@wrongstack/cli 1.0.29 → 1.0.32

package/dist/{chunk-7IQWQCBH.js → chunk-3LEFXLAW.js}

@@ -9,6 +9,42 @@ function resolveExecutionMode(positional, flags) {
   return "repl";
 }
 
+// src/services/suggestion-store.ts
+var sharedSuggestions = [];
+var sharedAutoSuggestions = [];
+function setSuggestions(suggestions) {
+  sharedSuggestions = suggestions;
+}
+function setAutoSuggestions(suggestions) {
+  sharedAutoSuggestions = suggestions;
+}
+function getSuggestions() {
+  return sharedSuggestions;
+}
+function removeSuggestions(indices) {
+  if (indices.length === 0) return;
+  const set = new Set(indices);
+  sharedSuggestions = sharedSuggestions.filter((_, i) => !set.has(i));
+  sharedAutoSuggestions = [];
+}
+function clearSuggestions() {
+  sharedSuggestions = [];
+  sharedAutoSuggestions = [];
+}
+
+// src/tui-thinking-word.ts
+var DEFAULT_TUI_THINKING_WORD = "thinking";
+var MAX_TUI_THINKING_WORD_LENGTH = 16;
+function normalizeTuiThinkingWord(value) {
+  if (typeof value !== "string") return DEFAULT_TUI_THINKING_WORD;
+  const word = value.trim();
+  if (word.length === 0 || word.length > MAX_TUI_THINKING_WORD_LENGTH) {
+    return DEFAULT_TUI_THINKING_WORD;
+  }
+  if (!/^[\p{L}\p{N}_-]+$/u.test(word)) return DEFAULT_TUI_THINKING_WORD;
+  return word;
+}
+
 // src/hq-fleet-control.ts
 import {
   areSubagentsAllowedForSession,
@@ -73,42 +109,6 @@ function createHqFleetControl(getDirector, defaultSessionId, scope) {
   };
 }
 
-// src/services/suggestion-store.ts
-var sharedSuggestions = [];
-var sharedAutoSuggestions = [];
-function setSuggestions(suggestions) {
-  sharedSuggestions = suggestions;
-}
-function setAutoSuggestions(suggestions) {
-  sharedAutoSuggestions = suggestions;
-}
-function getSuggestions() {
-  return sharedSuggestions;
-}
-function removeSuggestions(indices) {
-  if (indices.length === 0) return;
-  const set = new Set(indices);
-  sharedSuggestions = sharedSuggestions.filter((_, i) => !set.has(i));
-  sharedAutoSuggestions = [];
-}
-function clearSuggestions() {
-  sharedSuggestions = [];
-  sharedAutoSuggestions = [];
-}
-
-// src/tui-thinking-word.ts
-var DEFAULT_TUI_THINKING_WORD = "thinking";
-var MAX_TUI_THINKING_WORD_LENGTH = 16;
-function normalizeTuiThinkingWord(value) {
-  if (typeof value !== "string") return DEFAULT_TUI_THINKING_WORD;
-  const word = value.trim();
-  if (word.length === 0 || word.length > MAX_TUI_THINKING_WORD_LENGTH) {
-    return DEFAULT_TUI_THINKING_WORD;
-  }
-  if (!/^[\p{L}\p{N}_-]+$/u.test(word)) return DEFAULT_TUI_THINKING_WORD;
-  return word;
-}
-
 // src/services/run-git.ts
 import { spawn } from "node:child_process";
 import { toErrorMessage } from "@wrongstack/core/utils";
@@ -149,12 +149,12 @@ export {
   getSuggestions,
   removeSuggestions,
   clearSuggestions,
+  MAX_TUI_THINKING_WORD_LENGTH,
+  normalizeTuiThinkingWord,
   killHqSessionFleet,
   terminateHqAgent,
   spawnHqAgent,
   createHqFleetControl,
-  MAX_TUI_THINKING_WORD_LENGTH,
-  normalizeTuiThinkingWord,
   runGit
 };
-//# sourceMappingURL=chunk-7IQWQCBH.js.map
+//# sourceMappingURL=chunk-3LEFXLAW.js.map

