@wrongstack/cli 1.0.1 → 1.0.3

package/dist/{chunk-MNQQ4ZNF.js → chunk-ONOT5OJ2.js}

@@ -8,10 +8,8 @@ import {
   visibleModelIds
 } from "./chunk-VUVOMXWP.js";
 import {
-  openBrowser,
-  runCodexOAuthLogin,
-  startLoopbackServer
-} from "./chunk-TNK6237M.js";
+  openBrowser
+} from "./chunk-DAKVBMD4.js";
 import {
   activeLabel,
   loadConfigProviders,
@@ -22,9 +20,123 @@ import {
   writeKeysBack
 } from "./chunk-DR2OXU46.js";
 
+// src/auth-menu/provider-auth-login.ts
+import { color } from "@wrongstack/core/utils";
+import {
+  applyProviderAuthOutcome,
+  createBuiltinProviderAuthRegistry
+} from "@wrongstack/providers/oauth";
+var defaultRegistry;
+function providerAuthRegistryFor(deps) {
+  if (deps.providerAuthRegistry) return deps.providerAuthRegistry;
+  defaultRegistry ??= createBuiltinProviderAuthRegistry();
+  return defaultRegistry;
+}
+function providerAuthStrategiesFor(deps) {
+  return providerAuthRegistryFor(deps).list();
+}
+function hyperlink(url) {
+  return `\x1B]8;;${url}\x1B\\${url}\x1B]8;;\x1B\\`;
+}
+async function runProviderAuthLogin(deps, strategyId, opts = {}) {
+  const registry = providerAuthRegistryFor(deps);
+  const strategy = registry.get(strategyId);
+  if (!strategy) {
+    deps.renderer.writeError(`Unknown OAuth login "${strategyId}".`);
+    return 1;
+  }
+  const controller = new AbortController();
+  let sigintCount = 0;
+  const onSigint = () => {
+    sigintCount += 1;
+    if (sigintCount === 1) {
+      deps.renderer.write(
+        color.dim("\n  Cancelling sign-in\u2026 (press Ctrl+C again to force-quit)\n")
+      );
+      controller.abort();
+    } else {
+      process.exit(130);
+    }
+  };
+  const onExternalAbort = () => controller.abort();
+  if (opts.signal) {
+    if (opts.signal.aborted) controller.abort();
+    else opts.signal.addEventListener("abort", onExternalAbort, { once: true });
+  } else {
+    process.on("SIGINT", onSigint);
+  }
+  let session;
+  try {
+    deps.renderer.write(
+      color.bold(`
+  Sign in with ${strategy.label}`) + color.dim(` \u2192 ${opts.providerId ?? strategy.providerId}
+`)
+    );
+    session = await registry.begin(
+      strategy.id,
+      { modelsRegistry: deps.modelsRegistry },
+      controller.signal
+    );
+    let outcome;
+    if (session.interaction.type === "device_code") {
+      const { verificationUri, userCode } = session.interaction;
+      deps.renderer.write(
+        color.bold("\n  Open this URL and enter the code:\n") + color.cyan(`  ${hyperlink(verificationUri)}
+`) + color.bold(`  Code: ${userCode}
+`) + color.dim("  Waiting for authorization\u2026\n")
+      );
+      openBrowser(verificationUri);
+      outcome = await session.waitForCompletion(controller.signal);
+    } else {
+      const { authorizeUrl, bound } = session.interaction;
+      deps.renderer.write(
+        color.bold("\n  Open this URL in your browser to sign in:\n") + color.cyan(`  ${hyperlink(authorizeUrl)}
+`)
+      );
+      if (bound) {
+        openBrowser(authorizeUrl);
+        deps.renderer.write(color.dim("  Waiting for browser authorization\u2026\n"));
+        outcome = await session.waitForCompletion(controller.signal);
+      } else {
+        const input = (await deps.reader.readLine(
+          `
+  ${color.amber("?")} Paste the redirect URL or code ${color.dim("(or q to cancel)")}: `
+        )).trim();
+        if (!input || input.toLowerCase() === "q") return 1;
+        outcome = await session.completeWithCode(input, controller.signal);
+      }
+    }
+    if (!outcome) {
+      deps.renderer.write(color.dim("  Sign-in cancelled or timed out.\n"));
+      return 1;
+    }
+    await mutateConfigProviders(
+      deps.profileConfigPath,
+      deps.vault,
+      (providers) => {
+        applyProviderAuthOutcome(providers, outcome, { targetProviderId: opts.providerId });
+      },
+      deps.profileConfigPath
+    );
+    const savedId = opts.providerId ?? outcome.providerId;
+    deps.renderer.write(color.green(`
+  \u2713 Signed in \u2014 saved as ${savedId}.
+`));
+    return 0;
+  } catch (error) {
+    const message = error instanceof DOMException && error.name === "AbortError" ? "Login cancelled." : error instanceof Error ? error.message : String(error);
+    deps.renderer.writeError(`  Login failed: ${message}`);
+    return 1;
+  } finally {
+    session?.close();
+    if (opts.signal) opts.signal.removeEventListener("abort", onExternalAbort);
+    else process.off("SIGINT", onSigint);
+  }
+}
+
 // src/auth-menu/local.ts
 import { DefaultSecretScrubber as DefaultSecretScrubber2 } from "@wrongstack/core/security";
-import { color as color2 } from "@wrongstack/core/utils";
+import { color as color3 } from "@wrongstack/core/utils";
 import { probeLocalLlm } from "@wrongstack/runtime/probe";
 
 // src/auth-menu/auth-menu-audit.ts
@@ -108,24 +220,24 @@ import { projectLocalProviderPresets } from "@wrongstack/providers/definitions";
 var LOCAL_LLM_PRESETS = projectLocalProviderPresets();
 
 // src/auth-menu/shared.ts
-import { color } from "@wrongstack/core/utils";
+import { color as color2 } from "@wrongstack/core/utils";
 function renderProviderLine(renderer, id, cfg, idx) {
   const keys = normalizeKeys(cfg);
   const active = activeLabel(cfg, keys);
   const firstKey = keys[0];
   let summary;
   if (keys.length === 0) {
-    summary = color.dim("(no keys)");
+    summary = color2.dim("(no keys)");
   } else if (keys.length === 1) {
     summary = maskedKey(firstKey?.apiKey ?? "");
   } else {
     const activeKeyObj = active != null ? keys.find((k) => k.label === active) : void 0;
-    summary = `${color.dim(`${keys.length} keys`)} ${color.dim("active:")} ${color.bold(active ?? "?")} ` + maskedKey(activeKeyObj?.apiKey ?? firstKey?.apiKey ?? "");
+    summary = `${color2.dim(`${keys.length} keys`)} ${color2.dim("active:")} ${color2.bold(active ?? "?")} ` + maskedKey(activeKeyObj?.apiKey ?? firstKey?.apiKey ?? "");
   }
-  const fam = cfg.family ? color.dim(`[${cfg.family}]`) : "";
-  const aliasHint = cfg.type && cfg.type !== id ? color.dim(`\u2192 ${cfg.type}`) : "";
+  const fam = cfg.family ? color2.dim(`[${cfg.family}]`) : "";
+  const aliasHint = cfg.type && cfg.type !== id ? color2.dim(`\u2192 ${cfg.type}`) : "";
   renderer.write(
-    `    ${color.dim(`${idx}.`.padStart(4))} ${id.padEnd(22)} ${fam} ${aliasHint} ${summary}
+    `    ${color2.dim(`${idx}.`.padStart(4))} ${id.padEnd(22)} ${fam} ${aliasHint} ${summary}
 `
   );
 }
@@ -134,23 +246,23 @@ function renderProviderHeader(renderer, providerId, cfg) {
   const active = activeLabel(cfg, keys);
   renderer.write(
     `
-${color.bold(providerId)} ${cfg.family ? color.dim(`[${cfg.family}]`) : color.amber("[no family]")}
+${color2.bold(providerId)} ${cfg.family ? color2.dim(`[${cfg.family}]`) : color2.amber("[no family]")}
 `
   );
   const details = [
-    color.dim(`  type:    ${cfg.type ?? providerId}`),
-    color.dim(`  family:  ${cfg.family ?? "(unset \u2192 resolved from models.dev when type matches)"}`),
-    color.dim(`  baseUrl: ${cfg.baseUrl ?? "(unset \u2192 catalog default)"}`)
+    color2.dim(`  type:    ${cfg.type ?? providerId}`),
+    color2.dim(`  family:  ${cfg.family ?? "(unset \u2192 resolved from models.dev when type matches)"}`),
+    color2.dim(`  baseUrl: ${cfg.baseUrl ?? "(unset \u2192 catalog default)"}`)
   ];
   if (cfg.envVars && cfg.envVars.length > 0) {
-    details.push(color.dim(`  envVars: ${cfg.envVars.join(", ")}`));
+    details.push(color2.dim(`  envVars: ${cfg.envVars.join(", ")}`));
   }
   if (cfg.models && cfg.models.length > 0) {
-    details.push(color.dim(`  models:  ${cfg.models.join(", ")}`));
+    details.push(color2.dim(`  models:  ${cfg.models.join(", ")}`));
   }
   renderer.write(details.join("\n") + "\n");
   if (keys.length === 0) {
-    renderer.write(color.dim("  (no keys saved)\n"));
+    renderer.write(color2.dim("  (no keys saved)\n"));
   } else {
     for (let i = 0; i < keys.length; i++) {
       const key = keys[i];
@@ -159,56 +271,56 @@ ${color.bold(providerId)} ${cfg.family ? color.dim(`[${cfg.family}]`) : color.am
   }
 }
 function renderKeyLine(renderer, key, idx, active) {
-  const marker = key.label === active ? color.green("\u25CF") : color.dim("\u25CB");
+  const marker = key.label === active ? color2.green("\u25CF") : color2.dim("\u25CB");
   renderer.write(
-    `  ${color.dim(`${idx}.`.padStart(4))} ${marker} ${key.label.padEnd(20)} ${maskedKey(key.apiKey)}  ${color.dim(key.createdAt)}
+    `  ${color2.dim(`${idx}.`.padStart(4))} ${marker} ${key.label.padEnd(20)} ${maskedKey(key.apiKey)}  ${color2.dim(key.createdAt)}
 `
   );
 }
 function renderActions(renderer, keysLength) {
   renderer.write(`
-  ${color.dim("Actions:")}
+  ${color2.dim("Actions:")}
 `);
-  renderer.write(`    ${color.bold("a")}        Add another key
+  renderer.write(`    ${color2.bold("a")}        Add another key
 `);
   if (keysLength > 0) {
-    renderer.write(`    ${color.bold("u")} <n>    Update key <n>
+    renderer.write(`    ${color2.bold("u")} <n>    Update key <n>
 `);
-    renderer.write(`    ${color.bold("d")} <n>    Delete key <n>
+    renderer.write(`    ${color2.bold("d")} <n>    Delete key <n>
 `);
-    renderer.write(`    ${color.bold("s")} <n>    Set key <n> as active
+    renderer.write(`    ${color2.bold("s")} <n>    Set key <n> as active
 `);
   }
-  renderer.write(`    ${color.bold("f")}        Edit family
+  renderer.write(`    ${color2.bold("f")}        Edit family
 `);
   renderer.write(
-    `    ${color.bold("B")}        Edit baseUrl ${color.dim("(capital B \u2014 b is Back)")}
+    `    ${color2.bold("B")}        Edit baseUrl ${color2.dim("(capital B \u2014 b is Back)")}
 `
   );
-  renderer.write(`    ${color.bold("m")}        Edit visible model list
+  renderer.write(`    ${color2.bold("m")}        Edit visible model list
 `);
-  renderer.write(`    ${color.bold("x")}        Remove this provider entirely
+  renderer.write(`    ${color2.bold("x")}        Remove this provider entirely
 `);
-  renderer.write(`    ${color.bold("b")}        Back
+  renderer.write(`    ${color2.bold("b")}        Back
 `);
-  renderer.write(`    ${color.bold("q")}        Quit
+  renderer.write(`    ${color2.bold("q")}        Quit
 `);
 }
 function renderTopMenu(renderer, providers) {
   renderer.write(`
-${color.bold("WrongStack")} ${color.dim("\u2014 API key manager")}
+${color2.bold("WrongStack")} ${color2.dim("\u2014 API key manager")}
 
