@wrongstack/cli 1.0.1 → 1.0.3

package/dist/wiring/provider.d.ts

@@ -1,10 +1,11 @@
-import { ProviderRegistry } from '@wrongstack/core/registry';
+import { ProviderAuthRegistry, ProviderRegistry } from '@wrongstack/core/registry';
 import type { ResolvedProvider } from '@wrongstack/core/types';
 import { type Config, type Logger, type ModelsRegistry } from '@wrongstack/core/types';
 interface ProviderSetupResult {
     resolvedProvider: ResolvedProvider | undefined;
     provider: ReturnType<ProviderRegistry['create']>;
     providerRegistry: ProviderRegistry;
+    providerAuthRegistry: ProviderAuthRegistry;
 }
 export declare function setupProvider(params: {
     config: Config;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/cli",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "license": "MIT",
   "description": "WrongStack CLI — terminal AI coding agent with provider catalog from models.dev. Provides `wrongstack` and `wstack` binaries.",
   "keywords": [
@@ -41,36 +41,36 @@
     "data"
   ],
   "dependencies": {
-    "@wrongstack/acp": "1.0.1",
-    "@wrongstack/bench": "1.0.1",
-    "@wrongstack/core": "1.0.1",
-    "@wrongstack/primitives": "1.0.1",
-    "@wrongstack/kanban": "1.0.1",
-    "@wrongstack/mcp": "1.0.1",
-    "@wrongstack/persistence": "1.0.1",
-    "@wrongstack/plug-lsp": "1.0.1",
-    "@wrongstack/plugins": "1.0.1",
-    "@wrongstack/providers": "1.0.1",
-    "@wrongstack/requirement-intake": "1.0.1",
-    "@wrongstack/runtime": "1.0.1",
-    "@wrongstack/sage": "1.0.1",
-    "@wrongstack/sdd": "1.0.1",
-    "@wrongstack/security-scanner": "1.0.1",
-    "@wrongstack/simpleui": "1.0.1",
-    "@wrongstack/techstack": "1.0.1",
-    "@wrongstack/telegram": "1.0.1",
-    "@wrongstack/tools": "1.0.1",
-    "@wrongstack/tui": "1.0.1",
-    "@wrongstack/vector-memory": "1.0.0",
-    "@wrongstack/webui": "1.0.1",
-    "@wrongstack/webui-hq": "1.0.1",
-    "@wrongstack/webui-protocol": "1.0.1",
-    "@wrongstack/wrongtrace": "1.0.1",
-    "@wrongstack/webui-server": "1.0.1",
+    "@wrongstack/acp": "1.0.3",
+    "@wrongstack/bench": "1.0.3",
+    "@wrongstack/core": "1.0.3",
+    "@wrongstack/primitives": "1.0.3",
+    "@wrongstack/kanban": "1.0.3",
+    "@wrongstack/mcp": "1.0.3",
+    "@wrongstack/persistence": "1.0.3",
+    "@wrongstack/plug-lsp": "1.0.3",
+    "@wrongstack/plugins": "1.0.3",
+    "@wrongstack/providers": "1.0.3",
+    "@wrongstack/requirement-intake": "1.0.3",
+    "@wrongstack/runtime": "1.0.3",
+    "@wrongstack/sage": "1.0.3",
+    "@wrongstack/sdd": "1.0.3",
+    "@wrongstack/security-scanner": "1.0.3",
+    "@wrongstack/simpleui": "1.0.3",
+    "@wrongstack/techstack": "1.0.3",
+    "@wrongstack/telegram": "1.0.3",
+    "@wrongstack/tools": "1.0.3",
+    "@wrongstack/tui": "1.0.3",
+    "@wrongstack/vector-memory": "1.0.3",
+    "@wrongstack/webui": "1.0.3",
+    "@wrongstack/webui-hq": "1.0.3",
+    "@wrongstack/webui-protocol": "1.0.3",
+    "@wrongstack/wrongtrace": "1.0.3",
+    "@wrongstack/webui-server": "1.0.3",
     "ws": "^8.21.3"
   },
   "optionalDependencies": {
-    "@wrongstack/desktop": "1.0.1"
+    "@wrongstack/desktop": "1.0.3"
   },
   "devDependencies": {
     "@types/node": "^26.2.0",
@@ -83,7 +83,7 @@
   },
   "scripts": {
     "build": "node ../../scripts/build-package.mjs",
-    "typecheck": "pnpm --filter @wrongstack/tools run build && pnpm --filter @wrongstack/tui run build && tsc --noEmit && tsc --noEmit -p tsconfig.test.json",
+    "typecheck": "pnpm --filter @wrongstack/tools run build && pnpm --filter @wrongstack/tui run build && pnpm --filter @wrongstack/webui-server run build && tsc --noEmit && tsc --noEmit -p tsconfig.test.json",
     "test": "vitest run",
     "test:hqdash": "vitest run --config vitest.hqdash.config.ts",
     "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\""

