@wrongstack/cli 1.0.24 → 1.0.27

package/dist/boot-provider-selection.d.ts

@@ -0,0 +1,67 @@
+import type { Config, ModelsRegistry } from '@wrongstack/core/types';
+import type { ReadlineInputReader } from './input-reader.js';
+import type { TerminalRenderer } from './renderer.js';
+/**
+ * Resolve the bundled overlay `providers.json`. It ships at `<pkg>/data/` —
+ * a sibling of both `src/` (dev) and `dist/` (published) — so `../data/…`
+ * relative to this module resolves in both. Returns undefined if anything
+ * about the resolution looks off (the overlay is optional).
+ */
+export declare function resolveBundledOverlayFile(): string | undefined;
+export interface SavedDefaultStatus {
+    ok: boolean;
+    reason?: string;
+}
+export declare function validateSavedProviderModel(config: Config, modelsRegistry: ModelsRegistry): Promise<SavedDefaultStatus>;
+/**
+ * Resolve a usable `{ provider, model }` from saved config when the active
+ * pointers are unset — the non-interactive (WebUI / --no-interactive) analogue
+ * of the TUI's interactive picker. Mirrors the standalone WebUI's auto-select
+ * (packages/webui-server start-webui.ts) so a config whose only entry is a
+ * custom provider still boots instead of erroring out. Prefers an already-set
+ * `config.provider`, otherwise the first saved provider; the model comes from
+ * the provider's saved `models` allowlist, falling back to the catalog's first
+ * model. Returns undefined when no provider yields a concrete model.
+ */
+export declare function autoSelectSavedProvider(config: Config, modelsRegistry: ModelsRegistry): Promise<{
+    provider: string;
+    model: string;
+} | undefined>;
+export declare function resolveBundledSkillsDir(): string | undefined;
+export declare function resolveBundledPromptsDir(): string | undefined;
+/**
+ * Determine whether a directory is the user's home directory. Used by the
+ * startup guard to refuse launching wstack in `~` — where it would risk
+ * creating a `.git` repo at the top of the user's filesystem.
+ *
+ * Resolves both paths so trailing slashes and relative segments are
+ * normalized before the comparison. Case is compared as-is (matches
+ * `os.homedir()` and `process.cwd()` output on every platform). Symlinks
+ * are NOT followed: the common case (`cwd === os.homedir()` literally) is
+ * what this guard targets.
+ *
+ * Exported for testing — the call site in {@link boot} performs the actual
+ * warning + exit.
+ */
+export declare function isHomeDirectory(cwd: string, userHome: string): boolean;
+/**
+ * Determine whether the first-run YOLO disclosure notice should be printed
+ * to stderr. Exported for testing.
+ *
+ * @param lastChoices  Saved launch preferences from config (undefined = first run)
+ * @param yoloPinned   Explicit --yolo/--no-yolo flag (undefined = not provided)
+ * @param yolo         Resolved YOLO state
+ */
+export declare function shouldPrintYoloNotice(lastChoices: unknown, yoloPinned: boolean | undefined, yolo: boolean): boolean;
+/**
+ * Check whether the current working directory has a `.git` repository.
+ * If not, prompt the user before the path resolver walks up to a parent.
+ * When the parent directory contains a `.git`, also inform the user so
+ * they know why the project root was resolved to a different directory.
+ */
+export declare function checkGitInCwd(opts: {
+    cwd: string;
+    renderer: TerminalRenderer;
+    reader: ReadlineInputReader;
+}): Promise<void>;
+//# sourceMappingURL=boot-provider-selection.d.ts.map