 `);
   const ids = Object.keys(providers).sort();
   if (ids.length === 0) {
-    renderer.write(color.dim("  No providers configured yet.\n"));
+    renderer.write(color2.dim("  No providers configured yet.\n"));
     renderer.write(
-      color.dim(
+      color2.dim(
         "  Use (a) to add one from the models.dev catalog, (l) for a local server, or (c) for a custom provider.\n"
       )
     );
   } else {
-    renderer.write(`  ${color.dim("Saved providers:")}
+    renderer.write(`  ${color2.dim("Saved providers:")}
 `);
     let idx = 1;
     for (const id of ids) {
@@ -219,32 +331,32 @@ ${color.bold("WrongStack")} ${color.dim("\u2014 API key manager")}
     }
   }
   renderer.write(`
-  ${color.dim("Actions:")}
+  ${color2.dim("Actions:")}
 `);
-  renderer.write(`    ${color.bold("a")}  Add a provider (from catalog)
+  renderer.write(`    ${color2.bold("a")}  Add a provider (from catalog)
 `);
   renderer.write(
-    `    ${color.bold("l")}  Add a local server ${color.dim("(OmniRoute / Ollama / vLLM / LM Studio)")}
+    `    ${color2.bold("l")}  Add a local server ${color2.dim("(OmniRoute / Ollama / vLLM / LM Studio)")}
 `
   );
-  renderer.write(`    ${color.bold("c")}  Add a custom provider
+  renderer.write(`    ${color2.bold("c")}  Add a custom provider
 `);
   renderer.write(
-    `    ${color.bold("s")}  Login with OAuth ${color.dim("(ChatGPT / Claude / Copilot)")}
+    `    ${color2.bold("s")}  Login with provider OAuth
 `
   );
   if (ids.length > 0) {
     renderer.write(
-      `    ${color.dim("1-")}${color.dim(String(ids.length))}  ${color.bold("Manage a provider")}
+      `    ${color2.dim("1-")}${color2.dim(String(ids.length))}  ${color2.bold("Manage a provider")}
 `
     );
   }
-  renderer.write(`    ${color.bold("q")}  Quit
+  renderer.write(`    ${color2.bold("q")}  Quit
 `);
 }
 async function readKeyInput(deps, intent) {
   const key = (await deps.reader.readSecret(
-    `  ${color.amber("?")} ${intent} ${color.dim("(hidden, paste OK)")}: `
+    `  ${color2.amber("?")} ${intent} ${color2.dim("(hidden, paste OK)")}: `
   )).trim();
   if (!key) {
     deps.renderer.writeError("No key entered.");
@@ -253,7 +365,7 @@ async function readKeyInput(deps, intent) {
   return key;
 }
 async function confirm(deps, question) {
-  const answer = (await deps.reader.readLine(`  ${color.amber("?")} ${question} ${color.dim("[y/N/q]")} `)).trim().toLowerCase();
+  const answer = (await deps.reader.readLine(`  ${color2.amber("?")} ${question} ${color2.dim("[y/N/q]")} `)).trim().toLowerCase();
   if (answer === "q" || answer === "quit") return null;
   return answer === "y" || answer === "yes";
 }
@@ -315,7 +427,7 @@ async function runAuthLocal(deps, opts = {}) {
     if (!probe.ok) {
       if (chosen.noAuth) {
         deps.renderer.write(
-          color2.dim(
+          color3.dim(
             `  Saving ${chosen.label} anyway \u2014 keyless local gateway needs no key and discovers models when it comes up.
 `
           )
@@ -324,7 +436,7 @@ async function runAuthLocal(deps, opts = {}) {
       } else {
         const saveAnyway = await promptSaveAnyway(deps);
         if (!saveAnyway) {
-          deps.renderer.write(color2.dim("  Cancelled. Nothing saved.\n"));
+          deps.renderer.write(color3.dim("  Cancelled. Nothing saved.\n"));
           return 0;
         }
         probeFailedAndSaved = true;
@@ -387,19 +499,19 @@ async function runAuthLocal(deps, opts = {}) {
   }
   if (apiKey) {
     deps.renderer.write(
-      `  ${color2.green("\u2713")} Saved ${color2.bold(chosen.id)}/${color2.bold(finalLabel)} \u2192 ${color2.cyan(baseUrl)}
+      `  ${color3.green("\u2713")} Saved ${color3.bold(chosen.id)}/${color3.bold(finalLabel)} \u2192 ${color3.cyan(baseUrl)}
 `
     );
   } else {
     deps.renderer.write(
-      `  ${color2.green("\u2713")} Saved ${color2.bold(chosen.id)} (no key) \u2192 ${color2.cyan(baseUrl)}
+      `  ${color3.green("\u2713")} Saved ${color3.bold(chosen.id)} (no key) \u2192 ${color3.cyan(baseUrl)}
 `
     );
   }
   const firstModel = resolvedModels && resolvedModels.length > 0 ? resolvedModels[0] : null;
-  const modelHint = firstModel ? color2.cyan(firstModel) : color2.dim("<model-id>");
+  const modelHint = firstModel ? color3.cyan(firstModel) : color3.dim("<model-id>");
   deps.renderer.write(
-    color2.dim(`  Launch: wstack --provider ${chosen.id} --model ${modelHint} "<task>"
+    color3.dim(`  Launch: wstack --provider ${chosen.id} --model ${modelHint} "<task>"
 `)
   );
   return 0;
@@ -431,47 +543,47 @@ function resolveModelList(models, probe, scrubber) {
   return out;
 }
 function renderProbeResult(deps, probe, opts = {}) {
-  const label = opts.presetLabel ? ` ${color2.bold(opts.presetLabel)}` : "";
-  const elapsed = probe.elapsedMs !== void 0 ? ` ${color2.dim(`(${probe.elapsedMs}ms)`)}` : "";
+  const label = opts.presetLabel ? ` ${color3.bold(opts.presetLabel)}` : "";
+  const elapsed = probe.elapsedMs !== void 0 ? ` ${color3.dim(`(${probe.elapsedMs}ms)`)}` : "";
   switch (probe.status) {
     case "ok": {
-      const models = probe.modelCount !== void 0 ? color2.dim(`, ${probe.modelCount} model${probe.modelCount === 1 ? "" : "s"}`) : "";
-      deps.renderer.write(`  ${color2.green("\u25CF")} ${label} health probe ok${models}${elapsed}
+      const models = probe.modelCount !== void 0 ? color3.dim(`, ${probe.modelCount} model${probe.modelCount === 1 ? "" : "s"}`) : "";
+      deps.renderer.write(`  ${color3.green("\u25CF")} ${label} health probe ok${models}${elapsed}
 `);
       break;
     }
     case "timeout": {
       deps.renderer.write(
-        `  ${color2.red("\u25CF")} ${label} health probe timed out${elapsed}
-    ${color2.dim("The server did not respond within the timeout.")}
-    ${color2.dim("Is the local server running? Check the port and try again.")}
+        `  ${color3.red("\u25CF")} ${label} health probe timed out${elapsed}
+    ${color3.dim("The server did not respond within the timeout.")}
+    ${color3.dim("Is the local server running? Check the port and try again.")}
 `
       );
       break;
     }
     case "unreachable": {
-      const detail = probe.detail ? ` ${color2.dim(`(${probe.detail})`)}` : "";
+      const detail = probe.detail ? ` ${color3.dim(`(${probe.detail})`)}` : "";
       deps.renderer.write(
-        `  ${color2.red("\u25CF")} ${label} server unreachable${detail}
-    ${color2.dim("Could not connect. Common causes:")}
-    ${color2.dim("  - The local server is not running")}
-    ${color2.dim("  - The port is blocked by a firewall")}
-    ${color2.dim("  - The base URL is wrong")}
+        `  ${color3.red("\u25CF")} ${label} server unreachable${detail}
+    ${color3.dim("Could not connect. Common causes:")}
+    ${color3.dim("  - The local server is not running")}
+    ${color3.dim("  - The port is blocked by a firewall")}
+    ${color3.dim("  - The base URL is wrong")}
 `
       );
       break;
     }
     case "http_error": {
       const status = probe.httpStatus !== void 0 ? ` HTTP ${probe.httpStatus}` : "";
-      const detail = probe.detail ? ` ${color2.dim(`\u2014 ${probe.detail}`)}` : "";
-      deps.renderer.write(`  ${color2.yellow("\u25CF")} ${label} health probe got${status}${detail}
+      const detail = probe.detail ? ` ${color3.dim(`\u2014 ${probe.detail}`)}` : "";
+      deps.renderer.write(`  ${color3.yellow("\u25CF")} ${label} health probe got${status}${detail}
 `);
       break;
     }
     case "invalid_response": {
       deps.renderer.write(
-        `  ${color2.yellow("\u25CF")} ${label} health probe returned an unexpected shape
-` + (probe.detail ? `    ${color2.dim(probe.detail)}
+        `  ${color3.yellow("\u25CF")} ${label} health probe returned an unexpected shape
+` + (probe.detail ? `    ${color3.dim(probe.detail)}
 ` : "")
       );
       break;
@@ -484,31 +596,31 @@ function renderProbeResult(deps, probe, opts = {}) {
 async function promptSaveAnyway(deps) {
   const answer = (await deps.reader.readLine(
     `
-${color2.amber("?")} ${color2.bold("Save anyway?")} ${color2.dim("[y/N]")}: `
+${color3.amber("?")} ${color3.bold("Save anyway?")} ${color3.dim("[y/N]")}: `
   )).trim().toLowerCase();
   return answer === "y" || answer === "yes";
 }
 async function pickLocalPreset(deps) {
   deps.renderer.write(
     `
-${color2.bold("Local LLM servers")} ${color2.dim("\u2014 pick one to pre-fill the base URL")}
+${color3.bold("Local LLM servers")} ${color3.dim("\u2014 pick one to pre-fill the base URL")}
 