package/dist/auto-discover-providers-VQU3IZMR.js

@@ -1,7 +0,0 @@
-import {
-  discoverAndMergeProviders
-} from "./chunk-52C7PD2H.js";
-export {
-  discoverAndMergeProviders
-};
-//# sourceMappingURL=auto-discover-providers-VQU3IZMR.js.map

package/dist/chunk-52C7PD2H.js

@@ -1,61 +0,0 @@
-
-// src/boot/auto-discover-providers.ts
-import * as fs from "node:fs/promises";
-import * as path from "node:path";
-import { discoverOpenAICompatibleModels, resolveDiscoveryTargets } from "@wrongstack/providers";
-async function readCache(file) {
-  try {
-    return JSON.parse(await fs.readFile(file, "utf8"));
-  } catch {
-    return {};
-  }
-}
-async function discoverAndMergeProviders(opts) {
-  const targets = resolveDiscoveryTargets(opts.config);
-  if (targets.length === 0) return;
-  const cacheFile = path.join(opts.cacheDir, "discovered-models-cache.json");
-  const cache = await readCache(cacheFile);
-  let cacheDirty = false;
-  await Promise.all(
-    targets.map(async ({ id, cfg, baseUrl, apiKey, cacheKey }) => {
-      const provider = await discoverOpenAICompatibleModels(id, {
-        baseUrl,
-        apiKey,
-        headers: cfg.headers,
-        providerName: id,
-        fetchImpl: opts.fetchImpl
-      });
-      if (provider) {
-        cache[cacheKey] = { fetchedAt: (/* @__PURE__ */ new Date()).toISOString(), provider };
-        cacheDirty = true;
-        opts.registry.mergeOverlay({ [id]: provider });
-        opts.logger?.info(
-          `auto-discovered ${Object.keys(provider.models).length} models for "${id}" from ${baseUrl}`
-        );
-        return;
-      }
-      const cached = cache[cacheKey];
-      if (cached) {
-        opts.registry.mergeOverlay({ [id]: cached.provider });
-        opts.logger?.warn(
-          `auto-discovery for "${id}" failed; using ${Object.keys(cached.provider.models).length} cached models from ${cached.fetchedAt}`
-        );
-      } else {
-        opts.logger?.warn(
-          `auto-discovery for "${id}" failed and no cache available (server at ${baseUrl} unreachable?)`
-        );
-      }
-    })
-  );
-  if (cacheDirty) {
-    try {
-      await fs.writeFile(cacheFile, JSON.stringify(cache), "utf8");
-    } catch {
-    }
-  }
-}
-
-export {
-  discoverAndMergeProviders
-};
-//# sourceMappingURL=chunk-52C7PD2H.js.map

