSZ3EYWH.js";
+} from "./chunk-GMY45LO6.js";
 import {
   startCliHqConnection
 } from "./chunk-TE3Q32JP.js";
-import "./chunk-TNK6237M.js";
+import "./chunk-SIGUWXAA.js";
+import "./chunk-DAKVBMD4.js";
 import "./chunk-DR2OXU46.js";
 
 // src/subcommands/handlers/acp.ts
@@ -1016,4 +1017,4 @@ ${renderAcpBenchText(result)}
 export {
   acpCmd
 };
-//# sourceMappingURL=acp-3LARESEO.js.map
+//# sourceMappingURL=acp-JK4ZQO3R.js.map

package/dist/{auth-ZUMCDNE5.js → auth-XD3GN5RJ.js}

@@ -4,6 +4,7 @@ import {
   addKeyForProvider,
   confirm,
   loadProviders,
+  providerAuthStrategiesFor,
   readKeyInput,
   renderActions,
   renderProviderHeader,
@@ -13,7 +14,7 @@ import {
   runOAuthLoginKind,
   runOAuthLoginMenu,
   validateFamily
-} from "./chunk-MNQQ4ZNF.js";
+} from "./chunk-ONOT5OJ2.js";
 import {
   renderAuthLocalHelpToString,
   wantsLocalHelp
@@ -29,7 +30,8 @@ import {
 import {
   parseAuthFlags
 } from "./chunk-E6RFXHWD.js";
-import "./chunk-TNK6237M.js";
+import "./chunk-SIGUWXAA.js";
+import "./chunk-DAKVBMD4.js";
 import {
   loadConfigProviders,
   maskedKey,
@@ -40,7 +42,17 @@ import {
 } from "./chunk-DR2OXU46.js";
 
 // src/subcommands/handlers/auth.ts
-import { color as color3 } from "@wrongstack/core/utils";
+import { color as color5 } from "@wrongstack/core/utils";
+
+// src/auth-menu/anthropic-oauth.ts
+import {
+  FetchError,
+  ParseError
+} from "@wrongstack/core/types";
+import { color } from "@wrongstack/core/utils";
+var REDIRECT_PORT = 53692;
+var REDIRECT_PATH = "/callback";
+var REDIRECT_URI = `http://localhost:${REDIRECT_PORT}${REDIRECT_PATH}`;
 
 // src/auth-menu/direct.ts
 async function runAuthDirect(deps, opts) {
@@ -102,11 +114,19 @@ async function runAuthDirect(deps, opts) {
   return 0;
 }
 
-// src/auth-menu/top-menu.ts
+// src/auth-menu/github-copilot-oauth.ts
+import {
+  FetchError as FetchError2,
+  ParseError as ParseError2
+} from "@wrongstack/core/types";
 import { color as color2 } from "@wrongstack/core/utils";
+import { copilotBaseUrlFromToken, refreshCopilotToken } from "@wrongstack/providers";
+
+// src/auth-menu/top-menu.ts
+import { color as color4 } from "@wrongstack/core/utils";
 