 `
   );
   let idx = 1;
   for (const entry of LOCAL_LLM_PRESETS) {
-    const auth = entry.noAuth ? color2.dim("(no auth)") : color2.dim("(optional auth)");
+    const auth = entry.noAuth ? color3.dim("(no auth)") : color3.dim("(optional auth)");
     deps.renderer.write(
-      `    ${color2.dim(`${idx}.`.padStart(4))} ${color2.bold(entry.label.padEnd(12))} ${color2.cyan(entry.defaultBaseUrl.padEnd(34))} ${auth}
+      `    ${color3.dim(`${idx}.`.padStart(4))} ${color3.bold(entry.label.padEnd(12))} ${color3.cyan(entry.defaultBaseUrl.padEnd(34))} ${auth}
 `
     );
-    deps.renderer.write(`        ${color2.dim(entry.hint)}
+    deps.renderer.write(`        ${color3.dim(entry.hint)}
 `);
     idx++;
   }
   const answer = (await deps.reader.readLine(
     `
-${color2.amber("?")} Pick ${color2.dim(`(1-${LOCAL_LLM_PRESETS.length}, q to quit)`)}: `
+${color3.amber("?")} Pick ${color3.dim(`(1-${LOCAL_LLM_PRESETS.length}, q to quit)`)}: `
   )).trim().toLowerCase();
   if (!answer || answer === "q" || answer === "quit") return void 0;
   const num = Number.parseInt(answer, 10);
@@ -522,563 +634,54 @@ ${color2.amber("?")} Pick ${color2.dim(`(1-${LOCAL_LLM_PRESETS.length}, q to qui
 }
 async function promptOptionalKey(deps, preset) {
   const answer = (await deps.reader.readSecret(
-    `  ${color2.amber("?")} ${color2.bold(preset.label)} API key ${color2.dim("(hidden \u2014 Enter to skip if auth is disabled on the server)")}: `
+    `  ${color3.amber("?")} ${color3.bold(preset.label)} API key ${color3.dim("(hidden \u2014 Enter to skip if auth is disabled on the server)")}: `
   )).trim();
   if (!answer) return void 0;
   return answer;
 }
 