package/dist/boot.d.ts

@@ -1,23 +1,10 @@
+export { autoSelectSavedProvider, isHomeDirectory, shouldPrintYoloNotice, } from './boot-provider-selection.js';
 import { DefaultLogger } from '@wrongstack/core/infrastructure';
 import type { Config, ModelsRegistry, SecretVault } from '@wrongstack/core/types';
 import { type WstackPaths } from '@wrongstack/core/utils';
 import { ReadlineInputReader } from './input-reader.js';
 import { TerminalRenderer } from './renderer.js';
 import type { UpdateInfo } from './update-check.js';
-/**
- * Resolve a usable `{ provider, model }` from saved config when the active
- * pointers are unset — the non-interactive (WebUI / --no-interactive) analogue
- * of the TUI's interactive picker. Mirrors the standalone WebUI's auto-select
- * (packages/webui-server start-webui.ts) so a config whose only entry is a
- * custom provider still boots instead of erroring out. Prefers an already-set
- * `config.provider`, otherwise the first saved provider; the model comes from
- * the provider's saved `models` allowlist, falling back to the catalog's first
- * model. Returns undefined when no provider yields a concrete model.
- */
-export declare function autoSelectSavedProvider(config: Config, modelsRegistry: ModelsRegistry): Promise<{
-    provider: string;
-    model: string;
-} | undefined>;
 export interface BootContext {
     config: Config;
     vault: SecretVault;
@@ -36,30 +23,6 @@ export interface BootContext {
     /** True when running in --webui/--no-interactive mode but provider/model not configured */
     needsSetup?: boolean | undefined;
 }
-/**
- * Determine whether a directory is the user's home directory. Used by the
- * startup guard to refuse launching wstack in `~` — where it would risk
- * creating a `.git` repo at the top of the user's filesystem.
- *
- * Resolves both paths so trailing slashes and relative segments are
- * normalized before the comparison. Case is compared as-is (matches
- * `os.homedir()` and `process.cwd()` output on every platform). Symlinks
- * are NOT followed: the common case (`cwd === os.homedir()` literally) is
- * what this guard targets.
- *
- * Exported for testing — the call site in {@link boot} performs the actual
- * warning + exit.
- */
-export declare function isHomeDirectory(cwd: string, userHome: string): boolean;
-/**
- * Determine whether the first-run YOLO disclosure notice should be printed
- * to stderr. Exported for testing.
- *
- * @param lastChoices  Saved launch preferences from config (undefined = first run)
- * @param yoloPinned   Explicit --yolo/--no-yolo flag (undefined = not provided)
- * @param yolo         Resolved YOLO state
- */
-export declare function shouldPrintYoloNotice(lastChoices: unknown, yoloPinned: boolean | undefined, yolo: boolean): boolean;
 /**
  * Boot the CLI: parse args, load config, handle subcommand dispatch
  * (early exit), run interactive prompts (project check, provider picker,

package/dist/{chunk-LFMVHT3R.js → chunk-2ERX3RPN.js}

@@ -2,14 +2,7 @@ import {
   hasApiKey,
   isKeylessLocalProvider,
   visibleModelIds
-} from "./chunk-3VXYY5JC.js";
-import {
-  appendHistory,
-  backupCurrent
-} from "./chunk-WSTVGC2C.js";
-import {
-  openBrowser
-} from "./chunk-DAKVBMD4.js";
+} from "./chunk-5UZBUV2H.js";
 import {
   activeLabel,
   loadConfigProviders,
@@ -20,6 +13,13 @@ import {
   resolveActiveApiKey,
   writeKeysBack
 } from "./chunk-LUMETJFO.js";
+import {
+  openBrowser
+} from "./chunk-DAKVBMD4.js";
+import {
+  appendHistory,
+  backupCurrent
+} from "./chunk-WSTVGC2C.js";
 
 // src/auth-menu/auth-menu-audit.ts
 import { appendFileSync } from "node:fs";
@@ -427,10 +427,8 @@ ${color2.bold("WrongStack")} ${color2.dim("\u2014 API key manager")}
   );
   renderer.write(`    ${color2.bold("c")}  Add a custom provider
 `);
-  renderer.write(
-    `    ${color2.bold("s")}  Login with provider OAuth
-`
-  );
+  renderer.write(`    ${color2.bold("s")}  Login with provider OAuth
+`);
   if (ids.length > 0) {
     renderer.write(
       `    ${color2.dim("1-")}${color2.dim(String(ids.length))}  ${color2.bold("Manage a provider")}
@@ -1946,4 +1944,4 @@ export {
   addCustomProvider,
   addKeyForProvider
 };
-//# sourceMappingURL=chunk-LFMVHT3R.js.map
+//# sourceMappingURL=chunk-2ERX3RPN.js.map

