ai-fly 0.3.2 → 0.4.0-alpha.10

package/dist/{common-CqxqIg6D.mjs → common-C51SAE5f.mjs}

@@ -1,7 +1,7 @@
 import { n as UsageError } from "./errors-BGtxPkM7.mjs";
 import { n as resolveRelayUrls, t as loadConfig } from "./config-BlZnFqx7.mjs";
-import { t as ProviderStore } from "./store-CrTUwskE.mjs";
-import { t as loadSettings } from "./settings-C1Hb4zwd.mjs";
+import { t as ProviderStore } from "./store-EGzVd-dn.mjs";
+import { t as loadSettings } from "./settings-XCvAzDK8.mjs";
 import { homedir } from "node:os";
 import { join } from "node:path";
 //#region src/cli/commands/provider/common.ts
@@ -56,13 +56,24 @@ function parseMatchSpec(raw) {
 		value
 	};
 }
-/** "Name=value"（首个 = 分割；Name 小写化）。 */
 function parseHeaderSetSpec(raw) {
 	const idx = raw.indexOf("=");
-	if (idx <= 0) throw new UsageError(`error: invalid --header-set value: ${raw} (expected <name>=<value>, value may be $env:VAR)`);
+	if (idx <= 0) throw new UsageError(`error: invalid --header-set value: ${raw} (expected <name>=<value> or <name>={"hook":...}; value is a literal or hook invocation JSON)`);
+	const name = raw.slice(0, idx).trim().toLowerCase();
+	const rawValue = raw.slice(idx + 1);
+	if (rawValue.startsWith("{")) try {
+		const parsed = JSON.parse(rawValue);
+		if (parsed === null || typeof parsed !== "object" || typeof parsed.hook !== "string") throw new Error("not a hook invocation");
+		return {
+			name,
+			value: parsed
+		};
+	} catch {
+		throw new UsageError(`error: invalid --header-set hook JSON for '${name}' (expected {"hook":"authHeader",...})`);
+	}
 	return {
-		name: raw.slice(0, idx).trim().toLowerCase(),
-		value: raw.slice(idx + 1)
+		name,
+		value: rawValue
 	};
 }
 /** 各命令的 rewrite 组装（仅在存在任一重写选项时构造）。 */

package/dist/{common-CgxCXeTt.mjs → common-CanLn0Qt.mjs}

@@ -1,6 +1,6 @@
 import { n as resolveRelayUrls, t as loadConfig } from "./config-BlZnFqx7.mjs";
 import { n as loadSdk, t as resolveHttpProxy } from "./proxy-D7VMUVEg.mjs";
-import { t as loadSettings } from "./settings-C1Hb4zwd.mjs";
+import { t as loadSettings } from "./settings-XCvAzDK8.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/common.ts
 function ctxOut(ctx) {

package/dist/{daemon-ZWUSWAgM.mjs → daemon-BWgyJMyB.mjs}

@@ -1,8 +1,8 @@
 import { n as UsageError, r as reportCliError, t as CliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { r as settingsPath, t as loadSettings } from "./settings-C1Hb4zwd.mjs";
+import { r as settingsPath, t as loadSettings } from "./settings-XCvAzDK8.mjs";
 import { a as killHard, c as terminateGracefully, i as isAlive, l as writeLastStart, n as daemonDir, o as readLastStart, r as ensureDaemonDir, s as readPid, t as clearPid, u as writePid } from "./daemon-state-CYkiW3SA.mjs";
-import { r as openStore } from "./common-CqxqIg6D.mjs";
+import { r as openStore } from "./common-C51SAE5f.mjs";
 import { openSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { isAbsolute, resolve } from "node:path";
@@ -99,7 +99,7 @@ async function start(startArgv, home) {
 	process.on("exit", () => {
 		clearPid(home);
 	});
-	const { run: serveRun } = await import("./serve-DSBlodTF.mjs");
+	const { run: serveRun } = await import("./serve-B51lmr9M.mjs");
 	return serveRun([...startArgv], { homedir: home });
 }
 /** 后台 pid（活性核验；陈旧 pidfile 就地清理返回 null）。 */