 // src/auth-menu/oauth-menu.ts
-import { color as color5 } from "@wrongstack/core/utils";
-
-// src/auth-menu/anthropic-oauth.ts
-import { createHash, randomBytes } from "node:crypto";
-import {
-  FetchError,
-  ParseError
-} from "@wrongstack/core/types";
-import { color as color3 } from "@wrongstack/core/utils";
-var CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
-var AUTHORIZE_URL = "https://claude.ai/oauth/authorize";
-var TOKEN_URL = "https://platform.claude.com/v1/oauth/token";
-var REDIRECT_PORT = 53692;
-var REDIRECT_HOST = "127.0.0.1";
-var REDIRECT_PATH = "/callback";
-var REDIRECT_URI = `http://localhost:${REDIRECT_PORT}${REDIRECT_PATH}`;
-var SCOPES = "org:create_api_key user:profile user:inference user:sessions:claude_code user:mcp_servers user:file_upload";
-var CLAUDE_PROVIDER_ID = "anthropic-oauth";
-var CLAUDE_BASE_URL = "https://api.anthropic.com";
-function base64url(buf) {
-  return buf.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}
-function generatePkce() {
-  const verifier = base64url(randomBytes(32));
-  const challenge = base64url(createHash("sha256").update(verifier).digest());
-  return { verifier, challenge };
-}
-function buildAuthorizeUrl(challenge, verifier) {
-  const params = new URLSearchParams({
-    code: "true",
-    client_id: CLIENT_ID,
-    response_type: "code",
-    redirect_uri: REDIRECT_URI,
-    scope: SCOPES,
-    code_challenge: challenge,
-    code_challenge_method: "S256",
-    state: verifier
-  });
-  return `${AUTHORIZE_URL}?${params.toString()}`;
-}
-function parseAuthorizationInput(input) {
-  const value = input.trim();
-  if (!value) return {};
-  try {
-    const url = new URL(value);
-    return {
-      code: url.searchParams.get("code") ?? void 0,
-      state: url.searchParams.get("state") ?? void 0
-    };
-  } catch {
-  }
-  if (value.includes("#")) {
-    const [code, state] = value.split("#", 2);
-    return { code, state };
-  }
-  if (value.includes("code=")) {
-    const params = new URLSearchParams(value);
-    return {
-      code: params.get("code") ?? void 0,
-      state: params.get("state") ?? void 0
-    };
-  }
-  return { code: value };
-}
-async function readTokens(res, op, url) {
-  if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new FetchError({
-      message: `Claude token ${op} failed (${res.status}): ${text || res.statusText}`,
-      status: res.status,
-      context: { provider: "anthropic-oauth", op, url }
-    });
-  }
-  const json = await res.json();
-  if (!json?.access_token || !json.refresh_token || typeof json.expires_in !== "number") {
-    throw new ParseError({
-      message: `Claude token ${op} response missing fields`,
-      source: "anthropic-oauth-token-response",
-      context: { op }
-    });
-  }
-  return {
-    access: json.access_token,
-    refresh: json.refresh_token,
-    expires: Date.now() + json.expires_in * 1e3
-  };
-}
-async function exchangeAuthorizationCode(code, state, verifier, signal) {
-  const res = await fetch(TOKEN_URL, {
-    method: "POST",
-    headers: { "content-type": "application/json", accept: "application/json" },
-    body: JSON.stringify({
-      grant_type: "authorization_code",
-      client_id: CLIENT_ID,
-      code,
-      state,
-      redirect_uri: REDIRECT_URI,
-      code_verifier: verifier
-    }),
-    signal: signal ? AbortSignal.any([signal, AbortSignal.timeout(3e4)]) : AbortSignal.timeout(3e4)
-  });
-  return readTokens(res, "exchange", TOKEN_URL);
-}
-async function fetchClaudeModels(accessToken, signal) {
-  try {
-    const res = await fetch(`${CLAUDE_BASE_URL}/v1/models?limit=100`, {
-      headers: {
-        accept: "application/json",
-        authorization: `Bearer ${accessToken}`,
-        "anthropic-version": "2023-06-01",
-        "anthropic-beta": "claude-code-20250219,oauth-2025-04-20"
-      },
-      signal: AbortSignal.any([signal, AbortSignal.timeout(8e3)])
-    });
-    if (!res.ok) return [];
-    const json = await res.json();
-    const ids = (json?.data ?? []).map((m) => m.id).filter((id) => typeof id === "string" && id.startsWith("claude-"));
-    return ids;
-  } catch {
-    return [];
-  }
-}
-async function runClaudeOAuthLogin(deps, opts = {}) {
-  const providerId = opts.providerId ?? CLAUDE_PROVIDER_ID;
-  const { verifier, challenge } = generatePkce();
-  const state = verifier;
-  const authorizeUrl = buildAuthorizeUrl(challenge, verifier);
-  const osc8 = (url) => `\x1B]8;;${url}\x1B\\${url}\x1B]8;;\x1B\\`;
-  const ac = new AbortController();
-  const onSig = () => ac.abort();
-  const external = opts.signal;
-  const onExternalAbort = () => ac.abort();
-  if (external) {
-    if (external.aborted) ac.abort();
-    else external.addEventListener("abort", onExternalAbort, { once: true });
-  } else {
-    process.on("SIGINT", onSig);
-  }
-  const server = await startLoopbackServer(
-    state,
-    [REDIRECT_PORT],
-    ac.signal,
-    REDIRECT_PATH,
-    REDIRECT_HOST
-  );
-  deps.renderer.write(
-    color3.bold(`
-  Sign in with Claude \u2014 ${color3.cyan(providerId)}
-`) + color3.dim("  Uses your Claude Pro/Max subscription (not an API key).\n") + color3.amber("  \u26A0 Using a subscription outside the official Claude Code client is against\n") + color3.amber("    Anthropic\u2019s Terms \u2014 your account could be rate-limited or banned.\n") + color3.dim("    Sanctioned programmatic use = an API key: ") + color3.bold("wstack auth anthropic") + color3.dim("\n\n") + color3.bold(`  ${"\u2500".repeat(56)}
-`) + color3.bold("  Open this URL in your browser to sign in:\n") + color3.cyan(`  ${osc8(authorizeUrl)}
-`) + color3.bold(`  ${"\u2500".repeat(56)}
-
-`)
-  );
-  if (server.bound) {
-    openBrowser(authorizeUrl);
-    deps.renderer.write(
-      color3.dim("  A browser window should open. Waiting for you to finish signing in...\n") + color3.dim("  (Listening on http://localhost:53692 \u2014 press Ctrl+C to cancel.)\n")
-    );
-  } else {
-    deps.renderer.write(
-      color3.amber("  \u26A0 Could not start the local callback listener (port 53692 in use).\n") + color3.dim("  After signing in, paste the full redirect URL (or the code) below.\n")
-    );
-  }
-  let code;
-  try {
-    if (server.bound) {
-      const got = await server.waitForCode();
-      if (ac.signal.aborted) {
-        deps.renderer.write(color3.dim("  Cancelled.\n"));
-        return 1;
-      }
-      if (got) code = got.code;
-    }
-    if (!code) {
-      const input = (await deps.reader.readLine(
-        `
-  ${color3.amber("?")} Paste the redirect URL or code ${color3.dim("(or q to cancel)")}: `
-      )).trim();
-      if (input.toLowerCase() === "q" || input === "") {
-        deps.renderer.write(color3.dim("  Cancelled.\n"));
-        return 1;
-      }
-      const parsed = parseAuthorizationInput(input);
-      if (parsed.state && parsed.state !== state) {
-        deps.renderer.writeError("  State mismatch \u2014 please restart the login flow.");
-        return 1;
-      }
-      code = parsed.code;
-    }
-    if (!code) {
-      deps.renderer.writeError("  No authorization code received.");
-      return 1;
-    }
-    deps.renderer.write(color3.dim("\n  Exchanging authorization code for tokens...\n"));
-    const tokens = await exchangeAuthorizationCode(code, state, verifier, ac.signal);
-    const models = await fetchClaudeModels(tokens.access, ac.signal);
-    const saved = await saveClaudeTokens(deps, providerId, tokens, models);
-    if (!saved) return 1;
-    deps.renderer.write(color3.green("\n  \u2713 Signed in with Claude!\n"));
-    const modelHint = models[0];
-    deps.renderer.writeInfo(
-      `  Saved as provider ${color3.bold(providerId)}${models.length ? ` (${models.length} models)` : ""}.
-` + (modelHint ? `  Use: ${color3.bold(`wstack --provider ${providerId} --model ${modelHint}`)} "<task>"
-` : `  No model list was discovered; choose a model before starting a run.
-`) + color3.dim("  Tokens refresh automatically before they expire.\n")
-    );
-    return 0;
-  } catch (err) {
-    const msg = err instanceof DOMException && err.name === "AbortError" ? "Login cancelled." : err.message;
-    deps.renderer.writeError(`  Login failed: ${msg}`);
-    return 1;
-  } finally {
-    server.close();
-    if (external) external.removeEventListener("abort", onExternalAbort);
-    else process.off("SIGINT", onSig);
-  }
-}
-async function saveClaudeTokens(deps, providerId, tokens, models) {
-  const entry = {
-    label: "oauth-default",
-    apiKey: tokens.access,
-    createdAt: nowIso(),
-    authMethod: "oauth",
-    expiresAt: new Date(tokens.expires).toISOString(),
-    refreshToken: tokens.refresh,
-    tokenType: "bearer",
-    scope: SCOPES
-  };
-  try {
-    await mutateConfigProviders(
-      deps.profileConfigPath,
-      deps.vault,
-      (all) => {
-        const existing = all[providerId];
-        const p = existing ? { ...existing } : { type: providerId };
-        p.family = "anthropic-oauth";
-        if (!p.baseUrl) p.baseUrl = CLAUDE_BASE_URL;
-        if (models.length > 0) p.models = models;
-        const keys = normalizeKeys(p).filter((k) => k.label !== entry.label);
-        keys.push(entry);
-        writeKeysBack(p, keys);
-        p.activeKey = entry.label;
-        all[providerId] = p;
-      },
-      deps.profileConfigPath
-    );
-    return true;
-  } catch (err) {
-    deps.renderer.writeError(`  Failed to save tokens: ${err.message}`);
-    return false;
-  }
-}
-
-// src/auth-menu/github-copilot-oauth.ts
-import {
-  FetchError as FetchError2,
-  ParseError as ParseError2
-} from "@wrongstack/core/types";
 import { color as color4 } from "@wrongstack/core/utils";
-import { copilotBaseUrlFromToken, refreshCopilotToken } from "@wrongstack/providers";
-var CLIENT_ID2 = "Iv1.b507a08c87ecfe98";
-var DEVICE_CODE_URL = "https://github.com/login/device/code";
-var ACCESS_TOKEN_URL = "https://github.com/login/oauth/access_token";
-var COPILOT_HEADERS = {
-  "User-Agent": "GitHubCopilotChat/0.35.0",
-  "Editor-Version": "vscode/1.107.0",
-  "Editor-Plugin-Version": "copilot-chat/0.35.0",
-  "Copilot-Integration-Id": "vscode-chat"
-};
-var COPILOT_API_VERSION = "2026-06-01";
-var COPILOT_PROVIDER_ID = "github-copilot";
-function sleep(ms, signal) {
-  return new Promise((resolve, reject) => {
-    if (signal.aborted) return reject(new DOMException("Aborted", "AbortError"));
-    const t = setTimeout(() => {
-      signal.removeEventListener("abort", onAbort);
-      resolve();
-    }, ms);
-    function onAbort() {
-      clearTimeout(t);
-      reject(new DOMException("Aborted", "AbortError"));
-    }
-    signal.addEventListener("abort", onAbort, { once: true });
-  });
-}
-async function startDeviceFlow(signal) {
-  const res = await fetch(DEVICE_CODE_URL, {
-    method: "POST",
-    headers: {
-      accept: "application/json",
-      "content-type": "application/x-www-form-urlencoded",
-      "user-agent": COPILOT_HEADERS["User-Agent"]
-    },
-    body: new URLSearchParams({ client_id: CLIENT_ID2, scope: "read:user" }).toString(),
-    signal: signal ? AbortSignal.any([signal, AbortSignal.timeout(15e3)]) : AbortSignal.timeout(15e3)
-  });
-  if (!res.ok) {
-    throw new FetchError2({