package/dist/{chunk-WSTVGC2C.js → chunk-4BX2YDTQ.js}

@@ -187,7 +187,14 @@ async function ensureHistoryDir(homeFn = defaultHomeDir, targetConfigPath) {
 async function readIndex(homeFn = defaultHomeDir, targetConfigPath) {
   try {
     const raw = await fs.readFile(historyIndexPath(homeFn, targetConfigPath), "utf8");
-    return JSON.parse(raw);
+    const parsed = JSON.parse(raw);
+    if (parsed && typeof parsed === "object" && Array.isArray(parsed.entries)) {
+      const entries = parsed.entries.filter(
+        (e) => e !== null && typeof e === "object" && typeof e.id === "string"
+      );
+      return { version: 1, entries };
+    }
+    return { version: 1, entries: [] };
   } catch {
     return { version: 1, entries: [] };
   }
@@ -301,11 +308,11 @@ async function listHistory(homeFn = defaultHomeDir, targetConfigPath) {
   return idx.entries;
 }
 async function getHistoryEntry(id, homeFn = defaultHomeDir, targetConfigPath) {
+  const dir = historyDir(homeFn, targetConfigPath);
+  const filePath = path.join(dir, `${id}.json`);
+  if (path.dirname(path.resolve(filePath)) !== path.resolve(dir)) return null;
   try {
-    const raw = await fs.readFile(
-      path.join(historyDir(homeFn, targetConfigPath), `${id}.json`),
-      "utf8"
-    );
+    const raw = await fs.readFile(filePath, "utf8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -391,4 +398,4 @@ export {
   restoreFromHistory,
   restoreLast
 };
-//# sourceMappingURL=chunk-WSTVGC2C.js.map
+//# sourceMappingURL=chunk-4BX2YDTQ.js.map

package/dist/{chunk-SFBFYIOW.js → chunk-4MDRHMX4.js}

@@ -1,7 +1,7 @@
 import {
   appendHistory,
   backupCurrent
-} from "./chunk-WSTVGC2C.js";
+} from "./chunk-4BX2YDTQ.js";
 
 // src/settings-menu.ts
 import * as fs from "node:fs/promises";
@@ -55,6 +55,7 @@ var PROJECT_SAFE_FIELDS = /* @__PURE__ */ new Set([
   "fallbackProfile",
   "favoriteModels",
   "disabledModels",
+  "disabledProviders",
   "favoriteModelsOnly",
   "modelAvailabilitySchedule",
   "fallbackAuto",
@@ -268,4 +269,4 @@ export {
   persistTelegramConfig,
   deriveFsAccessPair
 };
-//# sourceMappingURL=chunk-SFBFYIOW.js.map
+//# sourceMappingURL=chunk-4MDRHMX4.js.map

package/dist/{chunk-RDGGWMTI.js → chunk-65VNCAF6.js}

@@ -1,11 +1,6 @@
 import {
   resolveProviderCfgWithProxy
 } from "./chunk-SDJCLEK6.js";
-import {
-  fallbackCodexProviderModels,
-  filterCurrentCodexModelIds,
-  isCodexCatalogModel
-} from "./chunk-SIGUWXAA.js";
 