package/dist/{forget-BXL2x4Wv.mjs → forget-B3KRkHho.mjs}

@@ -1,7 +1,7 @@
 import { n as UsageError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { d as removeKeyring, n as consumersRoot } from "./store-CQShpYar.mjs";
-import { n as ctxHomedir, r as ctxOut } from "./common-CgxCXeTt.mjs";
+import { d as removeKeyring, n as consumersRoot } from "./store-DOFDy1rY.mjs";
+import { n as ctxHomedir, r as ctxOut } from "./common-CanLn0Qt.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/forget.ts
 async function run(argv, ctx = {}) {

package/dist/{frames-BDqvhB2Y.mjs → frames-BDz8buix.mjs}

@@ -235,6 +235,7 @@ const SERVICE_ENTRY_SCHEMA = z.strictObject({
 	name: z.string().min(1).max(256),
 	match: z.array(SERVICE_MATCH_SCHEMA).max(64),
 	defaultPort: z.number().int().min(1).max(65535),
+	hooks: z.string().optional(),
 	detail: SERVICE_DETAIL_SCHEMA.optional()
 });
 const GROUP_ENTRY_SCHEMA = z.strictObject({

package/dist/{group-B96IKEDF.mjs → group-BdnvRD2t.mjs}

@@ -1,6 +1,6 @@
 import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { d as str, l as resolveDataDir, n as multi, r as openStore, s as parsePositiveInt } from "./common-CqxqIg6D.mjs";
+import { d as str, l as resolveDataDir, n as multi, r as openStore, s as parsePositiveInt } from "./common-C51SAE5f.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/provider/group.ts
 const SPEC = {