 // src/auth-menu/provider-menu.ts
-import { color, expectDefined } from "@wrongstack/core/utils";
+import { color as color3, expectDefined } from "@wrongstack/core/utils";
 async function manageProvider(providerId, deps) {
   for (; ; ) {
     const providers = await loadProviders(deps);
@@ -119,7 +139,7 @@ async function manageProvider(providerId, deps) {
     renderProviderHeader(deps.renderer, providerId, cfg);
     renderActions(deps.renderer, keys.length);
     const raw = (await deps.reader.readLine(`
-${color.amber("?")} ${providerId} > `)).trim();
+${color3.amber("?")} ${providerId} > `)).trim();
     if (!raw || raw === "b" || raw === "back" || raw === "q" || raw === "quit") {
       return;
     }
@@ -150,7 +170,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
         },
         deps.profileConfigPath
       );
-      deps.renderer.write(`  ${color.green("\u2713")} Removed ${providerId}.
+      deps.renderer.write(`  ${color3.green("\u2713")} Removed ${providerId}.
 `);
       return "exit";
     }
@@ -174,7 +194,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
       },
       deps.profileConfigPath
     );
-    deps.renderer.write(`  ${color.green("\u2713")} Updated ${providerId}/${target.label}.
+    deps.renderer.write(`  ${color3.green("\u2713")} Updated ${providerId}/${target.label}.
 `);
     return "continue";
   }
@@ -201,7 +221,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
       },
       deps.profileConfigPath
     );
-    deps.renderer.write(`  ${color.green("\u2713")} Deleted ${providerId}/${target.label}.
+    deps.renderer.write(`  ${color3.green("\u2713")} Deleted ${providerId}/${target.label}.
 `);
     return "continue";
   }
@@ -220,14 +240,14 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
       },
       deps.profileConfigPath
     );
-    deps.renderer.write(`  ${color.green("\u2713")} Active key \u2192 ${color.bold(target.label)}.
+    deps.renderer.write(`  ${color3.green("\u2713")} Active key \u2192 ${color3.bold(target.label)}.
 `);
     return "continue";
   }
   if (verb === "f" || verb === "family") {
     const current = cfg.family ?? "";
     const ans = (await deps.reader.readLine(
-      `  ${color.amber("?")} Family ${color.dim(`(anthropic | openai | openai-compatible | google, empty = unset, current: ${current || "unset"})`)}: `
+      `  ${color3.amber("?")} Family ${color3.dim(`(anthropic | openai | openai-compatible | google, empty = unset, current: ${current || "unset"})`)}: `
     )).trim();
     if (ans !== "") {
       const validated = validateFamily(ans);
@@ -247,7 +267,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
         },
         deps.profileConfigPath
       );
-      deps.renderer.write(`  ${color.green("\u2713")} family \u2192 ${validated}
+      deps.renderer.write(`  ${color3.green("\u2713")} family \u2192 ${validated}
 `);
     } else {
       await mutateConfigProviders(
@@ -260,7 +280,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
         },
         deps.profileConfigPath
       );
-      deps.renderer.write(`  ${color.green("\u2713")} family \u2192 (unset)
+      deps.renderer.write(`  ${color3.green("\u2713")} family \u2192 (unset)
 `);
     }
     return "continue";
@@ -268,7 +288,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
   if (verb === "B" || verb === "baseurl" || verb === "base-url" || verb === "url") {
     const current = cfg.baseUrl ?? "";
     const ans = (await deps.reader.readLine(
-      `  ${color.amber("?")} Base URL ${color.dim(`(empty = unset, current: ${current || "unset"})`)}: `
+      `  ${color3.amber("?")} Base URL ${color3.dim(`(empty = unset, current: ${current || "unset"})`)}: `
     )).trim();
     await mutateConfigProviders(
       deps.profileConfigPath,