 // src/acp-agent-list.ts
 import { REGISTRY_ID_ALIASES } from "@wrongstack/acp";
@@ -117,7 +112,7 @@ async function loadCachedAcpRegistry(paths) {
     const raw = await fs.readFile(acpRegistryCachePath(paths), "utf8");
     const env = JSON.parse(raw);
     if (!Array.isArray(env.agents)) return null;
-    const byId = {};
+    const byId = /* @__PURE__ */ Object.create(null);
     for (const a of env.agents) {
       if (!a?.id || !a.acp?.command) continue;
       byId[a.id] = {
@@ -227,21 +222,6 @@ async function setupProvider(params) {
       let models;
       if (savedModels && savedModels.length > 0) {
         models = savedModels.map((m) => ({ id: m, name: m }));
-      } else if (family === "openai-codex") {
-        const openaiProvider = await modelsRegistry.getProvider("openai").catch(() => void 0);
-        if (openaiProvider) {
-          const catalogById = new Map(
-            openaiProvider.models.filter(isCodexCatalogModel).map((m) => [m.id, { id: m.id, name: m.name }])
-          );
-          const catalogModels = filterCurrentCodexModelIds(catalogById.keys()).map((id) => catalogById.get(id)).filter((m) => Boolean(m));
-          if (catalogModels.length > 0) {
-            models = catalogModels;
-          } else {
-            models = fallbackCodexProviderModels();
-          }
-        } else {
-          models = fallbackCodexProviderModels();
-        }
       } else {
         models = [];
       }
@@ -336,4 +316,4 @@ export {
   setupProvider,
   createGracefulShutdown
 };
-//# sourceMappingURL=chunk-RDGGWMTI.js.map
+//# sourceMappingURL=chunk-65VNCAF6.js.map

package/dist/{chunk-WQZW3RDP.js → chunk-7BNBD4PE.js}

@@ -1,6 +1,6 @@
 import {
   loadManifest
-} from "./chunk-IS2PPBQV.js";
+} from "./chunk-X4LW5CZM.js";
 
 // src/project-picker.ts
 import { color } from "@wrongstack/core/utils";
@@ -415,4 +415,4 @@ export {
   skipDivider,
   runProjectPicker
 };
-//# sourceMappingURL=chunk-WQZW3RDP.js.map
+//# sourceMappingURL=chunk-7BNBD4PE.js.map

package/dist/chunk-CFHWIFXL.js

@@ -0,0 +1,123 @@
+
+// src/boot/auto-discover-providers.ts
+import * as fs from "node:fs/promises";
+import * as path from "node:path";
+import { discoverOpenAICompatibleModels, resolveDiscoveryTargets } from "@wrongstack/providers";
+async function readCache(file) {
+  try {
+    return JSON.parse(await fs.readFile(file, "utf8"));
+  } catch {
+    return {};
+  }
+}
+async function discoverAndMergeProviders(opts) {
+  const targets = resolveDiscoveryTargets(opts.config);
+  if (targets.length === 0) return;
+  const cacheFile = path.join(opts.cacheDir, "discovered-models-cache.json");
+  const cache = await readCache(cacheFile);
+  let cacheDirty = false;
+  await Promise.all(
+    targets.map(async (target) => {
+      const previousCacheKey = target.cacheKey;
+      const {
+        id,
+        cfg,
+        baseUrl,
+        apiKey,
+        modelDiscoveryPath,
+        modelDiscoveryAuthoritative,
+        accountCatalog,
+        copilotCatalog,
+        modelsUrl,
+        headers,
+        prepareApiKey
+      } = target;
+      let failureReason = "model catalog request failed";
+      const provider = await discoverOpenAICompatibleModels(id, {
+        baseUrl,
+        apiKey,
+        headers: { ...cfg.headers, ...headers },
+        accountCatalog,
+        copilotCatalog,
+        modelsUrl,
+        providerName: id,
+        modelDiscoveryPath,
+        fetchImpl: opts.fetchImpl,
+        prepareApiKey,
+        onFailure: (reason) => {
+          failureReason = reason;
+        }
+      });
+      if (target.isCurrent && !target.isCurrent()) return;
+      const { cacheKey } = target;
+      if (provider) {
+        if (accountCatalog) cfg.models = Object.keys(provider.models);
+        const fetchedAt = (/* @__PURE__ */ new Date()).toISOString();
+        cache[cacheKey] = { fetchedAt, provider };
+        cacheDirty = true;
+        if (modelDiscoveryAuthoritative) {
+          opts.registry.mergeOverlay(
+            { [id]: provider },
+            { observedAt: fetchedAt, authoritativeProviderIds: [id] }
+          );
+        } else {
+          opts.registry.mergeOverlay({ [id]: provider });
+        }
+        opts.logger?.info(
+          `auto-discovered ${Object.keys(provider.models).length} models for "${id}" from ${baseUrl}`
+        );
+        return;
+      }
+      const cached = cache[cacheKey] ?? cache[previousCacheKey];
+      if (cached) {
+        if (cacheKey !== previousCacheKey) {
+          cache[cacheKey] = cached;
+          cacheDirty = true;
+        }
+        if (accountCatalog) cfg.models = Object.keys(cached.provider.models);
+        if (modelDiscoveryAuthoritative) {
+          opts.registry.mergeOverlay(
+            { [id]: cached.provider },
+            { observedAt: cached.fetchedAt, authoritativeProviderIds: [id] }
+          );
+        } else {
+          opts.registry.mergeOverlay({ [id]: cached.provider });
+        }
+        opts.logger?.warn(
+          `auto-discovery for "${id}" failed; using ${Object.keys(cached.provider.models).length} cached models from ${cached.fetchedAt} (${failureReason})`
+        );
+      } else {
+        if (accountCatalog) {
+          cfg.models = [];
+          opts.registry.mergeOverlay(
+            {
+              [id]: {
+                id,
+                name: id,
+                npm: "@ai-sdk/openai-compatible",
+                api: baseUrl,
+                env: [],
+                models: {}
+              }
+            },
+            { authoritativeProviderIds: [id] }
+          );
+        }
+        opts.logger?.warn(
+          `auto-discovery for "${id}" failed and no cache available (${failureReason}; catalog at ${baseUrl})`
+        );
+      }
+    })
+  );
+  if (cacheDirty) {
+    try {
+      await fs.writeFile(cacheFile, JSON.stringify(cache), "utf8");
+    } catch {
+    }
+  }
+}
+
+export {
+  discoverAndMergeProviders
+};
+//# sourceMappingURL=chunk-CFHWIFXL.js.map