package/dist/chunk-4TVYGG6G.js

@@ -0,0 +1,62 @@
+
+// src/permission-rules-view.ts
+import {
+  compilePermissionRules,
+  matchedPermissionRule,
+  withExecutorGate
+} from "@wrongstack/core/security";
+async function explainCall(policy, tool, input, ctx, yolo) {
+  if (!policy.explain) throw new Error("This permission policy cannot explain its decisions.");
+  const trace = withExecutorGate(await policy.explain(tool, input, ctx), tool, yolo);
+  const rules = await compilePermissionRules(policy, ctx, { yolo });
+  return { trace, rules, rule: matchedPermissionRule(rules, trace) };
+}
+function actionText(rule) {
+  return rule.action === "*" ? "any tool" : rule.action;
+}
+function resourceText(rule) {
+  return rule.resource === "*" ? "any input" : rule.resource;
+}
+function describePermissionRule(rule) {
+  return `#${rule.n} ${rule.effect} ${actionText(rule)} \u2192 ${resourceText(rule)} (${rule.source})`;
+}
+function formatPermissionRules(rules) {
+  const width = String(rules.length).length;
+  const lines = ["Permission rules, in the order they are checked; the first match decides:", ""];
+  for (const rule of rules) {
+    lines.push(
+      `  ${String(rule.n).padStart(width)}. ${rule.effect.padEnd(5)} ${rule.source.padEnd(15)} ${actionText(rule)} \u2192 ${resourceText(rule)}`
+    );
+    if (rule.note) lines.push(`  ${" ".repeat(width)}  ${" ".repeat(22)}${rule.note}`);
+  }
+  return lines.join("\n");
+}
+function formatExplainedCall({ trace, rule }) {
+  const lines = [];
+  lines.push(`Permission trace for "${trace.toolName}"`);
+  lines.push(`Subject: ${trace.subject ?? "(none)"}`);
+  lines.push("");
+  for (let i = 0; i < trace.steps.length; i++) {
+    const step = trace.steps[i];
+    if (!step) continue;
+    const winner = i === trace.winnerIndex ? " \u2190 WINNER" : "";
+    const matched = step.matched ? "\u2713" : " ";
+    lines.push(`  ${matched} [${i}] ${step.rule}${winner}`);
+    lines.push(`        decision: ${step.decision}  source: ${step.source}`);
+    lines.push(`        ${step.detail}`);
+    if (i < trace.steps.length - 1) lines.push("");
+  }
+  lines.push("");
+  lines.push(`Effective: ${trace.decision.permission} (source: ${trace.decision.source})`);
+  if (rule) lines.push(`Rule: ${describePermissionRule(rule)}`);
+  if (trace.decision.reason) lines.push(`Reason: ${trace.decision.reason}`);
+  if (trace.decision.riskTier) lines.push(`Risk tier: ${trace.decision.riskTier}`);
+  return lines.join("\n");
+}
+
+export {
+  explainCall,
+  formatPermissionRules,
+  formatExplainedCall
+};
+//# sourceMappingURL=chunk-4TVYGG6G.js.map