@@ -281,14 +301,14 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
       },
       deps.profileConfigPath
     );
-    deps.renderer.write(`  ${color.green("\u2713")} baseUrl \u2192 ${ans || "(unset)"}
+    deps.renderer.write(`  ${color3.green("\u2713")} baseUrl \u2192 ${ans || "(unset)"}
 `);
     return "continue";
   }
   if (verb === "m" || verb === "models") {
     const current = (cfg.models ?? []).join(", ");
     const ans = (await deps.reader.readLine(
-      `  ${color.amber("?")} Model ids ${color.dim(`(comma-separated, empty = catalog default, current: ${current || "none"})`)}: `
+      `  ${color3.amber("?")} Model ids ${color3.dim(`(comma-separated, empty = catalog default, current: ${current || "none"})`)}: `
     )).trim();
     const list = ans ? ans.split(",").map((s) => s.trim()).filter(Boolean) : [];
     await mutateConfigProviders(
@@ -303,7 +323,7 @@ async function dispatchAction(verb, arg, providerId, keys, cfg, deps) {
       deps.profileConfigPath
     );
     deps.renderer.write(
-      `  ${color.green("\u2713")} models \u2192 ${list.length === 0 ? "(catalog default)" : list.join(", ")}
+      `  ${color3.green("\u2713")} models \u2192 ${list.length === 0 ? "(catalog default)" : list.join(", ")}
 `
     );
     return "continue";
@@ -326,9 +346,9 @@ async function runTopMenu(deps) {
     renderTopMenu(deps.renderer, providers);
     const ids = Object.keys(providers).sort();
     const choice = (await deps.reader.readLine(`
-${color2.amber("?")} Pick: `)).trim().toLowerCase();
+${color4.amber("?")} Pick: `)).trim().toLowerCase();
     if (!choice || choice === "q" || choice === "quit" || choice === "exit") {
-      deps.renderer.write(color2.dim("Done.\n"));
+      deps.renderer.write(color4.dim("Done.\n"));
       return 0;
     }
     if (choice === "a" || choice === "add") {
@@ -440,13 +460,17 @@ var authCmd = async (args, deps) => {
   if (first === "login") {
     const pid = (flags.positional[1] ?? "").toLowerCase();
     if (!pid) return runOAuthLoginKind(menuDeps, "chatgpt");
-    const kind = resolveOAuthKind(pid, { allowNumeric: false });
+    const kind = resolveOAuthKind(pid, { allowNumeric: false, deps: menuDeps });
     if (kind) return runOAuthLoginKind(menuDeps, kind);
-    deps.renderer.writeError(
-      "OAuth login is only supported for ChatGPT, Claude, and GitHub Copilot."
-    );
+    const available = providerAuthStrategiesFor(menuDeps);
+    deps.renderer.writeError(`Unknown OAuth login strategy "${pid}".`);
+    for (const strategy of available) {
+      deps.renderer.write(
+        color5.dim(`  Sign in with ${strategy.label}: `) + color5.bold(`wstack auth login ${strategy.id}`) + "\n"
+      );
+    }
     deps.renderer.write(
-      color3.dim("  Sign in with ChatGPT: ") + color3.bold("wstack auth login chatgpt") + "\n" + color3.dim("  Sign in with Claude:  ") + color3.bold("wstack auth login claude") + "\n" + color3.dim("  Sign in with Copilot: ") + color3.bold("wstack auth login copilot") + "\n" + color3.dim("  For an API key instead: ") + color3.bold(`wstack auth ${pid}`) + "\n"
+      color5.dim("  For an API key instead: ") + color5.bold(`wstack auth ${pid}`) + "\n"
     );
     return 1;
   }
@@ -469,14 +493,14 @@ async function runAuthList(deps) {
   const ids = Object.keys(providers).sort();
   if (ids.length === 0) {
     deps.renderer.write(
-      `${color3.dim("No providers configured.")}
-${color3.dim("Run")} ${color3.bold("wstack auth")} ${color3.dim("to add one.")}
+      `${color5.dim("No providers configured.")}
+${color5.dim("Run")} ${color5.bold("wstack auth")} ${color5.dim("to add one.")}
 `
     );
     return 0;
   }
   deps.renderer.write(`
-${color3.bold("Saved providers")} ${color3.dim(`(${ids.length})`)}
+${color5.bold("Saved providers")} ${color5.dim(`(${ids.length})`)}
 