package/dist/{chunk-RZ4ZDRYA.js → chunk-DIOODAYM.js}

@@ -144,7 +144,7 @@ async function checkForUpdate(signalOrOptions, legacyHomeFn) {
     };
   }
   try {
-    const latest = packageName === "standalone-binary" ? await (await import("./standalone-update-LZO3MNLH.js")).fetchLatestStandaloneVersion(3e3, signal) : await fetchLatestFromNpm(packageName, 3e3, signal);
+    const latest = packageName === "standalone-binary" ? await (await import("./standalone-update-HZHDZZOR.js")).fetchLatestStandaloneVersion(3e3, signal) : await fetchLatestFromNpm(packageName, 3e3, signal);
     await writeCache({ timestamp: Date.now(), latestVersion: latest, packageName }, hf);
     return {
       current,
@@ -183,4 +183,4 @@ export {
   checkForUpdate,
   getUpdateNotification
 };
-//# sourceMappingURL=chunk-RZ4ZDRYA.js.map
+//# sourceMappingURL=chunk-DIOODAYM.js.map

package/dist/{chunk-L2RVEQWO.js → chunk-HHRYIDOW.js}

@@ -1,6 +1,6 @@
 import {
   backupCurrent
-} from "./chunk-WSTVGC2C.js";
+} from "./chunk-4BX2YDTQ.js";
 
 // src/wiring/external-plugins.ts
 import { isAbsolute, join, resolve } from "node:path";
@@ -1109,4 +1109,4 @@ export {
   PLUGIN_AUDIT_ENTRIES,
   runPluginManagementCommand
 };
-//# sourceMappingURL=chunk-L2RVEQWO.js.map
+//# sourceMappingURL=chunk-HHRYIDOW.js.map