package/dist/hook-CvAMGts4.mjs

@@ -0,0 +1,228 @@
+import { createRequire } from "node:module";
+import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+//#region src/provider/hook.ts
+var HookMissingError = class extends Error {
+	constructor() {
+		super("credential source missing");
+		this.name = "HookMissingError";
+	}
+};
+/** 包根（向上找 name=ai-fly 的 package.json；dev 仓库与安装布局皆成立）。 */
+function packageRoot(start = dirname(fileURLToPath(import.meta.url))) {
+	let dir = resolve(start);
+	for (let hops = 0; hops < 12; hops += 1) {
+		const pkg = join(dir, "package.json");
+		if (existsSync(pkg)) try {
+			const parsed = JSON.parse(readFileSync(pkg, "utf8"));
+			if (parsed !== null && typeof parsed === "object" && parsed.name === "ai-fly") return dir;
+		} catch {}
+		const parent = dirname(dir);
+		if (parent === dir) break;
+		dir = parent;
+	}
+	return process.cwd();
+}
+function hookScriptPaths(home = homedir()) {
+	return {
+		userDir: join(home, ".aifly", "hooks"),
+		builtinDir: join(packageRoot(), "hooks")
+	};
+}
+function scriptCandidates(name, paths) {
+	const bases = [join(paths.userDir, name), join(paths.builtinDir, name)];
+	const out = [];
+	for (const b of bases) out.push(`${b}.cjs`, b.endsWith(".cjs") || b.endsWith(".js") ? b : `${b}.js`);
+	return out;
+}
+/** 加载 hooks 脚本模块（用户库优先于内建库；缺席返回 undefined）。 */
+function loadHookScript(name, home = homedir()) {
+	if (name === "" || name.includes("/") || name.includes("..")) return void 0;
+	const req = createRequire(import.meta.url);
+	for (const candidate of scriptCandidates(name, hookScriptPaths(home))) {
+		if (!existsSync(candidate)) continue;
+		try {
+			const mod = req(candidate);
+			if (mod !== null && typeof mod === "object") return mod;
+		} catch {}
+	}
+}
+function dirScriptNames(dir) {
+	try {
+		return readdirSync(dir).filter((f) => f.endsWith(".cjs")).map((f) => f.slice(0, -4));
+	} catch {
+		return [];
+	}
+}
+/** 枚举可用 hooks 脚本及其钩子清单（用户库优先；内建同名被覆盖不重复列出）。 */
+function discoverHooks(home = homedir()) {
+	const paths = hookScriptPaths(home);
+	const seen = /* @__PURE__ */ new Map();
+	for (const name of dirScriptNames(paths.userDir)) {
+		const mod = loadHookScript(name, home);
+		if (mod === void 0) continue;
+		seen.set(name, {
+			name,
+			source: "user",
+			fns: exportedHookFns(mod)
+		});
+	}
+	for (const name of dirScriptNames(paths.builtinDir)) {
+		if (seen.has(name)) continue;
+		const mod = loadHookScript(name, home);
+		if (mod === void 0) continue;
+		seen.set(name, {
+			name,
+			source: "builtin",
+			fns: exportedHookFns(mod)
+		});
+	}
+	return [...seen.values()].sort((a, b) => a.name.localeCompare(b.name));
+}
+/** 模块导出面的钩子函数名（typeof function 且非下划线开头）。 */
+function exportedHookFns(mod) {
+	return Object.keys(mod).filter((k) => !k.startsWith("_") && typeof mod[k] === "function").sort();
+}
+function isAsyncIterable(v) {
+	return v !== null && typeof v === "object" && Symbol.asyncIterator in v;
+}
+const subscriptions = /* @__PURE__ */ new Map();
+/** 建立订阅并等待首个 yield：返回首值（后续值由后台循环更新 latest）。 */
+function startSubscription(key, stream, sub) {
+	sub.iterator = stream[Symbol.asyncIterator]();
+	return new Promise((resolveFirst) => {
+		let firstSettled = false;
+		(async () => {
+			try {
+				const it = sub.iterator;
+				for (;;) {
+					const r = await it.next();
+					if (r.done === true) break;
+					if (typeof r.value === "string" && r.value !== "") {
+						sub.latest = r.value;
+						if (firstSettled === false) {
+							firstSettled = true;
+							resolveFirst(r.value);
+						}
+					}
+				}
+			} catch {}
+			if (firstSettled === false) {
+				firstSettled = true;
+				resolveFirst(void 0);
+			}
+		})();
+	});
+}
+/** 回收全部订阅（daemon stop / 测试收尾）。return() 对挂起在内部 await 的