package/dist/chunk-5JYDKG5B.js

@@ -0,0 +1,154 @@
+import {
+  API_VERSION,
+  CLI_VERSION
+} from "./chunk-F5DCFAKI.js";
+
+// src/subcommands/handlers/version-help.ts
+import * as os from "node:os";
+import { color } from "@wrongstack/core/utils";
+var versionCmd = async (_args, deps) => {
+  const bunVersion = globalThis.Bun?.version;
+  const runtime = bunVersion ? `bun v${bunVersion}` : `node ${process.version}`;
+  deps.renderer.write(
+    `WrongStack ${CLI_VERSION} (apiVersion ${API_VERSION}, ${runtime}, ${os.platform()})
+`
+  );
+  return 0;
+};
+function row(left, description) {
+  const pad = 31;
+  return left.length < pad - 2 ? `  ${left.padEnd(pad - 2)}${description}` : `  ${left}
+${" ".repeat(pad)}${description}`;
+}
+function section(title, rows) {
+  return ["", color.bold(title), ...rows.map(([left, description]) => row(left, description))];
+}
+var helpCmd = async (_args, deps) => {
+  const lines = [
+    color.bold("WrongStack \u2014 usage"),
+    "",
+    '  wstack [flags] ["<task>"]    With a task: run it and exit. Without: start a session.',
+    "  wstack <command> --help      Details for one command",
+    ...section("Start", [
+      ["wstack", "Interactive session (REPL or TUI, picked at launch)"],
+      ['wstack "<task>"', 'Run one task and exit (also: --prompt "<task>")'],
+      ["wstack quick", "Straight into the TUI with saved defaults"],
+      ["wstack webui | simpleui", "Browser UI / minimal chat UI for this project"],
+      ["wstack desktop", "WrongStack Desktop (requires @wrongstack/desktop)"],
+      ["wstack hq", "HQ command center across projects and machines"],
+      ["wstack remote <user@host:/path>", "Run on a remote machine over SSH; WebUI tunneled here"],
+      ['wstack --eternal "<mission>"', "Eternal-autonomy loop against a goal (Ctrl+C stops)"],
+      ["wstack acp [serve]", "Agent Client Protocol server for editors"]
+    ]),
+    ...section("Sessions", [
+      ["wstack sessions", "List recent sessions (also: fork, doctor, fleet)"],
+      ["wstack resume [<id>]", "Resume a session (same as -r)"],
+      ["wstack rewind [<id>]", "Rewind a session to an earlier point"],
+      ["wstack export <id>", "Render a session as markdown, JSON or text"],
+      ["wstack audit | replay [<id>]", "Tamper-evident audit log / recorded provider responses"],
+      ["wstack chronicle", "Cross-session timeline and metrics"],
+      ["wstack usage", "Token and cost summary"]
+    ]),
+    ...section("Setup", [
+      ["wstack auth", "Provider keys: add/edit/remove, list, status, local"],
+      ["wstack providers | models", "Browse providers and models; models add|remove|refresh"],
+      ["wstack config", "Show, edit, back up or restore the active profile config"],
+      ["wstack config-export | config-import", "Move behaviour settings via ./wstack-config.json"],
+      ["wstack mcp", "MCP servers: list, add, remove, serve"],
+      ["wstack import-claude-code", "Import MCP servers from Claude Code (preview; --apply)"],
+      ["wstack plugin", "Plugins: list, install, enable, disable, remove"],
+      ["wstack tools | skills", "List registered tools / discovered skills"],
+      ["wstack typesafe", "TypeSafe account: status, login, test"],
+      ["wstack update", "Self-update (--check-only)"]
+    ]),
+    ...section("Project & diagnostics", [
+      ["wstack project | projects", "Committed project identity / tracked projects"],
+      ["wstack permissions explain", "Why a tool call is allowed, asked or denied"],
+      ["wstack doctor | diag", "Health checks / full diagnostic dump"],
+      ["wstack governance status", "Project-daemon health"],
+      ["wstack modeldiag | bench", "Model capability diagnostics / agentic benchmarks"],
+      ["wstack mailbox serve", "HTTP bridge for external agents"],
+      ["wstack version", "Print version"]
+    ]),
+    ...section("Session flags", [
+      ["-c, --continue", "Resume the most recent session"],
+      ["-r, --resume [<id>]", "Resume a session (latest when no id)"],
+      ["--recover", "Reopen the last session that never closed (crash, kill)"],