package/dist/{chunk-KT34LWIS.js → chunk-LIZXJHZQ.js}

@@ -1,41 +1,43 @@
 
 // src/subcommands/index.ts
 var loaders = {
-  acp: async () => (await import("./acp-QWCBMQSO.js")).acpCmd,
+  automation: async () => (await import("./automation-MCDFCIMV.js")).automationCmd,
+  sandbox: async () => (await import("./sandbox-TYGD6FI2.js")).sandboxCmd,
+  acp: async () => (await import("./acp-EDGUWU7N.js")).acpCmd,
   init: async () => (await import("./init-DRMMFG2G.js")).initCmd,
-  auth: async () => (await import("./auth-TE55JF4Z.js")).authCmd,
-  update: async () => (await import("./update-TDZX4IL2.js")).updateCmd,
-  remote: async () => (await import("./remote-GB5VXCCT.js")).remoteCmd,
-  sessions: async () => (await import("./sessions-config-JGIZRNT6.js")).sessionsCmd,
-  config: async () => (await import("./sessions-config-JGIZRNT6.js")).configCmd,
-  "config-export": async () => (await import("./config-transfer-RUWLDCNK.js")).configExportCmd,
-  "config-import": async () => (await import("./config-transfer-RUWLDCNK.js")).configImportCmd,
-  rewind: async () => (await import("./rewind-JA3ZLCNM.js")).rewindCmd,
+  auth: async () => (await import("./auth-SUHKFFO4.js")).authCmd,
+  update: async () => (await import("./update-J5WHAFPE.js")).updateCmd,
+  remote: async () => (await import("./remote-C74BCNND.js")).remoteCmd,
+  sessions: async () => (await import("./sessions-config-VE26SB56.js")).sessionsCmd,
+  config: async () => (await import("./sessions-config-VE26SB56.js")).configCmd,
+  "config-export": async () => (await import("./config-transfer-UE37X4B5.js")).configExportCmd,
+  "config-import": async () => (await import("./config-transfer-UE37X4B5.js")).configImportCmd,
+  rewind: async () => (await import("./rewind-7AULJS7F.js")).rewindCmd,
   replay: async () => (await import("./replay-JJ2NOWD6.js")).replayCmd,
-  audit: async () => (await import("./audit-46YK5DSC.js")).auditCmd,
-  tools: async () => (await import("./tools-skills-GH24UCBY.js")).toolsCmd,
-  skills: async () => (await import("./tools-skills-GH24UCBY.js")).skillsCmd,
+  audit: async () => (await import("./audit-KCBTHUQI.js")).auditCmd,
+  tools: async () => (await import("./tools-skills-33AI6K6S.js")).toolsCmd,
+  skills: async () => (await import("./tools-skills-33AI6K6S.js")).skillsCmd,
   "skill-suggest": async () => (await import("./skill-suggest-L2EVWB6R.js")).skillSuggestCmd,
-  typesafe: async () => (await import("./typesafe-WA5O3KVS.js")).typesafeCmd,
-  providers: async () => (await import("./providers-models-5Z2PJTEW.js")).providersCmd,
-  models: async () => (await import("./providers-models-5Z2PJTEW.js")).modelsCmd,
+  typesafe: async () => (await import("./typesafe-NHC322W5.js")).typesafeCmd,
+  providers: async () => (await import("./providers-models-W57I3QOA.js")).providersCmd,
+  models: async () => (await import("./providers-models-W57I3QOA.js")).modelsCmd,
   mcp: async () => (await import("./mcp-LBS45HWZ.js")).mcpCmd,
-  plugin: async () => (await import("./plugin-usage-CIGOOTX3.js")).pluginCmd,
-  plugins: async () => (await import("./plugin-usage-CIGOOTX3.js")).pluginCmd,
+  plugin: async () => (await import("./plugin-usage-3TZGROK7.js")).pluginCmd,
+  plugins: async () => (await import("./plugin-usage-3TZGROK7.js")).pluginCmd,
   diag: async () => (await import("./diag-doctor-BIZAFIAT.js")).diagCmd,
   doctor: async () => (await import("./diag-doctor-BIZAFIAT.js")).doctorCmd,
   "proxy-status": async () => (await import("./diag-doctor-BIZAFIAT.js")).proxyCmd,
   export: async () => (await import("./export-VVRIOWFV.js")).exportCmd,
-  usage: async () => (await import("./plugin-usage-CIGOOTX3.js")).usageCmd,
-  version: async () => (await import("./version-help-HN32QYQN.js")).versionCmd,
-  help: async () => (await import("./version-help-HN32QYQN.js")).helpCmd,
+  usage: async () => (await import("./plugin-usage-3TZGROK7.js")).usageCmd,
+  version: async () => (await import("./version-help-ATOKGMTK.js")).versionCmd,
+  help: async () => (await import("./version-help-ATOKGMTK.js")).helpCmd,
   projects: async () => (await import("./projects-T4CZCA25.js")).projectsCmd,
-  modeldiag: async () => (await import("./modeldiag-W7XAE625.js")).modeldiagCmd,
+  modeldiag: async () => (await import("./modeldiag-PQILD7TN.js")).modeldiagCmd,
   quick: async () => (await import("./quick-CNB4Z3HS.js")).quickCmd,
-  bench: async () => (await import("./bench-GTLPM22B.js")).benchCmd,
-  chronicle: async () => (await import("./chronicle-UTFETHP6.js")).chronicleCmd,
-  hq: async () => (await import("./hq-BNK67HOE.js")).hqCmd,
-  mailbox: async () => (await import("./mailbox-serve-FW3JCCPK.js")).mailboxServeCmd,
+  bench: async () => (await import("./bench-MMZHFHDL.js")).benchCmd,
+  chronicle: async () => (await import("./chronicle-PBJS7BN6.js")).chronicleCmd,
+  hq: async () => (await import("./hq-KBFDKTDD.js")).hqCmd,
+  mailbox: async () => (await import("./mailbox-serve-S536N66F.js")).mailboxServeCmd,
   permissions: async () => (await import("./permissions-PL27UHYD.js")).permissionsCmd,
   project: async () => (await import("./project-AOQI5XTK.js")).projectCmd,
   sage: async () => (await import("./sage-FFKUOCQL.js")).sageCmd,
@@ -56,4 +58,4 @@ export {
   subcommands,
   subcommandNames
 };
-//# sourceMappingURL=chunk-KT34LWIS.js.map
+//# sourceMappingURL=chunk-LIZXJHZQ.js.map