-      message: `GitHub device-code request failed (${res.status})`,
-      status: res.status,
-      context: { provider: "github-copilot", op: "device-code", url: DEVICE_CODE_URL }
-    });
-  }
-  const json = await res.json();
-  if (!json?.device_code || !json.user_code || !json.verification_uri || typeof json.expires_in !== "number") {
-    throw new ParseError2({
-      message: "Invalid device-code response",
-      source: "github-copilot-device-code-response"
-    });
-  }
-  return {
-    device_code: json.device_code,
-    user_code: json.user_code,
-    verification_uri: json.verification_uri,
-    interval: json.interval ?? 5,
-    expires_in: json.expires_in
-  };
-}
-async function pollForGitHubToken(device, signal) {
-  let intervalMs = device.interval * 1e3;
-  const expiresAt = Date.now() + device.expires_in * 1e3;
-  while (Date.now() < expiresAt) {
-    await sleep(intervalMs, signal);
-    const res = await fetch(ACCESS_TOKEN_URL, {
-      method: "POST",
-      headers: {
-        accept: "application/json",
-        "content-type": "application/x-www-form-urlencoded",
-        "user-agent": COPILOT_HEADERS["User-Agent"]
-      },
-      body: new URLSearchParams({
-        client_id: CLIENT_ID2,
-        device_code: device.device_code,
-        grant_type: "urn:ietf:params:oauth:grant-type:device_code"
-      }).toString(),
-      signal: AbortSignal.any([signal, AbortSignal.timeout(15e3)])
-    });
-    const json = await res.json().catch(() => ({}));
-    if (json.access_token) return json.access_token;
-    if (json.error === "authorization_pending") continue;
-    if (json.error === "slow_down") {
-      intervalMs += 5e3;
-      continue;
-    }
-    throw new Error(`Device flow failed: ${json.error ?? "unknown error"}`);
-  }
-  throw new FetchError2({
-    message: "Device code expired \u2014 please restart the login.",
-    status: 408,
-    // Request Timeout
-    context: { provider: "github-copilot", op: "device-code-poll", reason: "expired" }
-  });
-}
-function isUsableCopilotChatModel(item) {
-  if (typeof item.id !== "string" || item.id.length === 0) return false;
-  const cap = item.capabilities;
-  if (cap?.type !== "chat") return false;
-  if (cap.supports?.tool_calls !== true) return false;
-  const eps = item.supported_endpoints;
-  if (Array.isArray(eps) && !eps.includes("/chat/completions")) return false;
-  if (item.policy?.state === "disabled") return false;
-  if (item.vendor === "Experimental") return false;
-  return true;
-}
-async function fetchCopilotModels(copilotToken, signal) {
-  try {
-    const base = copilotBaseUrlFromToken(copilotToken);
-    const res = await fetch(`${base}/models`, {
-      headers: {
-        accept: "application/json",
-        authorization: `Bearer ${copilotToken}`,
-        "X-GitHub-Api-Version": COPILOT_API_VERSION,
-        ...COPILOT_HEADERS
-      },
-      signal: AbortSignal.any([signal, AbortSignal.timeout(8e3)])
-    });
-    if (!res.ok) return [];
-    const json = await res.json();
-    const data = json?.data;
-    if (!Array.isArray(data)) return [];
-    const usable = data.filter(isUsableCopilotChatModel);
-    usable.sort((a, b) => copilotModelRank(a) - copilotModelRank(b));
-    return usable.map((m) => m.id);
-  } catch {
-    return [];
-  }
-}
-function copilotModelRank(item) {
-  if (item.is_chat_default === true) return 0;
-  if (item.is_chat_fallback === true) return 1;
-  return 2;
-}
-async function runCopilotOAuthLogin(deps, opts = {}) {
-  const providerId = opts.providerId ?? COPILOT_PROVIDER_ID;
-  const ac = new AbortController();
-  const onSig = () => ac.abort();
-  const onExternalAbort = () => ac.abort();
-  const external = opts.signal;
-  if (external) {
-    if (external.aborted) ac.abort();
-    else external.addEventListener("abort", onExternalAbort, { once: true });
-  } else {
-    process.on("SIGINT", onSig);
-  }
-  try {
-    deps.renderer.write(
-      color4.bold(`
-  Sign in with GitHub Copilot \u2014 ${color4.cyan(providerId)}
-`) + color4.dim("  Uses your GitHub Copilot subscription (not an API key).\n") + color4.amber("  \u26A0 Using Copilot outside its official editor integrations may violate\n") + color4.amber("    GitHub\u2019s Terms \u2014 your account could be rate-limited or banned.\n\n")
-    );
-    const device = await startDeviceFlow(ac.signal);
-    deps.renderer.write(
-      color4.bold(`  ${"\u2500".repeat(56)}
-`) + color4.bold("  Open this URL and enter the code:\n") + color4.cyan(`  ${device.verification_uri}
-`) + color4.bold("  Code: ") + color4.green(color4.bold(device.user_code)) + "\n" + color4.bold(`  ${"\u2500".repeat(56)}
-
-`)
-    );
-    openBrowser(device.verification_uri);
-    deps.renderer.write(color4.dim("  Waiting for you to authorize in the browser...\n"));
-    const githubToken = await pollForGitHubToken(device, ac.signal);
-    deps.renderer.write(color4.dim("  Authorized. Fetching your Copilot token...\n"));
-    const copilot = await refreshCopilotToken(githubToken, ac.signal);
-    const models = await fetchCopilotModels(copilot.token, ac.signal);
-    const saved = await saveCopilotTokens(
-      deps,
-      providerId,
-      copilot.token,
-      githubToken,
-      copilot.expires,
-      models
-    );
-    if (!saved) return 1;
-    deps.renderer.write(color4.green("\n  \u2713 Signed in with GitHub Copilot!\n"));
-    const modelHint = models[0] ?? "gpt-4o";
-    deps.renderer.writeInfo(
-      `  Saved as provider ${color4.bold(providerId)}${models.length ? ` (${models.length} models)` : ""}.
-  Use: ${color4.bold(`wstack --provider ${providerId} --model ${modelHint}`)} "<task>"
-` + color4.dim("  The Copilot token refreshes automatically.\n")
-    );
-    return 0;
-  } catch (err) {
-    const msg = err instanceof DOMException && err.name === "AbortError" ? "Login cancelled." : err.message;
-    deps.renderer.writeError(`  Login failed: ${msg}`);
-    return 1;
-  } finally {
-    if (external) {
-      external.removeEventListener("abort", onExternalAbort);
-    } else {
-      process.off("SIGINT", onSig);
-    }
-  }
-}
-async function saveCopilotTokens(deps, providerId, copilotToken, githubToken, expires, models) {
-  const entry = {
-    label: "oauth-default",
-    apiKey: copilotToken,
-    createdAt: nowIso(),
-    authMethod: "oauth",
-    expiresAt: new Date(expires).toISOString(),
-    refreshToken: githubToken,
-    tokenType: "bearer"
-  };
-  try {
-    await mutateConfigProviders(
-      deps.profileConfigPath,
-      deps.vault,
-      (all) => {
-        const existing = all[providerId];
-        const p = existing ? { ...existing } : { type: providerId };
-        p.family = "github-copilot";
-        if (!p.baseUrl) p.baseUrl = copilotBaseUrlFromToken(copilotToken);
-        if (models.length > 0) p.models = models;
-        else if (!p.models || p.models.length === 0) p.models = ["gpt-4o"];
-        const keys = normalizeKeys(p).filter((k) => k.label !== entry.label);
-        keys.push(entry);
-        writeKeysBack(p, keys);
-        p.activeKey = entry.label;
-        all[providerId] = p;
-      },
-      deps.profileConfigPath
-    );
-    return true;
-  } catch (err) {
-    deps.renderer.writeError(`  Failed to save tokens: ${err.message}`);
-    return false;
-  }
-}
-
-// src/auth-menu/oauth-menu.ts
 function renderOAuthLoginOptions(deps, indent = "    ") {
+  const entries = providerAuthRegistryFor(deps).list();
   deps.renderer.write(
-    `${indent}${color5.bold("OAuth login options")} ${color5.dim("(subscription sign-in)")}
-${indent}${color5.bold("chatgpt")}  ChatGPT Plus/Pro  ${color5.dim("(\u2192 openai-codex)")}
-${indent}${color5.bold("claude")}   Claude Pro/Max    ${color5.dim("(\u2192 anthropic-oauth)")}
-${indent}${color5.bold("copilot")}  GitHub Copilot    ${color5.dim("(\u2192 github-copilot)")}
+    `${indent}${color4.bold("OAuth login options")} ${color4.dim("(browser / device sign-in)")}
+` + entries.map(
+      (entry) => `${indent}${color4.bold(entry.id.padEnd(10))} ${entry.label}  ${color4.dim(`(\u2192 ${entry.providerId})`)}
 `
+    ).join("")
   );
 }
-var OAUTH_ALIASES = {
-  chatgpt: [
-    "chatgpt",
-    "openai",
-    "codex",
-    "codex-cli",
-    "openai-codex",
-    "chatgpt-plus",
-    "plus",
-    "pro"
-  ],
-  claude: ["claude", "anthropic", "claude-pro", "claude-max", "anthropic-oauth", "max"],
-  copilot: ["copilot", "github", "gh", "github-copilot"]
-};
-var OAUTH_NUMERIC = {
-  "1": "chatgpt",
-  "2": "claude",
-  "3": "copilot"
-};
 function resolveOAuthKind(choice, opts = {}) {
   const pick = choice.trim().toLowerCase();
   if (!pick) return void 0;
-  if (opts.allowNumeric !== false && OAUTH_NUMERIC[pick]) return OAUTH_NUMERIC[pick];
-  for (const [kind, aliases] of Object.entries(OAUTH_ALIASES)) {
-    if (aliases.includes(pick)) return kind;
+  const registry = opts.deps ? providerAuthRegistryFor(opts.deps) : providerAuthRegistryFor({});
+  if (opts.allowNumeric !== false && /^\d+$/.test(pick)) {
+    return registry.list()[Number(pick) - 1]?.id;
   }
-  return void 0;
+  return registry.resolveId(pick);
 }
 async function runOAuthLoginChoice(deps, choice, opts = {}) {
-  const kind = resolveOAuthKind(choice, opts);
+  const kind = resolveOAuthKind(choice, { ...opts, deps });
   if (!kind) return false;
   await runOAuthLoginKind(deps, kind);
   return true;
 }
 async function runOAuthLoginKind(deps, kind) {
-  if (kind === "claude") return runClaudeOAuthLogin(deps);
-  if (kind === "copilot") return runCopilotOAuthLogin(deps);
-  return runCodexOAuthLogin(deps);
+  return runProviderAuthLogin(deps, kind);
 }
 async function runOAuthLoginMenu(deps) {
+  const entries = providerAuthRegistryFor(deps).list();
   deps.renderer.write(
     `
-  ${color5.bold("Login with OAuth:")}
-` + color5.amber("  \u26A0 Subscription tokens used outside official clients may violate provider\n") + color5.amber("    Terms \u2014 your account could be rate-limited or banned. An API key is the\n") + color5.dim("    sanctioned path for programmatic use.\n") + `    ${color5.bold("1")}  ChatGPT Plus/Pro  ${color5.dim("(\u2192 openai-codex)")}
-    ${color5.bold("2")}  Claude Pro/Max    ${color5.dim("(\u2192 anthropic-oauth)")}
-    ${color5.bold("3")}  GitHub Copilot    ${color5.dim("(\u2192 github-copilot)")}
+  ${color4.bold("Login with OAuth:")}
+` + color4.amber("  \u26A0 Subscription authentication may be governed by provider-specific terms.\n") + entries.map(
+      (entry, index) => `    ${color4.bold(String(index + 1))}  ${entry.label}  ${color4.dim(`(\u2192 ${entry.providerId})`)}
 `
+    ).join("")
   );
   const pick = await deps.reader.readLine(
-    `  ${color5.amber("?")} Pick ${color5.dim("(or b to go back)")}: `
+    `  ${color4.amber("?")} Pick ${color4.dim("(or b to go back)")}: `
   );
   await runOAuthLoginChoice(deps, pick);
 }
@@ -1086,7 +689,7 @@ async function runOAuthLoginMenu(deps) {
 // src/picker.ts
 import os from "node:os";
 import {
-  color as color8,
+  color as color7,
   expectDefined as expectDefined2,
   setOutputLineGuard as setOutputLineGuard2,
   setRawMode as setRawMode2,
@@ -1130,7 +733,7 @@ function applyPickerKey(state, chunk, matchCount) {
 