 `);
   for (const id of ids) {
@@ -484,34 +508,34 @@ ${color3.bold("Saved providers")} ${color3.dim(`(${ids.length})`)}
     if (!cfg) continue;
     const keys = normalizeKeys(cfg);
     const active = cfg.activeKey ?? keys[0]?.label;
-    const famTag = cfg.family ? `${cfg.family}` : color3.amber("no-family");
-    const aliasHint = cfg.type && cfg.type !== id ? color3.dim(` (\u2192 ${cfg.type})`) : "";
-    const modelHint = cfg.models && cfg.models.length > 0 ? color3.dim(` [${cfg.models.length} models]`) : "";
-    deps.renderer.write(`  ${color3.bold(id)}${aliasHint}
+    const famTag = cfg.family ? `${cfg.family}` : color5.amber("no-family");
+    const aliasHint = cfg.type && cfg.type !== id ? color5.dim(` (\u2192 ${cfg.type})`) : "";
+    const modelHint = cfg.models && cfg.models.length > 0 ? color5.dim(` [${cfg.models.length} models]`) : "";
+    deps.renderer.write(`  ${color5.bold(id)}${aliasHint}
 `);
     deps.renderer.write(
-      `    family:  ${famTag}  baseUrl: ${cfg.baseUrl ?? color3.dim("unset")}${modelHint}
+      `    family:  ${famTag}  baseUrl: ${cfg.baseUrl ?? color5.dim("unset")}${modelHint}
 `
     );
     if (keys.length === 0) {
-      deps.renderer.write(`    ${color3.amber("no keys")}
+      deps.renderer.write(`    ${color5.amber("no keys")}
 `);
     } else {
       deps.renderer.write(
-        `    ${color3.dim(`${keys.length} key${keys.length === 1 ? "" : "s"}:`)}
+        `    ${color5.dim(`${keys.length} key${keys.length === 1 ? "" : "s"}:`)}
 `
       );
       for (const k of keys) {
-        const marker = k.label === active ? color3.green("\u25CF") : color3.dim("\u25CB");
+        const marker = k.label === active ? color5.green("\u25CF") : color5.dim("\u25CB");
         deps.renderer.write(
-          `      ${marker} ${k.label.padEnd(18)} ${maskedKey(k.apiKey)}  ${color3.dim(k.createdAt)}
+          `      ${marker} ${k.label.padEnd(18)} ${maskedKey(k.apiKey)}  ${color5.dim(k.createdAt)}
 `
         );
       }
     }
     deps.renderer.write("\n");
   }
-  deps.renderer.write(color3.dim(`Manage: wstack auth   Add key: wstack auth <provider>
+  deps.renderer.write(color5.dim(`Manage: wstack auth   Add key: wstack auth <provider>
 `));
   return 0;
 }
@@ -527,7 +551,7 @@ async function runAuthStatus(deps, providerId) {
   if (!cfg) {
     deps.renderer.writeError(`Provider "${providerId}" not found in config.`);
     deps.renderer.write(
-      color3.dim(`Run ${color3.bold("wstack auth list")} to see saved providers.
+      color5.dim(`Run ${color5.bold("wstack auth list")} to see saved providers.
 `)
     );
     return 1;
@@ -536,32 +560,32 @@ async function runAuthStatus(deps, providerId) {
   const active = cfg.activeKey ?? keys[0]?.label;
   const lines = [
     `
-${color3.bold(providerId)} ${cfg.family ? color3.dim(`[${cfg.family}]`) : color3.amber("[no family]")}`,
+${color5.bold(providerId)} ${cfg.family ? color5.dim(`[${cfg.family}]`) : color5.amber("[no family]")}`,
     "",