package/dist/{chunk-YHYINL47.js → chunk-LKFKO4JW.js}

@@ -4,7 +4,7 @@ import {
 import {
   PLUGIN_AUDIT_ENTRIES,
   loadExternalPlugins
-} from "./chunk-L2RVEQWO.js";
+} from "./chunk-HHRYIDOW.js";
 
 // src/wiring/plugins.ts
 import { join } from "node:path";
@@ -306,4 +306,4 @@ export {
   BUILTIN_PLUGIN_NAME_HINTS,
   setupPlugins
 };
-//# sourceMappingURL=chunk-YHYINL47.js.map
+//# sourceMappingURL=chunk-LKFKO4JW.js.map

package/dist/{chunk-Q4INH2DG.js → chunk-MPQCHBDJ.js}

@@ -74,6 +74,7 @@ var BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
   "token-saving-mode",
   "system-lite",
   "system-pro",
+  "system-scout",
   "hq",
   "hq-allow-exec",
   "tunnel",
@@ -306,4 +307,4 @@ export {
   parseAuthFlags,
   parseSpawnFlags
 };
-//# sourceMappingURL=chunk-Q4INH2DG.js.map
+//# sourceMappingURL=chunk-MPQCHBDJ.js.map

package/dist/{chunk-2ERX3RPN.js → chunk-P3GRLV47.js}

@@ -12,14 +12,14 @@ import {
   nowIso,
   resolveActiveApiKey,
   writeKeysBack
-} from "./chunk-LUMETJFO.js";
-import {
-  openBrowser
-} from "./chunk-DAKVBMD4.js";
+} from "./chunk-ZYACRPLN.js";
 import {
   appendHistory,
   backupCurrent
-} from "./chunk-WSTVGC2C.js";
+} from "./chunk-4BX2YDTQ.js";
+import {
+  openBrowser
+} from "./chunk-DAKVBMD4.js";
 
