@wrongstack/cli 1.0.1 → 1.0.3

package/dist/chunk-SIGUWXAA.js

@@ -0,0 +1,43 @@
+
+// src/auth-menu/openai-codex-oauth.ts
+import { color } from "@wrongstack/core/utils";
+import {
+  buildCodexAuthorizeUrl,
+  CODEX_BASE_URL,
+  CODEX_FALLBACK_REDIRECT_PORT,
+  CODEX_PROVIDER_ID,
+  CODEX_REDIRECT_HOST,
+  CODEX_REDIRECT_PATH,
+  CODEX_REDIRECT_PORT,
+  CODEX_SCOPE,
+  codexRedirectUri,
+  createState,
+  exchangeCodexAuthorizationCode,
+  extractAccountId,
+  generatePkce,
+  parseAuthorizationInput,
+  refreshCodexTokens,
+  resolveCodexModels
+} from "@wrongstack/providers/oauth";
+import {
+  CODEX_BASE_URL as CODEX_BASE_URL2,
+  CODEX_CATALOG_FAMILIES,
+  CODEX_PROVIDER_ID as CODEX_PROVIDER_ID2,
+  extractAccountId as extractAccountId2,
+  FALLBACK_CODEX_MODELS,
+  fallbackCodexModelIds,
+  fallbackCodexProviderModels,
+  fetchCodexModels,
+  filterCurrentCodexModelIds,
+  generatePkce as generatePkce2,
+  isCodexCatalogModel,
+  parseAuthorizationInput as parseAuthorizationInput2,
+  resolveCodexModels as resolveCodexModels2
+} from "@wrongstack/providers/oauth";
+
+export {
+  fallbackCodexProviderModels,
+  filterCurrentCodexModelIds,
+  isCodexCatalogModel
+};
+//# sourceMappingURL=chunk-SIGUWXAA.js.map

package/dist/{chunk-TEBMCYZN.js → chunk-SIS37L3W.js}

@@ -13,6 +13,10 @@ import {
   resolvePluginTarget,
   verifyPluginTrust
 } from "@wrongstack/core/plugin";
+import { createHash } from "node:crypto";
+import { readdir, stat } from "node:fs/promises";
+import { basename, dirname, relative, sep } from "node:path";
+import { readFile } from "node:fs/promises";
 function resolveExternalPluginTrustMode(raw) {
   if (raw === false) return "off";
   if (raw === "required") return "required";
@@ -228,7 +232,7 @@ async function gateExternalPluginTrust(args) {
   if (!store) return { ok: true, pinned: false };
   let integrity;
   try {
-    integrity = await hashFileContents(entryPath);
+    integrity = await hashPluginClosure(entryPath);
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     if (mode === "required") {
@@ -271,6 +275,58 @@ async function gateExternalPluginTrust(args) {
   log.error(`[plugins] REFUSING external plugin "${label}" \u2014 ${changedMessage}`);
   return { ok: false, pinned: false };
 }
+var CLOSURE_HASH_LIMIT = 2e3;
+var CLOSURE_FILE_LIMIT = 16 * 1024 * 1024;
+async function hashPluginClosure(entryPath) {
+  const dir = dirname(entryPath);
+  let dirStat;
+  try {
+    dirStat = await stat(dir);
+  } catch {
+    return hashFileContents(entryPath);
+  }
+  if (!dirStat.isDirectory()) return hashFileContents(entryPath);
+  const entryBase = basename(entryPath);
+  const files = [];
+  async function walk(d) {
+    if (files.length > CLOSURE_HASH_LIMIT) return;
+    const entries = await readdir(d, { withFileTypes: true }).catch(() => []);
+    for (const e of entries) {
+      const full = d + sep + e.name;
+      if (e.isDirectory()) {
+        if (e.name === "node_modules" || e.name.startsWith(".")) continue;
+        await walk(full);
+      } else if (e.isFile()) {
+        files.push(full);
+      }
+    }
+  }
+  await walk(dir);
+  files.sort();
+  const manifest = [];
+  for (const full of files) {
+    const rel = relative(dir, full).split(sep).join("/");
+    let bytes;
+    try {
+      const st = await stat(full);
+      if (!st.isFile() || st.size > CLOSURE_FILE_LIMIT) continue;
+      bytes = await readFile(full);
+    } catch {
+      continue;
+    }
+    const sha = createHash("sha256").update(bytes).digest("hex");
+    manifest.push(`${rel}\0${bytes.length}\0${sha}`);
+  }
+  if (!manifest.some((line) => line.startsWith(`${entryBase}\0`))) {
+    const entryBytes = await readFile(entryPath);
+    const entrySha = createHash("sha256").update(entryBytes).digest("hex");
+    manifest.push(`${entryBase}\0${entryBytes.length}\0${entrySha}`);
+  }
+  manifest.sort();
+  const outer = createHash("sha256");
+  outer.update(manifest.join("\n"));
+  return outer.digest("hex");
+}
 