package/dist/chunk-TNK6237M.js

@@ -1,262 +0,0 @@
-import {
-  mutateConfigProviders,
-  normalizeKeys,
-  nowIso,
-  writeKeysBack
-} from "./chunk-DR2OXU46.js";
-
-// src/auth-menu/openai-codex-oauth.ts
-import { color } from "@wrongstack/core/utils";
-import {
-  buildCodexAuthorizeUrl,
-  CODEX_BASE_URL,
-  CODEX_FALLBACK_REDIRECT_PORT,
-  CODEX_PROVIDER_ID,
-  CODEX_REDIRECT_HOST,
-  CODEX_REDIRECT_PATH,
-  CODEX_REDIRECT_PORT,
-  CODEX_SCOPE,
-  codexRedirectUri,
-  createState,
-  exchangeCodexAuthorizationCode,
-  extractAccountId,
-  generatePkce,
-  parseAuthorizationInput,
-  refreshCodexTokens,
-  resolveCodexModels
-} from "@wrongstack/providers/oauth";
-
-// src/auth-menu/loopback-server.ts
-import { spawn } from "node:child_process";
-import {
-  startLoopbackServer as startSharedLoopbackServer
-} from "@wrongstack/providers/oauth";
-import { callbackHtml } from "@wrongstack/providers/oauth";
-var URL_METACHAR_REGEX = /[&|;<>(){}^"'`%\n\r\0]/;
-function isSafeBrowserUrl(url) {
-  if (URL_METACHAR_REGEX.test(url)) return false;
-  try {
-    const parsed = new URL(url);
-    return parsed.protocol === "http:" || parsed.protocol === "https:";
-  } catch {
-    return false;
-  }
-}
-function openBrowser(url) {
-  if (!isSafeBrowserUrl(url)) {
-    return;
-  }
-  try {
-    const platform = process.platform;
-    const { command, args } = platform === "win32" ? { command: "cmd", args: ["/c", "start", "", url] } : platform === "darwin" ? { command: "open", args: [url] } : { command: "xdg-open", args: [url] };
-    const child = spawn(command, args, { stdio: "ignore", windowsHide: true });
-    child.on("error", () => {
-    });
-    child.unref();
-  } catch {
-  }
-}
-function startLoopbackServer(expectedState, ports, signal, callbackPath = "/auth/callback", redirectHost = "127.0.0.1") {
-  const [primary = 1455, ...fallbackPorts] = ports;
-  return startSharedLoopbackServer({
-    port: primary,
-    fallbackPorts: [...fallbackPorts],
-    host: redirectHost,
-    path: callbackPath,
-    expectedState,
-    ...signal ? { signal } : {}
-  });
-}
-
-// src/auth-menu/openai-codex-oauth.ts
-import {
-  CODEX_BASE_URL as CODEX_BASE_URL2,
-  CODEX_CATALOG_FAMILIES,
-  CODEX_PROVIDER_ID as CODEX_PROVIDER_ID2,
-  extractAccountId as extractAccountId2,
-  FALLBACK_CODEX_MODELS,
-  fallbackCodexModelIds,
-  fallbackCodexProviderModels,
-  fetchCodexModels,
-  filterCurrentCodexModelIds,
-  generatePkce as generatePkce2,
-  isCodexCatalogModel,
-  parseAuthorizationInput as parseAuthorizationInput2,
-  resolveCodexModels as resolveCodexModels2
-} from "@wrongstack/providers/oauth";
-var buildAuthorizeUrl = buildCodexAuthorizeUrl;
-var exchangeAuthorizationCode = exchangeCodexAuthorizationCode;
-function startLoopbackServer2(expectedState, signal) {
-  return startLoopbackServer(
-    expectedState,
-    [CODEX_REDIRECT_PORT, CODEX_FALLBACK_REDIRECT_PORT],
-    signal,
-    CODEX_REDIRECT_PATH,
-    CODEX_REDIRECT_HOST
-  );
-}
-var redirectUri = codexRedirectUri;
-async function runCodexOAuthLogin(deps, opts = {}) {
-  const providerId = opts.providerId ?? CODEX_PROVIDER_ID;
-  const pkce = generatePkce();
-  const state = createState();
-  const ac = new AbortController();
-  let sigintCount = 0;
-  const onSig = () => {
-    sigintCount += 1;
-    if (sigintCount === 1) {
-      deps.renderer.write(
-        color.dim("\n  Cancelling sign-in\u2026 (press Ctrl+C again to force-quit)\n")
-      );
-      ac.abort();
-    } else {
-      process.exit(130);
-    }
-  };
-  const external = opts.signal;
-  const onExternalAbort = () => ac.abort();
-  if (external) {
-    if (external.aborted) ac.abort();
-    else external.addEventListener("abort", onExternalAbort, { once: true });
-  } else {
-    process.on("SIGINT", onSig);
-  }
-  const server = await startLoopbackServer2(state, ac.signal);
-  const authorizeUrl = buildAuthorizeUrl(pkce.challenge, state, server.port);
-  const osc8 = (url) => `\x1B]8;;${url}\x1B\\${url}\x1B]8;;\x1B\\`;
-  deps.renderer.write(
-    color.bold(`
-  Sign in with ChatGPT \u2014 ${color.cyan(providerId)}
-`) + color.dim("  Uses your ChatGPT Plus/Pro/Team subscription (not an API key).\n") + color.amber("  \u26A0 Using a subscription outside the official Codex client may violate\n") + color.amber("    OpenAI\u2019s Terms \u2014 your account could be rate-limited or banned.\n") + color.dim("    Sanctioned programmatic use = an API key: ") + color.bold("wstack auth openai") + color.dim("\n\n") + color.bold(`  ${"\u2500".repeat(56)}
-`) + color.bold("  Open this URL in your browser to sign in:\n") + color.cyan(`  ${osc8(authorizeUrl)}