 // src/auth-menu/auth-menu-audit.ts
 import { appendFileSync } from "node:fs";
@@ -177,6 +177,16 @@ import {
   applyProviderAuthOutcome,
   createBuiltinProviderAuthRegistry
 } from "@wrongstack/providers/oauth";
+
+// src/auth-menu/helpers.ts
+async function loadProviders(deps) {
+  return loadConfigProviders(deps.profileConfigPath, deps.vault, {
+    warn: (msg) => deps.renderer.writeWarning(msg),
+    profileConfigPath: deps.profileConfigPath
+  });
+}
+
+// src/auth-menu/provider-auth-login.ts
 var defaultRegistry;
 function providerAuthRegistryFor(deps) {
   if (deps.providerAuthRegistry) return deps.providerAuthRegistry;
@@ -223,9 +233,11 @@ async function runProviderAuthLogin(deps, strategyId, opts = {}) {
   Sign in with ${strategy.label}`) + color.dim(` \u2192 ${opts.providerId ?? strategy.providerId}
 `)
     );
+    const saved = strategy.id === "chatgpt-api" ? (await loadProviders(deps))[opts.providerId ?? strategy.providerId] : void 0;
+    const credential = saved?.apiKeys?.find((key) => key.label === saved.activeKey) ?? saved?.apiKeys?.[0];
     session = await registry.begin(
       strategy.id,
-      { modelsRegistry: deps.modelsRegistry },
+      { modelsRegistry: deps.modelsRegistry, ...credential ? { credential } : {} },
       controller.signal
     );
     let outcome;
@@ -293,18 +305,18 @@ import { color as color3 } from "@wrongstack/core/utils";
 import { authProfileAliasError } from "@wrongstack/providers";
 import { probeLocalLlm } from "@wrongstack/runtime/probe";
 
-// src/auth-menu/helpers.ts
-async function loadProviders(deps) {
-  return loadConfigProviders(deps.profileConfigPath, deps.vault, {
-    warn: (msg) => deps.renderer.writeWarning(msg),
-    profileConfigPath: deps.profileConfigPath
-  });
-}
-
 // src/auth-menu/local-presets.ts
 import { projectLocalProviderPresets } from "@wrongstack/providers/definitions";
 var LOCAL_LLM_PRESETS = projectLocalProviderPresets();
 
+// src/auth-menu/index-input.ts
+function parseAuthMenuIndex(raw) {
+  const value = raw.trim();
+  if (!/^\d+$/.test(value)) return void 0;
+  const index = Number(value);
+  return Number.isSafeInteger(index) && index > 0 ? index : void 0;
+}
+
 // src/auth-menu/shared.ts
 import { color as color2 } from "@wrongstack/core/utils";
 function renderProviderLine(renderer, id, cfg, idx) {
@@ -726,8 +738,8 @@ ${color3.bold("Local LLM servers")} ${color3.dim("\u2014 pick one to pre-fill th
 ${color3.amber("?")} Pick ${color3.dim(`(1-${LOCAL_LLM_PRESETS.length}, q to quit)`)}: `
   )).trim().toLowerCase();
   if (!answer || answer === "q" || answer === "quit") return void 0;
-  const num = Number.parseInt(answer, 10);
-  if (!Number.isNaN(num) && num >= 1 && num <= LOCAL_LLM_PRESETS.length) {
+  const num = parseAuthMenuIndex(answer);
+  if (num !== void 0 && num <= LOCAL_LLM_PRESETS.length) {
     return LOCAL_LLM_PRESETS[num - 1];
   }
   const byId = LOCAL_LLM_PRESETS.find((p) => p.id === answer);
@@ -1926,6 +1938,7 @@ export {
   providerAuthStrategiesFor,
   runProviderAuthLogin,
   LOCAL_LLM_PRESETS,
+  parseAuthMenuIndex,
   runAuthLocal,
   resolveOAuthKind,
   runOAuthLoginKind,
@@ -1944,4 +1957,4 @@ export {
   addCustomProvider,
   addKeyForProvider
 };
-//# sourceMappingURL=chunk-2ERX3RPN.js.map
+//# sourceMappingURL=chunk-P3GRLV47.js.map