+* 生成器（如等待 watch 事件）可能永不结算——300ms 竞速后放弃该迭代器。 */
+async function disposeHookSubscriptions() {
+	const subs = [...subscriptions.entries()];
+	subscriptions.clear();
+	await Promise.all(subs.map(async ([, sub]) => {
+		try {
+			await Promise.race([sub.iterator?.return?.(void 0) ?? Promise.resolve(), new Promise((r) => setTimeout(r, 300))]);
+		} catch {}
+	}));
+}
+/**
+* 解析一次钩子取值（headerSet 的 {hook,...} 协议消费点）。
+* 订阅键 = script|fn —— 同键首个请求建立订阅，后续读 latest。
+* 任何未命中（脚本/函数缺席、调用抛错、非字符串、空串、订阅未出首值）
+* 抛 HookMissingError（零上游请求；信息不含脚本路径与值）。
+*/
+async function resolveHookValue(fnName, opts) {
+	const home = opts.home ?? homedir();
+	const raw = (opts.loader ?? loadHookScript)(opts.script, home)?.[fnName];
+	if (typeof raw !== "function") throw new HookMissingError();
+	let result;
+	try {
+		result = raw({
+			homedir: home,
+			args: opts.args ?? {},
+			secrets: (n) => opts.secrets?.(n),
+			env: (n) => opts.env?.(n) ?? process.env[n]
+		});
+	} catch {
+		throw new HookMissingError();
+	}
+	const key = `${opts.script}|${fnName}`;
+	if (isAsyncIterable(result)) {
+		let sub = subscriptions.get(key);
+		if (sub === void 0) {
+			sub = {};
+			subscriptions.set(key, sub);
+			const first = await startSubscription(key, result, sub);
+			if (first === void 0) throw new HookMissingError();
+			return first;
+		}
+		if (sub.latest === void 0) throw new HookMissingError();
+		return sub.latest;
+	}
+	const awaited = await result;
+	if (typeof awaited !== "string" || awaited === "") throw new HookMissingError();
+	return awaited;
+}
+/** 脚本名合法性（资源标识符；防路径逃逸）。 */
+function validHookName(name) {
+	return /^[a-z][a-z0-9_-]{0,63}$/.test(name);
+}
+function userHookPath(name, home = homedir()) {
+	return join(hookScriptPaths(home).userDir, `${name}.cjs`);
+}
+/**
+* 安装用户 hooks 脚本（写入 ~/.aifly/hooks/<name>.cjs 并校验可加载、
+* 至少导出一个钩子函数）。内建同名允许覆盖（用户库优先语义）。
+*/
+function installUserHook(name, content, home = homedir()) {
+	if (!validHookName(name)) throw new Error(`invalid hook script name '${name}' (lowercase identifier, 1-64 chars)`);
+	const paths = hookScriptPaths(home);
+	mkdirSync(paths.userDir, { recursive: true });
+	const path = userHookPath(name, home);
+	writeFileSync(path, content, { mode: 384 });
+	const mod = loadHookScript(name, home);
+	if (mod === void 0) {
+		rmSync(path, { force: true });
+		throw new Error("hook script failed to load (syntax error or non-object export)");
+	}
+	const fns = exportedHookFns(mod);
+	if (fns.length === 0) {
+		rmSync(path, { force: true });
+		throw new Error("hook script exports no hook functions (named function exports required)");
+	}
+	return {
+		name,
+		path,
+		fns
+	};
+}
+/** 删除用户脚本（内建库不可删；未命中报错）。 */
+function removeUserHook(name, home = homedir()) {
+	const path = userHookPath(name, home);
+	if (!existsSync(path)) {
+		const builtin = join(hookScriptPaths(home).builtinDir, `${name}.cjs`);
+		if (existsSync(builtin)) throw new Error(`'${name}' is a builtin hook script (cannot be removed)`);
+		throw new Error(`hook script '${name}' not found`);
+	}
+	rmSync(path, { force: true });
+	return { path };
+}
+/** 读取用户脚本内容（get/show；内建脚本返回包内内容）。 */
+function readHookScript(name, home = homedir()) {
+	const user = userHookPath(name, home);
+	if (existsSync(user)) return {
+		path: user,
+		source: "user",
+		content: readFileSync(user, "utf8")
+	};
+	const builtin = join(hookScriptPaths(home).builtinDir, `${name}.cjs`);
+	if (existsSync(builtin)) return {
+		path: builtin,
+		source: "builtin",
+		content: readFileSync(builtin, "utf8")
+	};
+}
+//#endregion
+export { removeUserHook as a, readHookScript as i, disposeHookSubscriptions as n, resolveHookValue as o, installUserHook as r, discoverHooks as t };