 // src/picker-model-picker.ts
 import {
-  color as color7,
+  color as color6,
   expectDefined,
   setOutputLineGuard,
   setRawMode,
@@ -1138,14 +741,14 @@ import {
 } from "@wrongstack/core/utils";
 
 // src/picker-ui.ts
-import { color as color6, stripAnsi } from "@wrongstack/core/utils";
+import { color as color5, stripAnsi } from "@wrongstack/core/utils";
 var theme = {
-  accent: color6.amber,
-  chrome: color6.gray,
-  cursor: (s) => color6.amber(color6.bold(s)),
-  ctx: color6.cyan,
-  cost: color6.green,
-  caps: color6.magenta
+  accent: color5.amber,
+  chrome: color5.gray,
+  cursor: (s) => color5.amber(color5.bold(s)),
+  ctx: color5.cyan,
+  cost: color5.green,
+  caps: color5.magenta
 };
 var BOX = {
   tl: "\u256D",
@@ -1179,7 +782,7 @@ function boxTop(title) {
   const label = ` ${title} `;
   const pad = Math.max(0, width - visibleWidth(label) - 1);
   return theme.chrome(
-    `${BOX.tl}${BOX.h}${theme.accent(color6.bold(label))}${theme.chrome(BOX.h.repeat(pad))}${BOX.tr}`
+    `${BOX.tl}${BOX.h}${theme.accent(color5.bold(label))}${theme.chrome(BOX.h.repeat(pad))}${BOX.tr}`
   );
 }
 function boxBottom() {
@@ -1192,15 +795,15 @@ function boxDivider() {
   return theme.chrome(`${BOX.v}${BOX.h.repeat(pickerWidth())}${BOX.v}`);
 }
 function keyHints(pairs) {
-  return pairs.map(([k, label]) => `${theme.accent(k)} ${color6.dim(label)}`).join(color6.dim(" \xB7 "));
+  return pairs.map(([k, label]) => `${theme.accent(k)} ${color5.dim(label)}`).join(color5.dim(" \xB7 "));
 }
 var CODEX_PROVIDER_ID = "openai-codex";
 var CODEX_PICKER_HEADER = "Select Model and Effort";
 var CODEX_LEGACY_NOTE = "Access legacy models by running `wstack -m <model_name>` or in your `config.json`.";
 function codexPickerPreamble(provider) {
   if (provider.id !== CODEX_PROVIDER_ID) return "";
-  return `  ${color6.bold(CODEX_PICKER_HEADER)}
-${color6.dim(`  ${CODEX_LEGACY_NOTE}`)}
+  return `  ${color5.bold(CODEX_PICKER_HEADER)}
+${color5.dim(`  ${CODEX_LEGACY_NOTE}`)}
 
 `;
 }
@@ -1219,9 +822,9 @@ function renderLiveModelList(query, filtered, selectedIdx, header) {
   const visible = ordered.slice(0, LIVE_PICKER_MAX_VISIBLE);
   const lines = [];
   lines.push(boxTop("Select a model"));
-  lines.push(boxRow(color7.dim(header)));
-  const caret = query.length > 0 ? color7.dim("\u258F") : theme.cursor("\u258F");
-  lines.push(boxRow(`${theme.accent("\u276F")} ${color7.dim("Select model:")} ${query}${caret}`));
+  lines.push(boxRow(color6.dim(header)));
+  const caret = query.length > 0 ? color6.dim("\u258F") : theme.cursor("\u258F");
+  lines.push(boxRow(`${theme.accent("\u276F")} ${color6.dim("Select model:")} ${query}${caret}`));
   lines.push(boxDivider());
   let flat = 0;
   for (const m of visible) {
@@ -1235,14 +838,14 @@ function renderLiveModelList(query, filtered, selectedIdx, header) {
     if (m.tool_call) capTags.push("tools");
     if (m.reasoning) capTags.push("reason");
     if (m.modalities?.input?.includes("image")) capTags.push("vision");
-    const caps = capTags.map((c) => theme.caps(c)).join(color7.dim(" "));
-    const id = selected ? theme.accent(color7.bold(m.id)) : m.id;
+    const caps = capTags.map((c) => theme.caps(c)).join(color6.dim(" "));
+    const id = selected ? theme.accent(color6.bold(m.id)) : m.id;
     lines.push(boxRow(`${marker} ${padVisible(id, 34)} ${ctx}  ${padVisible(cost, 12)} ${caps}`));
     flat++;
   }
   if (ordered.length > LIVE_PICKER_MAX_VISIBLE) {
     lines.push(
-      boxRow(color7.dim(`  \u2026 ${ordered.length - LIVE_PICKER_MAX_VISIBLE} more \u2014 type to filter`))
+      boxRow(color6.dim(`  \u2026 ${ordered.length - LIVE_PICKER_MAX_VISIBLE} more \u2014 type to filter`))
     );
   }
   lines.push(boxDivider());
@@ -1394,37 +997,37 @@ function renderLiveProviderList(query, filtered, selectedIdx, savedSet) {
   const visible = ordered.slice(scrollOffset, scrollOffset + LIVE_PICKER_MAX_VISIBLE);
   const lines = [];
   lines.push(boxTop("Select a provider"));
-  const caret = query.length > 0 ? color8.dim("\u258F") : theme.cursor("\u258F");
-  lines.push(boxRow(`${theme.accent("\u276F")} ${color8.dim("Select provider:")} ${query}${caret}`));
+  const caret = query.length > 0 ? color7.dim("\u258F") : theme.cursor("\u258F");
+  lines.push(boxRow(`${theme.accent("\u276F")} ${color7.dim("Select provider:")} ${query}${caret}`));
   lines.push(boxDivider());
   if (scrollOffset > 0) {
-    lines.push(boxRow(color8.dim(`  ${scrollOffset} more above \u2191`)));
+    lines.push(boxRow(color7.dim(`  ${scrollOffset} more above \u2191`)));
   }
   let flat = 0;
   let lastFamily = "";
   for (const p of visible) {
     if (p.family !== lastFamily) {
-      lines.push(boxRow(`${theme.accent("\xB7")} ${color8.dim(p.family.toUpperCase())}`));
+      lines.push(boxRow(`${theme.accent("\xB7")} ${color7.dim(p.family.toUpperCase())}`));
       lastFamily = p.family;
     }
     const selected = flat === selectedIdx - scrollOffset;
     const sel = selected ? theme.cursor("\u25B6") : " ";
     let marker;
     if (savedSet) {
-      const mark = savedSet.has(p.id) ? color8.cyan("\u25C9") : color8.dim("\u25CB");
+      const mark = savedSet.has(p.id) ? color7.cyan("\u25C9") : color7.dim("\u25CB");
       marker = `${sel} ${mark}`;
     } else {
       marker = `${sel}`;
     }
-    const id = selected ? theme.accent(color8.bold(p.id)) : p.id;
-    const name = selected ? p.name : color8.dim(p.name);
+    const id = selected ? theme.accent(color7.bold(p.id)) : p.id;
+    const name = selected ? p.name : color7.dim(p.name);
     lines.push(boxRow(`${marker} ${padVisible(id, 24)} ${name}`));
     flat++;
   }
   if (scrollOffset + LIVE_PICKER_MAX_VISIBLE < ordered.length) {
     lines.push(
       boxRow(
-        color8.dim(`  ${ordered.length - scrollOffset - LIVE_PICKER_MAX_VISIBLE} more below \u2193`)
+        color7.dim(`  ${ordered.length - scrollOffset - LIVE_PICKER_MAX_VISIBLE} more below \u2193`)
       )
     );
   }
@@ -1575,10 +1178,10 @@ async function runPicker(deps) {
   const { modelsRegistry, renderer, reader, config, defaultProvider, defaultModel } = deps;
   renderer.write(
     `
-${theme.accent(color8.bold("\u258C WrongStack"))}  ${color8.dim("Provider & Model Selection")}
+${theme.accent(color7.bold("\u258C WrongStack"))}  ${color7.dim("Provider & Model Selection")}
 `
   );
-  renderer.write(color8.dim(`${theme.chrome("\xB7")} Loading provider catalog\u2026
+  renderer.write(color7.dim(`${theme.chrome("\xB7")} Loading provider catalog\u2026
 `));
   let providers;
   try {
@@ -1625,7 +1228,7 @@ ${theme.accent(color8.bold("\u258C WrongStack"))}  ${color8.dim("Provider & Mode
     const inherited = catalogType ? catalogById.get(catalogType) : void 0;
     merged.push({
       id,
-      name: inherited ? `${inherited.name} ${color8.dim("(alias)")}` : id,
+      name: inherited ? `${inherited.name} ${color7.dim("(alias)")}` : id,
       family: cfg.family,
       apiBase: cfg.baseUrl ?? inherited?.apiBase,
       envVars: cfg.envVars ?? inherited?.envVars ?? [],
@@ -1653,7 +1256,7 @@ ${theme.accent(color8.bold("\u258C WrongStack"))}  ${color8.dim("Provider & Mode
   if (process.stdin.isTTY) {
     const chosen2 = await runLiveProviderPicker(displayList);
     if (!chosen2) {
-      renderer.write(color8.dim("Cancelled.\n"));
+      renderer.write(color7.dim("Cancelled.\n"));
       return void 0;
     }
     return pickModel(chosen2, modelsRegistry, renderer, reader, defaultModel);
@@ -1688,19 +1291,19 @@ ${theme.accent(color8.bold("\u258C WrongStack"))}  ${color8.dim("Provider & Mode
       (a, b) => a.id.toLowerCase().localeCompare(b.id.toLowerCase())
     );
     if (!list || list.length === 0) continue;
-    renderer.write(`${boxRow(`${theme.accent("\xB7")} ${color8.dim(fam.toUpperCase())}`)}
+    renderer.write(`${boxRow(`${theme.accent("\xB7")} ${color7.dim(fam.toUpperCase())}`)}
 `);
     for (const p of list) {
       const envFound = p.envVars.some((v) => !!process.env[v]);
       const entry = config?.providers?.[p.id];
       const configKey = typeof entry?.apiKey === "string" && entry.apiKey.length > 0 || Array.isArray(entry?.apiKeys) && entry?.apiKeys?.some((k) => k?.apiKey);
-      const marker = envFound ? color8.green("\u25CF") : configKey ? color8.cyan("\u25C9") : color8.dim("\u25CB");
+      const marker = envFound ? color7.green("\u25CF") : configKey ? color7.cyan("\u25C9") : color7.dim("\u25CB");
       const isDefault = p.id === defaultProvider;
       if (isDefault) defaultIdx = idx;
-      const idLabel = isDefault ? theme.accent(color8.bold(p.id)) : p.id;
-      const suffix = isDefault ? color8.dim(" (default)") : "";
+      const idLabel = isDefault ? theme.accent(color7.bold(p.id)) : p.id;
+      const suffix = isDefault ? color7.dim(" (default)") : "";
       renderer.write(
-        `${boxRow(`${color8.dim(`${idx}.`.padStart(4))} ${marker} ${padVisible(idLabel, 22)} ${color8.dim(p.name)}${suffix}`)}
+        `${boxRow(`${color7.dim(`${idx}.`.padStart(4))} ${marker} ${padVisible(idLabel, 22)} ${color7.dim(p.name)}${suffix}`)}
 `
       );
       ordered.push({ provider: p, index: idx });
@@ -1711,22 +1314,22 @@ ${theme.accent(color8.bold("\u258C WrongStack"))}  ${color8.dim("Provider & Mode
 `);
   if (showingFallback) {
     renderer.write(
-      `${boxRow(`${color8.yellow("\u26A0 No API keys detected.")} ${color8.dim("Run `wstack auth <provider>` after picking.")}`)}
+      `${boxRow(`${color7.yellow("\u26A0 No API keys detected.")} ${color7.dim("Run `wstack auth <provider>` after picking.")}`)}
 `
     );
   } else {
-    renderer.write(`${boxRow(color8.dim("\u25CF env key   \u25C9 stored in config   \u25CB no key"))}
+    renderer.write(`${boxRow(color7.dim("\u25CF env key   \u25C9 stored in config   \u25CB no key"))}
 `);
   }
   renderer.write(`${boxBottom()}
 `);
-  const defaultHint = defaultIdx !== void 0 && defaultProvider ? ` ${color8.dim(`[Enter = ${defaultProvider}]`)}` : "";
+  const defaultHint = defaultIdx !== void 0 && defaultProvider ? ` ${color7.dim(`[Enter = ${defaultProvider}]`)}` : "";
   const providerAnswer = (await reader.readLine(
     `
-${color8.amber("?")} Select provider (1-${ordered.length})${defaultHint} ${color8.dim("[q to quit]")}: `
+${color7.amber("?")} Select provider (1-${ordered.length})${defaultHint} ${color7.dim("[q to quit]")}: `
   )).trim();
   if (providerAnswer.toLowerCase() === "q") {
-    renderer.write(color8.dim("Cancelled.\n"));
+    renderer.write(color7.dim("Cancelled.\n"));
     return void 0;
   }
   if (!providerAnswer) {
@@ -1734,7 +1337,7 @@ ${color8.amber("?")} Select provider (1-${ordered.length})${defaultHint} ${color
       const def = ordered[defaultIdx - 1];
       if (def) return pickModel(def.provider, modelsRegistry, renderer, reader, defaultModel);
     }
-    renderer.write(color8.dim("Cancelled.\n"));
+    renderer.write(color7.dim("Cancelled.\n"));
     return void 0;
   }
   const providerIdx = Number.parseInt(providerAnswer, 10);
@@ -1756,7 +1359,7 @@ async function pickModel(provider, registry, renderer, reader, defaultModel) {
 ${boxTop("Select a model")}
 `);
   renderer.write(
-    `${boxRow(`${color8.bold(provider.name)} ${color8.dim(`(${provider.id})`)} models:`)}
+    `${boxRow(`${color7.bold(provider.name)} ${color7.dim(`(${provider.id})`)} models:`)}
 `
   );
   renderer.write(`${boxBottom()}
@@ -1768,18 +1371,18 @@ ${boxTop("Select a model")}
   );
   if (models.length === 0) {
     renderer.write(
-      color8.dim(
+      color7.dim(
         "  No models listed yet for this provider \u2014 type a model id to use it (local servers auto-discover models at launch).\n"
       )
     );
     const typed = (await reader.readLine(`
-${color8.amber("?")} Model id ${color8.dim("(or Enter to cancel)")}: `)).trim();
+${color7.amber("?")} Model id ${color7.dim("(or Enter to cancel)")}: `)).trim();
     if (!typed) {
-      renderer.write(color8.dim("Cancelled.\n"));
+      renderer.write(color7.dim("Cancelled.\n"));
       return void 0;
     }
     renderer.write(`
-  ${color8.green("\u2713")} ${color8.bold(provider.id)} / ${color8.bold(typed)}
+  ${color7.green("\u2713")} ${color7.bold(provider.id)} / ${color7.bold(typed)}
 