-    `  type:    ${color3.cyan(cfg.type ?? providerId)}`,
-    `  family:  ${cfg.family ? color3.cyan(cfg.family) : color3.dim("unset")}`,
-    `  baseUrl: ${cfg.baseUrl ? color3.cyan(cfg.baseUrl) : color3.dim("unset")}`
+    `  type:    ${color5.cyan(cfg.type ?? providerId)}`,
+    `  family:  ${cfg.family ? color5.cyan(cfg.family) : color5.dim("unset")}`,
+    `  baseUrl: ${cfg.baseUrl ? color5.cyan(cfg.baseUrl) : color5.dim("unset")}`
   ];
   if (cfg.models?.length) {
-    lines.push(`  models:  ${color3.cyan(cfg.models.join(", "))}`);
+    lines.push(`  models:  ${color5.cyan(cfg.models.join(", "))}`);
   }
   if (cfg.envVars?.length) {
-    lines.push(`  envVars: ${color3.cyan(cfg.envVars.join(", "))}`);
+    lines.push(`  envVars: ${color5.cyan(cfg.envVars.join(", "))}`);
   }
   lines.push("");
   if (keys.length === 0) {
-    lines.push(color3.amber("  (no keys saved)"));
+    lines.push(color5.amber("  (no keys saved)"));
   } else {
-    lines.push(`  ${color3.dim("Keys:")}`);
+    lines.push(`  ${color5.dim("Keys:")}`);
     for (const k of keys) {
-      const marker = k.label === active ? color3.green("\u25CF") : color3.dim("\u25CB");
+      const marker = k.label === active ? color5.green("\u25CF") : color5.dim("\u25CB");
       lines.push(
-        `    ${marker} ${color3.bold(k.label.padEnd(18))} ${maskedKey(k.apiKey)}  ${color3.dim(k.createdAt)}`
+        `    ${marker} ${color5.bold(k.label.padEnd(18))} ${maskedKey(k.apiKey)}  ${color5.dim(k.createdAt)}`
       );
     }
   }
   lines.push("");
-  lines.push(color3.dim(`Manage: wstack auth \u2192 pick ${providerId}`));
+  lines.push(color5.dim(`Manage: wstack auth \u2192 pick ${providerId}`));
   deps.renderer.write(lines.join("\n") + "\n");
   return 0;
 }
@@ -572,19 +596,19 @@ async function runAuthRemove(deps, providerId) {
     return 1;
   }
   deps.renderer.write(
-    `${color3.amber("!")} This will remove "${providerId}" and all its saved keys.
+    `${color5.amber("!")} This will remove "${providerId}" and all its saved keys.
 `
   );
-  const answer = (await deps.reader.readLine(`  ${color3.amber("?")} Confirm removal? ${color3.dim("[y/N]")} `)).trim().toLowerCase();
+  const answer = (await deps.reader.readLine(`  ${color5.amber("?")} Confirm removal? ${color5.dim("[y/N]")} `)).trim().toLowerCase();
   if (answer !== "y" && answer !== "yes") {
-    deps.renderer.write(color3.dim("Cancelled.\n"));
+    deps.renderer.write(color5.dim("Cancelled.\n"));
     return 0;
   }
   try {
     await mutateConfigProviders(deps.profileConfigPath, deps.vault, (all) => {
       delete all[providerId];
     });
-    deps.renderer.write(`  ${color3.green("\u2713")} Removed ${color3.bold(providerId)}.
+    deps.renderer.write(`  ${color5.green("\u2713")} Removed ${color5.bold(providerId)}.
 `);
     return 0;
   } catch (err) {
@@ -595,4 +619,4 @@ async function runAuthRemove(deps, providerId) {
 export {
   authCmd
 };
-//# sourceMappingURL=auth-ZUMCDNE5.js.map
+//# sourceMappingURL=auth-XD3GN5RJ.js.map