+      ["--fork-session", "With -c/-r/--recover: continue a copy, keep the original"],
+      ["--provider <id> --model <id>", "Provider and model for this run"],
+      ["--fallback-model <a,b,...>", "Models to fall back to when the primary is unavailable"],
+      ["--effort <level>", "Reasoning effort: none|minimal|low|medium|high|xhigh|max"],
+      ["--system-prompt lite|pro|default", "Bundled system-prompt variant"],
+      [
+        "--append-system-prompt <text> | --append-system-prompt-file <path>",
+        "Add instructions to the host agent prompt for this run"
+      ],
+      ['--goal "<goal>" | --ask "<q>"', "Open the TUI with a goal or a question queued"]
+    ]),
+    ...section("Tools & permissions", [
+      ["--yolo | --no-yolo", "Auto-approve on or off (gated destructive kinds still ask)"],
+      ["--yolo-destructive", "Let YOLO run every destructive kind you may un-gate"],
+      ["--restricted", "Untrusted repo: no shell/network/MCP tools, stay in project, no YOLO"],
+      ["--safe-mode", "Troubleshoot: no 3rd-party plugins, hooks, MCP, skills, overrides"],
+      ["--only-tools <a,b,...>", "Expose only these tools (trailing * = prefix: mcp__gh__*)"],
+      ["--disallowed-tools <a,b,...>", "Hide these tools, subagents included"],
+      ["--allowed-tools <a,b,...>", "Run these without a prompt (destructive calls still ask)"],
+      ["--mcp-config <file|json>", "Extra MCP servers for this run (.mcp.json accepted)"],
+      ["--strict-mcp-config", "Start only the --mcp-config servers"],
+      ["--no-hooks", "Skip user and plugin hooks (policy hooks still run)"]
+    ]),
+    ...section("Scripting (with a task)", [
+      ["<stdin>", 'Piped input becomes context: git diff | wstack "review this"'],
+      ["--output-json", "One JSON result line: status, finalText, sessionId, usage"],
+      [
+        "--output-format text|json|stream-json",
+        "stream-json: init, assistant, tool_result, result lines"
+      ],
+      ["--include-partial-messages", "stream-json: add text_delta lines"],
+      ["--json-schema <file|json>", "Answer must be JSON matching the schema (structuredOutput)"],
+      ["--max-budget-usd <amount>", "Stop once spend (leader + subagents) passes the amount"],
+      ["", "Exit: 0 done, 1 failed/limit/budget/schema, 130 aborted, 2 usage"]
+    ]),
+    ...section("Interfaces", [
+      ["--tui | --no-tui", "Force or disable the TUI"],
+      ["--mouse", "Full mouse mode in the TUI"],
+      ["--ascii", "Plain-ASCII symbols, borders and spinners (no emoji or box drawing)"],
+      ["--desktop", "Same as wstack desktop"],
+      [
+        "--webui [--host <h>] [--port <n>] [--open]",
+        "Browser UI (+ --webui-token, --webui-public-url, ...)"
+      ],
+      [
+        "--simpleui [same flags] [--full-auto]",
+        "Minimal chat UI; --full-auto = YOLO + autonomy for this run only"
+      ],
+      [
+        "--hq [--host <h>] [--port <n>] [--password <p>] [--tunnel] [--open]",
+        "HQ server (+ --hq-allowlist, --hq-public-url)"
+      ]
+    ]),
+    ...section("Startup & tuning", [
+      ["--skip", "Skip every startup prompt; use saved choices"],
+      ["--skip-index", "Skip codebase indexing at startup"],
+      ["--no-models-refresh", "Use the cached model catalog"],
+      ["--token-saving-tier <tier>", "auto|off|minimal|light|medium|aggressive"],
+      ["--max-concurrent <n> | --max-spawns <n>", "Fleet concurrency / lifetime subagent spawns"],
+      ["--chimera-auto-fix off|ask|auto", "How to handle Chimera review findings"],
+      ["--cwd <dir>", "Run as if started in <dir>"],
+      ["--verbose | --trace | --log-level <l>", "Log verbosity"],
+      ["--metrics [--metrics-port <n>]", "Metrics and health; Prometheus endpoint on the port"],
+      [
+        "--record | --replay <session-id>",
+        "Record provider responses / serve them back (test harnesses; a changed prompt misses)"
+      ]
+    ])
+  ];
+  deps.renderer.write(lines.join("\n") + "\n");
+  return 0;
+};
+
+export {
+  versionCmd,
+  helpCmd
+};
+//# sourceMappingURL=chunk-5JYDKG5B.js.map