-`) + color.bold(`  ${"\u2500".repeat(56)}
-
-`)
-  );
-  if (server.bound) {
-    openBrowser(authorizeUrl);
-    deps.renderer.write(
-      color.dim("  A browser window should open. Waiting for you to finish signing in...\n") + color.dim(`  (Listening on ${redirectUri(server.port)} \u2014 press Ctrl+C to cancel.)
-`)
-    );
-  } else {
-    deps.renderer.write(
-      color.amber(
-        "  \u26A0 Could not start the local callback listener (ports 1455 and 1457 in use).\n"
-      ) + color.dim("  After signing in, copy the full redirect URL from your browser\n") + color.dim(
-        "  (it starts with http://localhost:1455/auth/callback or :1457) and paste it below.\n"
-      )
-    );
-  }
-  let code;
-  try {
-    if (server.bound) {
-      const callback = await server.waitForCode();
-      if (ac.signal.aborted) {
-        deps.renderer.write(color.dim("  Cancelled.\n"));
-        return 1;
-      }
-      if (callback) code = callback.code;
-    }
-    if (!code) {
-      const input = (await deps.reader.readLine(
-        `
-  ${color.amber("?")} Paste the redirect URL or code ${color.dim("(or q to cancel)")}: `
-      )).trim();
-      if (input.toLowerCase() === "q" || input === "") {
-        deps.renderer.write(color.dim("  Cancelled.\n"));
-        return 1;
-      }
-      const parsed = parseAuthorizationInput(input);
-      if (parsed.state && parsed.state !== state) {
-        deps.renderer.writeError("  State mismatch \u2014 please restart the login flow.");
-        return 1;
-      }
-      code = parsed.code;
-    }
-    if (!code) {
-      deps.renderer.writeError("  No authorization code received.");
-      return 1;
-    }
-    deps.renderer.write(color.dim("\n  Exchanging authorization code for tokens...\n"));
-    const tokens = await exchangeAuthorizationCode(code, pkce.verifier, ac.signal, server.port);
-    const accountId = extractAccountId(tokens.access) ?? (tokens.idToken ? extractAccountId(tokens.idToken) : null);
-    if (!accountId) {
-      deps.renderer.writeError(
-        "  Signed in, but the token has no ChatGPT account id.\n  This account may not have Codex/ChatGPT subscription access."
-      );
-      return 1;
-    }
-    deps.renderer.write(color.dim("  Fetching available models...\n"));
-    const models = await resolveCodexModels(
-      deps.modelsRegistry,
-      tokens.access,
-      CODEX_BASE_URL,
-      ac.signal
-    );
-    const saved = await saveCodexTokens(deps, providerId, tokens, accountId, models);
-    if (!saved) return 1;
-    const modelHint = models[0] ?? "gpt-5.5";
-    deps.renderer.write(color.green("\n  \u2713 Signed in with ChatGPT!\n"));
-    deps.renderer.writeInfo(
-      `  Saved as provider ${color.bold(providerId)}${models.length > 0 ? ` (${models.length} models)` : ""}.
-  Use: ${color.bold(`wstack --provider ${providerId} --model ${modelHint}`)} "<task>"
-` + color.dim("  Tokens refresh automatically before they expire.\n")
-    );
-    return 0;
-  } catch (err) {
-    const msg = err instanceof DOMException && err.name === "AbortError" ? "Login cancelled." : err.message;
-    deps.renderer.writeError(`  Login failed: ${msg}`);
-    return 1;
-  } finally {
-    server.close();
-    if (external) external.removeEventListener("abort", onExternalAbort);
-    else process.off("SIGINT", onSig);
-  }
-}
-async function saveCodexTokens(deps, providerId, tokens, accountId, models) {
-  const entry = {
-    label: "oauth-default",
-    apiKey: tokens.access,
-    createdAt: nowIso(),
-    authMethod: "oauth",
-    expiresAt: new Date(tokens.expires).toISOString(),
-    refreshToken: tokens.refresh,
-    tokenType: "bearer",
-    scope: CODEX_SCOPE,
-    accountId
-  };
-  try {
-    await mutateConfigProviders(
-      deps.profileConfigPath,
-      deps.vault,
-      (all) => {
-        const existing = all[providerId];
-        const p = existing ? { ...existing } : { type: providerId };
-        p.family = "openai-codex";
-        if (!p.baseUrl) p.baseUrl = CODEX_BASE_URL;
-        p.models = [...models];
-        const keys = normalizeKeys(p).filter((k) => k.label !== entry.label);
-        keys.push(entry);
-        writeKeysBack(p, keys);
-        p.activeKey = entry.label;
-        all[providerId] = p;
-      },
-      deps.profileConfigPath
-    );
-    return true;
-  } catch (err) {
-    deps.renderer.writeError(`  Failed to save tokens: ${err.message}`);
-    return false;
-  }
-}
-
-export {
-  openBrowser,
-  startLoopbackServer,
-  runCodexOAuthLogin,
-  fallbackCodexProviderModels,
-  filterCurrentCodexModelIds,
-  isCodexCatalogModel
-};
-//# sourceMappingURL=chunk-TNK6237M.js.map