package/dist/auth-menu/index.d.ts

@@ -1,5 +1,6 @@
 export { CLAUDE_PROVIDER_ID, type ClaudeLoginOptions, type ClaudeTokens, runClaudeOAuthLogin, } from './anthropic-oauth.js';
 export { runAuthDirect } from './direct.js';
+export { providerAuthRegistryFor, providerAuthStrategiesFor, runProviderAuthLogin, } from './provider-auth-login.js';
 export { COPILOT_PROVIDER_ID, type CopilotLoginOptions, runCopilotOAuthLogin, } from './github-copilot-oauth.js';
 export { LOCAL_LLM_PRESETS, type LocalLlmPresetEntry, type ProbeOptions, type ProbeResult, probeLocalLlm, type RunAuthLocalOptions, resolveModelList, runAuthLocal, } from './local.js';
 export { type OAuthMenuKind, resolveOAuthKind, runOAuthLoginChoice, runOAuthLoginKind, runOAuthLoginMenu, } from './oauth-menu.js';

package/dist/auth-menu/oauth-menu.d.ts

@@ -1,7 +1,8 @@
 import type { AuthMenuDeps } from './types.js';
 /** Render subscription OAuth login choices shared by the top menu and add flow. */
 export declare function renderOAuthLoginOptions(deps: AuthMenuDeps, indent?: string): void;
-export type OAuthMenuKind = 'chatgpt' | 'claude' | 'copilot';
+/** Strategy ids are runtime-extensible; this alias preserves the public CLI name. */
+export type OAuthMenuKind = string;
 /**
  * Normalize a user-typed subscription name to an OAuth kind.
  * `allowNumeric` enables the 1/2/3 menu picks (off for free-text prompts,
@@ -9,6 +10,7 @@ export type OAuthMenuKind = 'chatgpt' | 'claude' | 'copilot';
  */
 export declare function resolveOAuthKind(choice: string, opts?: {
     allowNumeric?: boolean;
+    deps?: AuthMenuDeps | undefined;
 }): OAuthMenuKind | undefined;
 /** Run an OAuth login for a normalized menu choice. Returns true when handled. */
 export declare function runOAuthLoginChoice(deps: AuthMenuDeps, choice: string, opts?: {

package/dist/auth-menu/panel-service.d.ts

@@ -1,11 +1,13 @@
 import type { ModelsRegistry, SecretScrubber, SecretVault } from '@wrongstack/core/types';
 import type { AuthPanelHost } from '@wrongstack/tui';
+import type { AuthMenuDeps } from './types.js';
 export interface AuthPanelServiceDeps {
     vault: SecretVault;
     modelsRegistry: ModelsRegistry;
     /** The sole config file read or written by auth operations. */
     profileConfigPath: string;
     secretScrubber?: SecretScrubber | undefined;
+    providerAuthRegistry?: AuthMenuDeps['providerAuthRegistry'];
     /** Re-read the live provider snapshot after a successful auth mutation. */
     onProvidersChanged?: (() => Promise<void>) | undefined;
 }

package/dist/auth-menu/provider-auth-login.d.ts

@@ -0,0 +1,12 @@
+import type { ProviderAuthRegistry } from '@wrongstack/core/registry';
+import type { AuthMenuDeps } from './types.js';
+type ProviderAuthRegistrySource = Pick<AuthMenuDeps, 'providerAuthRegistry'>;
+export declare function providerAuthRegistryFor(deps: ProviderAuthRegistrySource): ProviderAuthRegistry;
+/** UI-safe strategy metadata shared by the TUI auth panel and CLI menus. */
+export declare function providerAuthStrategiesFor(deps: ProviderAuthRegistrySource): import("@wrongstack/core").ProviderAuthStrategyMetadata[];
+export declare function runProviderAuthLogin(deps: AuthMenuDeps, strategyId: string, opts?: {
+    providerId?: string | undefined;
+    signal?: AbortSignal | undefined;
+}): Promise<number>;
+export {};
+//# sourceMappingURL=provider-auth-login.d.ts.map

package/dist/auth-menu/types.d.ts

@@ -1,3 +1,4 @@
+import type { ProviderAuthRegistry } from '@wrongstack/core/registry';
 import type { ModelsRegistry, SecretScrubber, SecretVault } from '@wrongstack/core/types';
 /**
  * Minimal output surface the auth-menu flows need. `TerminalRenderer`
@@ -33,6 +34,8 @@ export interface AuthMenuDeps {
     vault: SecretVault;
     /** Active profile config path. Provider credentials never use the root bootstrap. */
     profileConfigPath: string;
+    /** Shared registry when the runtime is active; defaults to the built-in strategies. */
+    providerAuthRegistry?: ProviderAuthRegistry | undefined;
     /**
      * Optional scrubber used by `wstack auth local` to redact Bearer
      * tokens from probe logs before they reach the renderer. Falls back

package/dist/auto-discover-providers-DXR25GTG.js

@@ -0,0 +1,7 @@
+import {
+  discoverAndMergeProviders
+} from "./chunk-D5GB5MHA.js";
+export {
+  discoverAndMergeProviders
+};
+//# sourceMappingURL=auto-discover-providers-DXR25GTG.js.map