package/dist/{chunk-3VXYY5JC.js → chunk-5UZBUV2H.js}

@@ -1,6 +1,6 @@
 
 // src/provider-helpers.ts
-import { hasProviderCredential } from "@wrongstack/core/models";
+import { hasProviderCredential, isKeylessLocalProvider } from "@wrongstack/core/models";
 import { catalogProviderIdFor } from "@wrongstack/providers";
 function uniqueModelIds(primary, fallback) {
   const seen = /* @__PURE__ */ new Set();
@@ -18,22 +18,6 @@ function visibleModelIds(providerId, config, catalogModelIds, cfg) {
   if (entry?.models === void 0) return [...catalogModelIds];
   return uniqueModelIds(entry.models, catalogModelIds);
 }
-function isLoopbackUrl(apiBase) {
-  if (!apiBase) return false;
-  let host;
-  try {
-    host = new URL(apiBase).hostname.toLowerCase();
-  } catch {
-    return false;
-  }
-  host = host.replace(/^\[|\]$/g, "");
-  if (host === "localhost" || host === "::1" || host === "0.0.0.0") return true;
-  return /^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(host);
-}
-function isKeylessLocalProvider(provider) {
-  if (provider.envVars && provider.envVars.length > 0) return false;
-  return isLoopbackUrl(provider.apiBase);
-}
 function hasApiKey(provider, config) {
   return hasProviderCredential(provider, config);
 }
@@ -122,9 +106,9 @@ function modelDetails(models) {
 }
 
 export {
-  visibleModelIds,
   isKeylessLocalProvider,
+  visibleModelIds,
   hasApiKey,
   buildPickableProviders
 };
-//# sourceMappingURL=chunk-3VXYY5JC.js.map
+//# sourceMappingURL=chunk-5UZBUV2H.js.map