 // src/plugin-management.ts
 import { execFile } from "node:child_process";
@@ -1035,4 +1091,4 @@ export {
   PLUGIN_AUDIT_ENTRIES,
   runPluginManagementCommand
 };
-//# sourceMappingURL=chunk-TEBMCYZN.js.map
+//# sourceMappingURL=chunk-SIS37L3W.js.map

package/dist/{chunk-5IA5337I.js → chunk-U6KCWRMC.js}

@@ -4,7 +4,7 @@ import {
 import {
   PLUGIN_AUDIT_ENTRIES,
   loadExternalPlugins
-} from "./chunk-TEBMCYZN.js";
+} from "./chunk-SIS37L3W.js";
 
 // src/wiring/plugins.ts
 import { join } from "node:path";
@@ -98,6 +98,7 @@ async function setupPlugins(params) {
     events,
     toolRegistry,
     providerRegistry,
+    providerAuthRegistry,
     slashCommandRegistry,
     mcpRegistry,
     log,
@@ -207,6 +208,7 @@ async function setupPlugins(params) {
       pipelines,
       toolRegistry,
       providerRegistry,
+      providerAuthRegistry,
       slashCommandRegistry,
       mcpRegistry,
       config: pluginConfig,
@@ -261,4 +263,4 @@ export {
   BUILTIN_PLUGIN_FACTORIES,
   setupPlugins
 };
-//# sourceMappingURL=chunk-5IA5337I.js.map
+//# sourceMappingURL=chunk-U6KCWRMC.js.map

package/dist/{cli-context-7X3M6U73.js → cli-context-Q6QP534K.js}

@@ -19,14 +19,14 @@ import {
 } from "./chunk-EWKESL4L.js";
 import {
   subcommands
-} from "./chunk-D2VCUN7M.js";
+} from "./chunk-IUEKNHPT.js";
 import {
   renderDeepHelp,
   renderFocusedHelp
 } from "./chunk-MXEJEYT7.js";
 import {
   handleHelpVersionShortCircuit
-} from "./chunk-KHWDTNBZ.js";
+} from "./chunk-4NHD5OXJ.js";
 import {
   DEFAULT_PORT
 } from "./chunk-C2E24IXZ.js";
@@ -34,7 +34,7 @@ import "./chunk-HXJYHAR4.js";
 import "./chunk-Q5GTM25S.js";
 import {
   discoverAndMergeProviders
-} from "./chunk-52C7PD2H.js";
+} from "./chunk-D5GB5MHA.js";
 import {
   applyNodeEnvDefault,
   applySessionShellDefault,
@@ -55,7 +55,7 @@ import {
   runPicker,
   saveToGlobalConfig,
   theme
-} from "./chunk-MNQQ4ZNF.js";
+} from "./chunk-ONOT5OJ2.js";
 import "./chunk-2VMJ3E5Z.js";
 import "./chunk-B4JLSXZB.js";
 import {
@@ -68,7 +68,7 @@ import {
 import {
   parseArgs
 } from "./chunk-E6RFXHWD.js";
-import "./chunk-TNK6237M.js";
+import "./chunk-DAKVBMD4.js";
 import {
   mutateConfigProviders,
   normalizeKeys,
@@ -84,7 +84,7 @@ import "./chunk-YLQEGYV4.js";
 // src/cli-context.ts
 import { TOKENS as TOKENS3 } from "@wrongstack/core/kernel";
 import { writeErr as writeErr2 } from "@wrongstack/core/utils";
-import { setOAuthTokenPersister } from "@wrongstack/providers";
+import { setOAuthTokenPersister, setProviderModelPersister } from "@wrongstack/providers";
 
 // src/boot/container-wiring.ts
 import { DefaultPathResolver } from "@wrongstack/core/infrastructure";
@@ -3095,6 +3095,17 @@ async function initializeCli(argv) {
     }).catch(() => {
     });
   });
+  setProviderModelPersister((providerId, models) => {
+    if (models.length === 0) return;
+    void mutateConfigProviders(profileConfigPath, vault, (all) => {
+      const p = all[providerId];
+      if (!p) return;
+      const live = models.map((m) => m.id);
+      if (p.models?.length === live.length && p.models.every((id, i) => id === live[i])) return;
+      p.models = live;
+    }).catch(() => {
+    });
+  });
   const { events, container } = wireContainer({
     config,
     wpaths,
@@ -3117,4 +3128,4 @@ async function initializeCli(argv) {
 export {
   initializeCli
 };
-//# sourceMappingURL=cli-context-7X3M6U73.js.map
+//# sourceMappingURL=cli-context-Q6QP534K.js.map