package/dist/hooks-DUrXA7PL.mjs

@@ -0,0 +1,142 @@
+import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
+import { n as parseArgv } from "./args-CSxXW9eD.mjs";
+import { d as str, l as resolveDataDir } from "./common-C51SAE5f.mjs";
+import { a as removeUserHook, i as readHookScript, n as disposeHookSubscriptions, o as resolveHookValue, r as installUserHook, t as discoverHooks } from "./hook-CvAMGts4.mjs";
+import { t as SecretsStore } from "./secrets-1Hmddmwy.mjs";
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+//#region src/cli/commands/provider/hooks.ts
+const SPEC = {
+	data: {
+		type: "string",
+		tilde: true
+	},
+	file: {
+		type: "string",
+		tilde: true
+	},
+	stdin: { type: "boolean" },
+	"arg": { type: "multi" },
+	bearer: { type: "boolean" }
+};
+const USAGE = `usage:
+  ai-fly hooks list
+  ai-fly hooks get <name>
+  ai-fly hooks add <name> [--file <path> | --stdin]
+  ai-fly hooks remove <name>
+  ai-fly hooks run <name> <fn> [--arg k=v]... [--bearer]
+hooks 脚本：内建库 + ~/.aifly/hooks/<name>.cjs（用户覆盖内建）；
+导出函数名 = 钩子清单（authHeader 为 HTTP 认证头钩子）。`;
+async function run(argv, ctx = {}) {
+	const home = ctx.homedir ?? homedir();
+	try {
+		const sub = argv[0];
+		const rest = argv.slice(1);
+		switch (sub) {
+			case void 0:
+			case "list": return list(rest, home);
+			case "get": return get(rest, home);
+			case "add": return add(rest, home);
+			case "remove": return remove(rest, home);
+			case "run": return await runHook(rest, home);
+			default: throw new UsageError(`error: unknown hooks subcommand '${sub}'\n${USAGE}`);
+		}
+	} catch (err) {
+		return reportCliError(err);
+	}
+}
+function parse(rest, home) {
+	const { options, positionals } = parseArgv([...rest], SPEC, { homedir: home });
+	if (positionals.length > 2) throw new UsageError(`error: unexpected argument '${positionals[2]}'`);
+	return {
+		options,
+		positionals
+	};
+}
+function list(rest, home) {
+	parse(rest, home);
+	const scripts = discoverHooks(home);
+	const out = (line) => {
+		process.stdout.write(`${line}\n`);
+	};
+	out(`hooks scripts (${scripts.length})`);
+	for (const s of scripts) out(`  ${s.name.padEnd(16)} [${s.source}]  ${s.fns.join(", ")}`);
+	if (scripts.length > 0) out(`use: ai-fly service add <name> --preset <id> --hooks <script>  |  ai-fly hooks run <name> <fn>`);
+	else out("(install one: ai-fly hooks add <name> --file <path.cjs>)");
+	return 0;
+}
+function get(rest, home) {
+	const { positionals } = parse(rest, home);
+	const name = positionals[0];
+	if (name === void 0) throw new UsageError("error: hooks get requires a <name> argument");
+	const found = readHookScript(name, home);
+	if (found === void 0) throw new UsageError(`error: hook script '${name}' not found (see: ai-fly hooks list)`);
+	process.stdout.write(`hooks script '${name}' [${found.source}]\n  path: ${found.path}\n`);
+	process.stdout.write(found.content);
+	if (!found.content.endsWith("\n")) process.stdout.write("\n");
+	return 0;
+}
+function add(rest, home) {
+	const { options, positionals } = parse(rest, home);
+	const name = positionals[0];
+	if (name === void 0) throw new UsageError("error: hooks add requires a <name> argument");
+	let content = options.stdin === true ? void 0 : str(options.file) === void 0 ? void 0 : readContent(str(options.file));
+	if (options.stdin === true) content = readStdin();
+	if (content === void 0) throw new UsageError("error: hooks add requires --file <path> or --stdin for the script content");
+	const installed = installUserHook(name, content, home);
+	process.stdout.write(`hooks script installed: ${installed.name}\n  path: ${installed.path}\n  fns : ${installed.fns.join(", ")}\n`);
+	return 0;
+}
+function readContent(path) {
+	return readFileSync(path, "utf8");
+}
+function readStdin() {
+	try {
+		return readFileSync(0, "utf8");
+	} catch {
+		throw new UsageError("error: --stdin requires piped input (cat script.cjs | ai-fly hooks add <name> --stdin)");
+	}
+}
+function remove(rest, home) {
+	const { positionals } = parse(rest, home);
+	const name = positionals[0];
+	if (name === void 0) throw new UsageError("error: hooks remove requires a <name> argument");
+	const removed = removeUserHook(name, home);
+	process.stdout.write(`hooks script removed: ${name}\n  path: ${removed.path}\n`);
+	return 0;
+}
+async function runHook(rest, home) {
+	const { options, positionals } = parse(rest, home);
+	const [name, fn] = positionals;
+	if (name === void 0 || fn === void 0) throw new UsageError("error: hooks run requires <name> <fn> arguments (see: ai-fly hooks list)");
+	const args = {};
+	for (const raw of options.arg ?? []) {
+		const idx = raw.indexOf("=");
+		if (idx <= 0) throw new UsageError(`error: --arg expects k=v (got '${raw}')`);
+		args[raw.slice(0, idx)] = raw.slice(idx + 1);
+	}
+	const store = SecretsStore.open(resolveDataDir(str(options.data), home));
+	let value;
+	try {
+		value = await resolveHookValue(fn, {
+			script: name,
+			home,
+			args,
+			secrets: (n) => store.resolve(n)?.headerValue
+		});
+	} catch {
+		value = void 0;
+	} finally {
+		await disposeHookSubscriptions();
+	}
+	if (value === void 0) {
+		process.stderr.write(`error: hook '${name}.${fn}' did not yield a value (script/fn missing, args invalid, or credential absent)\n`);
+		return 1;
+	}
+	if (options.bearer === true) value = `Bearer ${value}`;
+	const masked = value.length <= 6 ? "*".repeat(value.length) : `${value.slice(0, 2)}${"*".repeat(Math.min(value.length - 4, 12))}${value.slice(-2)} (len ${value.length})`;
+	process.stdout.write(`ok: ${name}.${fn} -> ${masked}\n`);
+	process.exit(0);
+}
+//#endregion
+export { run };