 `);
     return { provider: provider.id, model: typed };
@@ -1787,12 +1390,12 @@ ${color8.amber("?")} Model id ${color8.dim("(or Enter to cancel)")}: `)).trim();
   if (process.stdin.isTTY) {
     const chosen = await runLiveModelPicker(provider, defaultModel);
     if (!chosen) {
-      renderer.write(color8.dim("Cancelled.\n"));
+      renderer.write(color7.dim("Cancelled.\n"));
       return void 0;
     }
     renderer.write(
       `
-  ${color8.green("\u2713")} ${color8.bold(provider.id)} / ${color8.bold(chosen.id)}
+  ${color7.green("\u2713")} ${color7.bold(provider.id)} / ${color7.bold(chosen.id)}
 
 `
     );
@@ -1818,11 +1421,11 @@ ${color8.amber("?")} Model id ${color8.dim("(or Enter to cancel)")}: `)).trim();
       if (m.tool_call) capTags.push("tools");
       if (m.reasoning) capTags.push("reason");
       if (m.modalities?.input?.includes("image")) capTags.push("vision");
-      const capStr = capTags.map((c) => theme.caps(c)).join(color8.dim(" "));
+      const capStr = capTags.map((c) => theme.caps(c)).join(color7.dim(" "));
       const isDefault = m.id === defaultModel;
-      const idLabel = isDefault ? theme.accent(color8.bold(m.id)) : m.id;
-      const suffix = isDefault ? color8.dim(" (default)") : "";
-      const num5 = color8.dim(`${num}.`.padStart(5));
+      const idLabel = isDefault ? theme.accent(color7.bold(m.id)) : m.id;
+      const suffix = isDefault ? color7.dim(" (default)") : "";
+      const num5 = color7.dim(`${num}.`.padStart(5));
       renderer.write(
         `${boxRow(`${num5} ${padVisible(idLabel, 34)} ${ctx}  ${padVisible(costCol, 11)} ${capStr}${suffix}`)}
 `
@@ -1834,36 +1437,36 @@ ${color8.amber("?")} Model id ${color8.dim("(or Enter to cancel)")}: `)).trim();
     if (offset < models.length) {
       const more = (await reader.readLine(
         `
-${color8.amber("?")} Showing ${Math.min(offset, models.length)}/${models.length} \u2014 Enter number, ${color8.dim("Enter")} for more, or ${color8.dim("q")} to quit: `
+${color7.amber("?")} Showing ${Math.min(offset, models.length)}/${models.length} \u2014 Enter number, ${color7.dim("Enter")} for more, or ${color7.dim("q")} to quit: `
       )).trim();
       if (more.toLowerCase() === "q") {
-        renderer.write(color8.dim("Cancelled.\n"));
+        renderer.write(color7.dim("Cancelled.\n"));
         return void 0;
       }
       if (!more) continue;
       return resolveModelSelection(more, models, provider, registry, renderer, reader);
     }
   }
-  const defaultHint = defaultIdxInModels >= 0 && defaultModel ? ` ${color8.dim(`[Enter = ${defaultModel}]`)}` : "";
+  const defaultHint = defaultIdxInModels >= 0 && defaultModel ? ` ${color7.dim(`[Enter = ${defaultModel}]`)}` : "";
   const answer = (await reader.readLine(
     `
-${color8.amber("?")} Select model (1-${models.length})${defaultHint} ${color8.dim("[q to quit]")}: `
+${color7.amber("?")} Select model (1-${models.length})${defaultHint} ${color7.dim("[q to quit]")}: `
   )).trim();
   if (answer.toLowerCase() === "q") {
-    renderer.write(color8.dim("Cancelled.\n"));
+    renderer.write(color7.dim("Cancelled.\n"));
     return void 0;
   }
   if (!answer) {
     if (defaultIdxInModels >= 0 && defaultModel) {
       renderer.write(
         `
-  ${color8.green("\u2713")} ${color8.bold(provider.id)} / ${color8.bold(defaultModel)}
+  ${color7.green("\u2713")} ${color7.bold(provider.id)} / ${color7.bold(defaultModel)}
 
 `
       );
       return { provider: provider.id, model: defaultModel };
     }
-    renderer.write(color8.dim("Cancelled.\n"));
+    renderer.write(color7.dim("Cancelled.\n"));
     return void 0;
   }
   return resolveModelSelection(answer, models, provider, registry, renderer, reader);
@@ -1892,14 +1495,14 @@ async function resolveModelSelection(answer, models, provider, _registry, render
     modelId = answer;
   }
   renderer.write(`
-  ${color8.green("\u2713")} ${color8.bold(provider.id)} / ${color8.bold(modelId)}
+  ${color7.green("\u2713")} ${color7.bold(provider.id)} / ${color7.bold(modelId)}
 
 `);
   return { provider: provider.id, model: modelId };
 }
 
 // src/auth-menu/add-provider.ts
-import { color as color9 } from "@wrongstack/core/utils";
+import { color as color8 } from "@wrongstack/core/utils";
 import { catalogProviderIdFor, PROVIDER_DEFINITIONS } from "@wrongstack/providers";
 
 // src/provider-id.ts
@@ -1938,12 +1541,12 @@ async function addFromCatalog(deps) {
   catalog = [...catalog, ...ownDefinitionsAsCatalog(new Set(catalog.map((p) => p.id)))];
   const saved = new Set(Object.keys(await loadProviders(deps)));
   deps.renderer.write(
-    color9.dim(
+    color8.dim(
       `  Catalog: ${catalog.length} providers. Type to filter, \u2191/\u2193 navigate, Enter to select.
 `
     )
   );
-  deps.renderer.write(`  ${color9.dim("\u25C9 already saved   \u25CB no key yet")}
+  deps.renderer.write(`  ${color8.dim("\u25C9 already saved   \u25CB no key yet")}
 