package/dist/chunk-CZTXF6HY.js

@@ -0,0 +1,140 @@
+
+// src/context-limit.ts
+import { refreshCatalogIfStale } from "@wrongstack/core/models";
+import { mergeCustomModelDefs, toErrorMessage } from "@wrongstack/core/utils";
+import { capabilitiesFor } from "@wrongstack/providers";
+var SIBLING_CATALOG = {
+  "anthropic-oauth": "anthropic",
+  "openai-codex": "openai",
+  "github-copilot": "openai",
+  "google-antigravity": "google"
+};
+async function resolveRuntimeMaxContextDetailed(input) {
+  const providerConfig = input.runtimeProviderConfig ?? input.config.providers?.[input.providerId];
+  const providerOverride = positiveNumber(readConfiguredMaxContext(providerConfig));
+  if (providerOverride) return { maxContext: providerOverride, branch: "provider-override" };
+  const catalogId = providerConfig?.type && providerConfig.type !== input.providerId ? providerConfig.type : input.providerId;
+  const sibling = providerConfig?.family ? SIBLING_CATALOG[providerConfig.family] : void 0;
+  if (sibling && input.modelsRegistry) {
+    const mergedModels = mergeCustomModelDefs(providerConfig?.customModels, input.config.models);
+    const ownModel = await input.modelsRegistry.getModel(catalogId, input.modelId).catch(() => void 0);
+    if (ownModel) {
+      const ownCaps = await capabilitiesFor(
+        input.modelsRegistry,
+        catalogId,
+        input.modelId,
+        mergedModels
+      ).catch(() => void 0);
+      const ownMax = positiveNumber(ownCaps?.maxContext) ?? positiveNumber(ownModel.capabilities.maxContext);
+      if (ownMax) return { maxContext: ownMax, branch: "catalog-capabilities" };
+    }
+    const caps = await capabilitiesFor(
+      input.modelsRegistry,
+      sibling,
+      input.modelId,
+      mergedModels
+    ).catch(() => void 0);
+    const siblingMax = positiveNumber(caps?.maxContext);
+    if (siblingMax) return { maxContext: siblingMax, branch: "sibling-capabilities" };
+    const directModel = await input.modelsRegistry.getModel(sibling, input.modelId).catch(() => void 0);
+    const directMax = positiveNumber(directModel?.capabilities.maxContext);
+    if (directMax) return { maxContext: directMax, branch: "sibling-direct-model" };
+  }
+  let divergedFromCatalog = false;
+  if (input.modelsRegistry) {
+    const topLevelBaseUrlApplies = input.providerId === input.config.provider;
+    const configuredBaseUrl = providerConfig?.baseUrl ?? (topLevelBaseUrlApplies ? input.config.baseUrl : void 0);
+    let divergesFromCatalog = false;
+    if (configuredBaseUrl) {
+      const resolved = await safeGetProvider(input.modelsRegistry, catalogId);
+      divergesFromCatalog = normalizeBaseUrl(configuredBaseUrl) !== normalizeBaseUrl(resolved?.apiBase);
+    }
+    divergedFromCatalog = divergesFromCatalog;
+    if (!divergesFromCatalog) {
+      const mergedModels = mergeCustomModelDefs(providerConfig?.customModels, input.config.models);
+      const caps = await capabilitiesFor(
+        input.modelsRegistry,
+        catalogId,
+        input.modelId,
+        mergedModels
+      ).catch(() => void 0);
+      const catalogMax = positiveNumber(caps?.maxContext);
+      if (catalogMax) return { maxContext: catalogMax, branch: "catalog-capabilities" };
+      const directModel = await input.modelsRegistry.getModel(catalogId, input.modelId).catch(() => void 0);
+      const directMax = positiveNumber(directModel?.capabilities.maxContext);
+      if (directMax) return { maxContext: directMax, branch: "catalog-direct-model" };
+    }
+  }
+  const explicitContext = positiveNumber(input.config.context?.effectiveMaxContext);
+  if (explicitContext) {
+    return { maxContext: explicitContext, branch: "explicit-config-fallback" };
+  }
+  const familyDefault = positiveNumber(input.provider.capabilities.maxContext) ?? 0;
+  const branch = familyDefault === 0 ? "unknown" : divergedFromCatalog ? "diverging-baseurl-family-default" : "family-default";
+  return { maxContext: familyDefault, branch };
+}
+async function resolveRuntimeMaxContext(input) {
+  const { maxContext } = await resolveRuntimeMaxContextDetailed(input);
+  return maxContext;
+}
+var SUSPICIOUS_SHRINK_BRANCHES = /* @__PURE__ */ new Set([
+  "family-default",
+  "diverging-baseurl-family-default"
+]);
+function describeMaxContextChange(params) {
+  const { previous, current, providerId, modelId } = params;
+  if (current === previous) return void 0;
+  const branch = params.branch ?? "unknown";
+  const shrank = previous > 0 && current > 0 && current < previous;
+  const suspicious = SUSPICIOUS_SHRINK_BRANCHES.has(branch);
+  const detail = `max-context ${previous} \u2192 ${current} for ${providerId}/${modelId} (branch=${branch}${shrank ? ", DECREASED" : ""})`;
+  return shrank && suspicious ? {
+    level: "warn",
+    message: `Context window shrank via a non-catalog branch: ${detail}`,
+    shrank,
+    branch
+  } : { level: "debug", message: detail, shrank, branch };
+}
+async function refreshRuntimeModelCatalog(input) {
+  if (!input.modelsRegistry) return false;
+  try {
+    if (await refreshCatalogIfStale(input.modelsRegistry) === "recent") return false;
+    input.logger?.debug?.(
+      `models.dev catalog refreshed${input.reason ? ` (${input.reason})` : ""}`
+    );
+    return true;
+  } catch (err) {
+    input.logger?.warn?.(
+      `models.dev refresh failed${input.reason ? ` (${input.reason})` : ""}: ${toErrorMessage(err)}; using cached catalog`
+    );
+    return false;
+  }
+}
+async function safeGetProvider(registry, id) {
+  try {
+    return await registry.getProvider(id);
+  } catch {
+    return void 0;
+  }
+}
+function normalizeBaseUrl(url) {
+  if (!url) return "";
+  return url.trim().toLowerCase().replace(/\/+$/, "");
+}
+function readConfiguredMaxContext(providerConfig) {
+  if (!providerConfig || typeof providerConfig !== "object") return void 0;
+  const capabilities = providerConfig.capabilities;
+  if (!capabilities || typeof capabilities !== "object") return void 0;
+  return capabilities.maxContext;
+}
+function positiveNumber(value) {
+  return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : void 0;
+}
+
+export {
+  resolveRuntimeMaxContextDetailed,
+  resolveRuntimeMaxContext,
+  describeMaxContextChange,
+  refreshRuntimeModelCatalog
+};
+//# sourceMappingURL=chunk-CZTXF6HY.js.map