package/dist/{import-rpBFh_pa.mjs → import-CTkKGPsa.mjs}

@@ -1,9 +1,9 @@
 import { n as UsageError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { n as consumersRoot, s as listKeyrings } from "./store-CQShpYar.mjs";
-import { a as ringsForRun, i as printListeners, n as ctxHomedir, o as waitForSignals, r as ctxOut, t as createSdkFabricFactory } from "./common-CgxCXeTt.mjs";
-import { a as importLink, i as formatLinkPreview, n as decodeShareLink, r as formatKeyringSummary } from "./join-u1DqTU3U.mjs";
-import { n as createFabricProviderTransport, t as startEngine } from "./runtime-DNs9GtGp.mjs";
+import { n as consumersRoot, s as listKeyrings } from "./store-DOFDy1rY.mjs";
+import { a as ringsForRun, i as printListeners, n as ctxHomedir, o as waitForSignals, r as ctxOut, t as createSdkFabricFactory } from "./common-CanLn0Qt.mjs";
+import { a as importLink, i as formatLinkPreview, n as decodeShareLink, r as formatKeyringSummary } from "./join-BRow9_3-.mjs";
+import { n as createFabricProviderTransport, t as startEngine } from "./runtime-C_pLA5F0.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/import.ts
 async function run(argv, ctx = {}) {

package/dist/{join-u1DqTU3U.mjs → join-BRow9_3-.mjs}

@@ -1,7 +1,7 @@
 import { t as CliError } from "./errors-BGtxPkM7.mjs";
-import { o as decodeZ32, s as randomZ32 } from "./rpc-contract-5qyWzT5t.mjs";
-import { l as SERVICE_ENTRY_SCHEMA } from "./frames-BDqvhB2Y.mjs";
-import { a as hasFabricIdentity, c as loadKeyring, f as saveKeyring, h as upsertKey, i as findKeyringDir, l as mergeImportView, o as keyringDir, r as fabricDir } from "./store-CQShpYar.mjs";
+import { o as decodeZ32, s as randomZ32 } from "./rpc-contract-cB5SuyQ_.mjs";
+import { l as SERVICE_ENTRY_SCHEMA } from "./frames-BDz8buix.mjs";
+import { a as hasFabricIdentity, c as loadKeyring, f as saveKeyring, h as upsertKey, i as findKeyringDir, l as mergeImportView, o as keyringDir, r as fabricDir } from "./store-DOFDy1rY.mjs";
 import { existsSync, mkdirSync, renameSync, rmSync } from "node:fs";
 import { join } from "node:path";
 import { z } from "zod";