 `);
   renderOAuthLoginOptions(deps);
@@ -1952,11 +1555,11 @@ async function addFromCatalog(deps) {
   if (!chosen) {
     deps.renderer.write(
       `
-  ${color9.dim("OAuth login options:")} ${color9.dim("chatgpt")}, ${color9.dim("claude")}, or ${color9.dim("copilot")}?
+  ${color8.dim("OAuth login options: enter a registered strategy name, or q to quit.")}
 `
     );
     const answer = (await deps.reader.readLine(
-      `  ${color9.amber("?")} OAuth or q to quit ${color9.dim("[chatgpt/claude/copilot]")}: `
+      `  ${color8.amber("?")} OAuth strategy ${color8.dim("(or q)")}: `
     )).trim();
     if (answer && await runOAuthLoginChoice(deps, answer, { allowNumeric: false })) {
       return true;
@@ -1967,12 +1570,12 @@ async function addFromCatalog(deps) {
 }
 async function addKeyForCatalogProvider(deps, chosen) {
   deps.renderer.write(
-    color9.dim(`
+    color8.dim(`
   Defaults from models.dev \u2014 press Enter to keep, or type overrides.
 `)
   );
   const famRaw = (await deps.reader.readLine(
-    `  ${color9.amber("?")} Family ${color9.dim(`[${chosen.family}]`)} ${color9.dim("(q to quit)")}: `
+    `  ${color8.amber("?")} Family ${color8.dim(`[${chosen.family}]`)} ${color8.dim("(q to quit)")}: `
   )).trim();
   if (famRaw === "q") return false;
   let family = chosen.family;
@@ -1987,7 +1590,7 @@ async function addKeyForCatalogProvider(deps, chosen) {
     family = validated;
   }
   const baseRaw = (await deps.reader.readLine(
-    `  ${color9.amber("?")} Base URL ${color9.dim(`[${chosen.apiBase ?? "unset"}]`)} ${color9.dim("(q to quit)")}: `
+    `  ${color8.amber("?")} Base URL ${color8.dim(`[${chosen.apiBase ?? "unset"}]`)} ${color8.dim("(q to quit)")}: `
   )).trim();
   if (baseRaw === "q") return false;
   const baseUrl = baseRaw || chosen.apiBase;
@@ -2003,7 +1606,7 @@ async function addKeyForCatalogProvider(deps, chosen) {
     suggestedAlias = candidate;
   }
   const aliasRaw = (await deps.reader.readLine(
-    `  ${color9.amber("?")} Save as alias ${color9.dim(`[${suggestedAlias}]`)} ${color9.dim("(used with --provider <alias>)")}: `
+    `  ${color8.amber("?")} Save as alias ${color8.dim(`[${suggestedAlias}]`)} ${color8.dim("(used with --provider <alias>)")}: `
   )).trim();
   const alias = aliasRaw || suggestedAlias;
   const existing = providersNow[alias];
@@ -2030,25 +1633,25 @@ async function addKeyForCatalogProvider(deps, chosen) {
 async function addCustomProvider(deps) {
   deps.renderer.write(
     `
-${color9.bold("Custom provider")} ${color9.dim("\u2014 for local models or proxies not in the catalog.")}
+${color8.bold("Custom provider")} ${color8.dim("\u2014 for local models or proxies not in the catalog.")}
 `
   );
   const providersNow = await loadProviders(deps);
   const idRaw = (await deps.reader.readLine(
-    `  ${color9.amber("?")} Provider id ${color9.dim('(e.g. "local-llama", "my-proxy"; blank = auto custom-N, q to quit)')}: `
+    `  ${color8.amber("?")} Provider id ${color8.dim('(e.g. "local-llama", "my-proxy"; blank = auto custom-N, q to quit)')}: `
   )).trim();
   if (idRaw === "q") return false;
   let type = idRaw;
   if (!type) {
     type = nextCustomProviderId(Object.keys(providersNow));
-    deps.renderer.write(`  ${color9.dim("Using generated id:")} ${color9.bold(type)}
+    deps.renderer.write(`  ${color8.dim("Using generated id:")} ${color8.bold(type)}
 `);
   } else if (providersNow[type]) {
     deps.renderer.writeWarning(`"${type}" already exists. Pick it from the main menu to edit.`);
     return false;
   }
   const familyRaw = (await deps.reader.readLine(
-    `  ${color9.amber("?")} Wire family ${color9.dim("(anthropic | openai | openai-compatible | google)")} ${color9.dim("(q to quit)")}: `
+    `  ${color8.amber("?")} Wire family ${color8.dim("(anthropic | openai | openai-compatible | google)")} ${color8.dim("(q to quit)")}: `
   )).trim();
   if (familyRaw === "q") return false;
   const family = validateFamily(familyRaw);
@@ -2057,14 +1660,14 @@ ${color9.bold("Custom provider")} ${color9.dim("\u2014 for local models or proxi
     return false;
   }
   const baseUrl = (await deps.reader.readLine(
-    `  ${color9.amber("?")} Base URL ${color9.dim("(e.g. http://localhost:11434/v1, optional)")}: `
+    `  ${color8.amber("?")} Base URL ${color8.dim("(e.g. http://localhost:11434/v1, optional)")}: `
   )).trim();
   const modelsRaw = (await deps.reader.readLine(
-    `  ${color9.amber("?")} Model ids ${color9.dim("(comma-separated, optional)")}: `
+    `  ${color8.amber("?")} Model ids ${color8.dim("(comma-separated, optional)")}: `
   )).trim();
   const models = modelsRaw ? modelsRaw.split(",").map((s) => s.trim()).filter(Boolean) : void 0;
   const envVarsRaw = (await deps.reader.readLine(
-    `  ${color9.amber("?")} Env var names ${color9.dim("(comma-separated, optional)")}: `
+    `  ${color8.amber("?")} Env var names ${color8.dim("(comma-separated, optional)")}: `
   )).trim();
   const envVars = envVarsRaw ? envVarsRaw.split(",").map((s) => s.trim()).filter(Boolean) : void 0;
   return addKeyForProvider(type, deps, {
@@ -2076,17 +1679,17 @@ ${color9.bold("Custom provider")} ${color9.dim("\u2014 for local models or proxi
   });
 }
 async function addManualEntry(deps) {
-  const pid = (await deps.reader.readLine(`  ${color9.amber("?")} Provider id ${color9.dim("[q to quit]")}: `)).trim();
+  const pid = (await deps.reader.readLine(`  ${color8.amber("?")} Provider id ${color8.dim("[q to quit]")}: `)).trim();
   if (!pid || pid === "q") return false;
   const famRaw = (await deps.reader.readLine(
-    `  ${color9.amber("?")} Family ${color9.dim("(anthropic/openai/openai-compatible/google)")}: `
+    `  ${color8.amber("?")} Family ${color8.dim("(anthropic/openai/openai-compatible/google)")}: `
   )).trim();
   const family = validateFamily(famRaw);
   if (!family) {
     deps.renderer.writeError(`Invalid family: "${famRaw}"`);
     return false;
   }
-  const baseUrl = (await deps.reader.readLine(`  ${color9.amber("?")} Base URL ${color9.dim("(optional)")}: `)).trim();
+  const baseUrl = (await deps.reader.readLine(`  ${color8.amber("?")} Base URL ${color8.dim("(optional)")}: `)).trim();
   return addKeyForProvider(pid, deps, {
     type: pid,
     family,
@@ -2129,10 +1732,10 @@ async function addKeyForProvider(providerId, deps, template) {
     deps.profileConfigPath
   );
   deps.renderer.write(
-    `  ${color9.green("\u2713")} Saved ${color9.bold(providerId)}/${color9.bold(label)}.
+    `  ${color8.green("\u2713")} Saved ${color8.bold(providerId)}/${color8.bold(label)}.
 `
   );
-  deps.renderer.write(color9.dim(`  Launch: wstack --provider ${providerId} "<task>"
+  deps.renderer.write(color8.dim(`  Launch: wstack --provider ${providerId} "<task>"
 `));
   try {
     await adoptAsDefaultIfUnset(deps, providerId, template);
@@ -2163,7 +1766,7 @@ async function adoptAsDefaultIfUnset(deps, providerId, template) {
   );
   if (adopted) {
     deps.renderer.write(
-      `  ${color9.green("\u2713")} Set ${color9.bold(providerId)}/${color9.bold(modelId)} as the default.
+      `  ${color8.green("\u2713")} Set ${color8.bold(providerId)}/${color8.bold(modelId)} as the default.
 `
     );
   }
@@ -2171,7 +1774,7 @@ async function adoptAsDefaultIfUnset(deps, providerId, template) {
 async function promptForLabel(deps, usedLabels) {
   const defaultLabel = suggestLabel(usedLabels);
   const labelRaw = (await deps.reader.readLine(
-    `  ${color9.amber("?")} Label for this key ${color9.dim(`[${defaultLabel}]`)}: `
+    `  ${color8.amber("?")} Label for this key ${color8.dim(`[${defaultLabel}]`)}: `
   )).trim();
   const label = labelRaw || defaultLabel;
   if (usedLabels.has(label)) {
@@ -2182,7 +1785,6 @@ async function promptForLabel(deps, usedLabels) {
 }
 
 export {
-  runClaudeOAuthLogin,
   loadProviders,
   renderProviderHeader,
   renderActions,
@@ -2190,7 +1792,8 @@ export {
   readKeyInput,
   confirm,
   validateFamily,
-  runCopilotOAuthLogin,
+  providerAuthStrategiesFor,
+  runProviderAuthLogin,
   LOCAL_LLM_PRESETS,
   runAuthLocal,
   resolveOAuthKind,
@@ -2210,4 +1813,4 @@ export {
   addCustomProvider,
   addKeyForProvider
 };
-//# sourceMappingURL=chunk-MNQQ4ZNF.js.map
+//# sourceMappingURL=chunk-ONOT5OJ2.js.map