package/dist/{chunk-ZMX5HRLI.js → chunk-P3Q3KMFH.js}

@@ -33,14 +33,16 @@ function boolFlag(flags, names) {
 }
 function parsePositiveInteger(value, label) {
   if (value === void 0) throw new Error(`${label} is required`);
-  const parsed = Number.parseInt(value, 10);
-  if (!Number.isInteger(parsed) || parsed <= 0)
+  const trimmed = value.trim();
+  const parsed = /^\d+$/.test(trimmed) ? Number(trimmed) : Number.NaN;
+  if (!Number.isSafeInteger(parsed) || parsed <= 0)
     throw new Error(`${label} must be a positive integer`);
   return parsed;
 }
 function parsePort(value) {
   if (value === void 0) return void 0;
-  const parsed = Number.parseInt(value, 10);
+  const trimmed = value.trim();
+  const parsed = /^\d+$/.test(trimmed) ? Number(trimmed) : Number.NaN;
   if (!Number.isInteger(parsed) || parsed <= 0 || parsed > 65535) {
     throw new Error("--port must be a port between 1 and 65535");
   }
@@ -125,4 +127,4 @@ export {
   writeWebuiSessionChildReady,
   writeWebuiSessionChildError
 };
-//# sourceMappingURL=chunk-ZMX5HRLI.js.map
+//# sourceMappingURL=chunk-P3Q3KMFH.js.map

package/dist/{chunk-KOEO4CJG.js → chunk-PGNERAZL.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-U3SS4NRH.js";
 import {
   checkForUpdate
-} from "./chunk-RZ4ZDRYA.js";
+} from "./chunk-DIOODAYM.js";
 
 // src/subcommands/handlers/update.ts
 import { spawn } from "node:child_process";
@@ -80,8 +80,8 @@ async function runUpdateCommand(args, deps) {
   }
   if (isStandaloneBinary()) {
     const [{ updateStandaloneBinary }, { standaloneUpdater }, { STANDALONE_TARGET }] = await Promise.all([
-      import("./standalone-update-LZO3MNLH.js"),
-      import("./standalone-auto-update-TOTRGCSA.js"),
+      import("./standalone-update-HZHDZZOR.js"),
+      import("./standalone-auto-update-VQC4GYCM.js"),
       import("./version-JB2UAV2A.js")
     ]);
     const updater = standaloneUpdater({
@@ -406,4 +406,4 @@ export {
   detectUpdatePackageManager,
   detectUpdatePackageName
 };
-//# sourceMappingURL=chunk-KOEO4CJG.js.map
+//# sourceMappingURL=chunk-PGNERAZL.js.map

package/dist/{chunk-6A7URMWN.js → chunk-RQ4UBKYH.js}

@@ -2889,8 +2889,8 @@ async function handleApiAgentMessages(req, res, match, agentMessages) {
 // src/hq-server/routes/system-handlers.ts
 async function handleApiSystemUpdate(res) {
   const [{ checkForUpdate }, { detectUpdatePackageName }] = await Promise.all([
-    import("./update-check-J5ZVKS73.js"),
-    import("./update-TDZX4IL2.js")
+    import("./update-check-VLVT4IV2.js"),
+    import("./update-J5WHAFPE.js")
   ]);
   const packageName = detectUpdatePackageName();
   const info = await checkForUpdate({ packageName });
@@ -5367,4 +5367,4 @@ export {
   startHqServer,
   HqInsecureExposureError2 as HqInsecureExposureError
 };
-//# sourceMappingURL=chunk-6A7URMWN.js.map
+//# sourceMappingURL=chunk-RQ4UBKYH.js.map

package/dist/{chunk-X756ZS72.js → chunk-SUDNPYWD.js}

@@ -66,7 +66,7 @@ async function downloadReleaseAssetToFile(url, file, options) {
             throw new Error(`download ${url} is too large`);
           }
           hash.update(value);
-          await out.write(value);
+          await out.writeFile(value);
         }
       } finally {
         reader.releaseLock();
@@ -326,4 +326,4 @@ export {
   installExecutableFrom,
   updateStandaloneBinary
 };
-//# sourceMappingURL=chunk-X756ZS72.js.map
+//# sourceMappingURL=chunk-SUDNPYWD.js.map