package/dist/boot/dispatch-webui.d.ts

@@ -22,6 +22,7 @@ export interface WebUIDispatchContext {
     profileConfigPath: string;
     projectSessionsDir: string;
     modelsRegistry: ModelsRegistry;
+    providerAuthRegistry: import('@wrongstack/core/registry').ProviderAuthRegistry;
     mcpRegistry: MCPRegistry;
     brain: BrainArbiter | undefined;
     brainSettings: {

package/dist/boot/system-prompt-builder.d.ts

@@ -87,6 +87,13 @@ interface BindSystemPromptBuilderDeps {
     /** `config.systemPrompt.variant` — selects system.md, system-lite.md, or system-pro.md. */
     systemPromptVariant?: SystemInstructionVariant | undefined;
     paths: SystemPromptBuilderPaths;
+    /** Project root, for the Atlas brief. Omit to leave the brief out entirely. */
+    projectRoot?: string | undefined;
+    /** `config.indexing.atlas` — gates and budgets the session-start brief. */
+    atlas?: {
+        injectOnSessionStart?: boolean | undefined;
+        briefMaxTokens?: number | undefined;
+    } | undefined;
     /**
      * Optional narrow `domain-term` adapter for the prompt glossary block.
      * The CLI provides a closure over the resolved SAGE `memoryStore` that

package/dist/boot/system-prompt.d.ts

@@ -1,4 +1,4 @@
-import type { ProviderRegistry } from '@wrongstack/core/registry';
+import type { ProviderAuthRegistry, ProviderRegistry } from '@wrongstack/core/registry';
 import type { Config, Logger, ModelsRegistry, ResolvedProvider } from '@wrongstack/core/types';
 type ModeId = string;
 type ModePrompt = string;
@@ -12,6 +12,7 @@ type ResolvedModeResult = {
     kind: 'ok';
     resolvedProvider: ResolvedProvider;
     providerRegistry: ProviderRegistry;
+    providerAuthRegistry: ProviderAuthRegistry;
     provider: ReturnType<ProviderRegistry['create']>;
     modeId: ModeId;
     modePrompt: ModePrompt;

package/dist/chimera-reviewer-policy.d.ts

@@ -131,6 +131,6 @@ export declare function reviewerAttemptTimeoutMs(remainingMs: number, attemptTim
  * Chimera reviewers only inspect code and return a report. They never repair
  * files themselves; bug-hunter/security-scanner/fix agents own all mutations.
  */
-export declare const CHIMERA_REVIEW_READ_ONLY_TOOLS: readonly ["read", "grep", "glob", "tree", "codebase-stats", "codebase-search", "codebase-skeleton", "codebase-repo-map", "codebase-incoming-calls", "codebase-outgoing-calls"];
+export declare const CHIMERA_REVIEW_READ_ONLY_TOOLS: readonly ["read", "grep", "glob", "tree", "codebase-stats", "codebase-search", "codebase-skeleton", "codebase-context", "codebase-repo-map", "codebase-incoming-calls", "codebase-outgoing-calls"];
 export declare function applyChimeraReviewerReadOnlyPolicy(config: SubagentConfig): SubagentConfig;
 //# sourceMappingURL=chimera-reviewer-policy.d.ts.map

package/dist/{chunk-KHWDTNBZ.js → chunk-4NHD5OXJ.js}

@@ -22,7 +22,7 @@ async function handleHelpVersionShortCircuit(argv) {
   }
   if (earlyFlags["help"] === true) {
     if (positional.length > 0) {
-      const { subcommandNames } = await import("./subcommands-WJLBHVKC.js");
+      const { subcommandNames } = await import("./subcommands-CUTGBDKP.js");
       if (subcommandNames.includes(positional[0])) {
         const first = positional[0];
         const deep = positional[1];
@@ -43,4 +43,4 @@ async function handleHelpVersionShortCircuit(argv) {
 export {
   handleHelpVersionShortCircuit
 };
-//# sourceMappingURL=chunk-KHWDTNBZ.js.map
+//# sourceMappingURL=chunk-4NHD5OXJ.js.map