package/dist/{join-CaFx5yoF.mjs → join-d-pqyf8e.mjs}

@@ -1,8 +1,8 @@
 import { n as UsageError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { n as consumersRoot } from "./store-CQShpYar.mjs";
-import { n as ctxHomedir, r as ctxOut, t as createSdkFabricFactory } from "./common-CgxCXeTt.mjs";
-import { o as joinDevice } from "./join-u1DqTU3U.mjs";
+import { n as consumersRoot } from "./store-DOFDy1rY.mjs";
+import { n as ctxHomedir, r as ctxOut, t as createSdkFabricFactory } from "./common-CanLn0Qt.mjs";
+import { o as joinDevice } from "./join-BRow9_3-.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/join.ts
 async function run(argv, ctx = {}) {

package/dist/{key-BiEp995L.mjs → key-CTL_AXOh.mjs}

@@ -1,6 +1,6 @@
 import { n as UsageError, r as reportCliError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { c as requireString, d as str, l as resolveDataDir, r as openStore } from "./common-CqxqIg6D.mjs";
+import { c as requireString, d as str, l as resolveDataDir, r as openStore } from "./common-C51SAE5f.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/provider/key.ts
 const SPEC = {
@@ -8,11 +8,13 @@ const SPEC = {
 		type: "string",
 		tilde: true
 	},
-	group: { type: "string" }
+	group: { type: "string" },
+	name: { type: "string" }
 };
 const USAGE = `usage:
-  ai-fly key issue --group <name> [--data <dir>]
+  ai-fly key issue --group <name> [--name <keyName>] [--data <dir>]
   ai-fly key list [--data <dir>]
+  ai-fly key show <keyId> [--data <dir>]
   ai-fly key revoke <keyId> [--data <dir>]`;
 async function run(argv, ctx = {}) {
 	try {
@@ -21,22 +23,24 @@ async function run(argv, ctx = {}) {
 		const sub = positionals[0];
 		if (sub === "issue") return issue(options, home);
 		if (sub === "list") return list(options, home);
+		if (sub === "show") return show(options, positionals, home);
 		if (sub === "revoke") return revoke(options, positionals, home);
 		if (sub === void 0) throw new UsageError(USAGE);
-		throw new UsageError(`error: unknown key subcommand '${sub}' (known: issue, list, revoke)`);
+		throw new UsageError(`error: unknown key subcommand '${sub}' (known: issue, list, show, revoke)`);
 	} catch (err) {
 		return reportCliError(err);
 	}
 }
 function issue(options, home) {
 	const group = requireString(str(options.group), "group");
-	const issued = openStore(resolveDataDir(str(options.data), home)).issueKey(group);
+	const name = str(options.name) ?? "default";
+	const issued = openStore(resolveDataDir(str(options.data), home)).issueKey(group, name);
 	process.stdout.write([
-		`key issued for group '${group}'`,
+		`key '${name}' issued for group '${group}'`,
 		`  keyId: ${issued.keyId}`,
 		`  key : ${issued.key}`,
 		"",
-		"This secret is shown only once. Store it now (password manager or share link).",
+		"The raw key is stored locally - re-show it anytime with: ai-fly key show " + issued.keyId,
 		"Revoke with: ai-fly key revoke " + issued.keyId,
 		""
 	].join("\n"));
@@ -51,11 +55,23 @@ function list(options, home) {
 	const lines = [];
 	for (const k of keys) {
 		const status = k.revokedAt === void 0 ? "active" : `revoked at ${new Date(k.revokedAt).toISOString()}`;
-		lines.push(`${k.keyId}  group=${k.group}  created=${new Date(k.createdAt).toISOString()}  ${status}`);
+		const name = k.name ?? "(unnamed)";
+		lines.push(`${k.keyId}  name=${name}  group=${k.group}  created=${new Date(k.createdAt).toISOString()}  ${status}`);
 	}
 	process.stdout.write(`${lines.join("\n")}\n`);
 	return 0;
 }
+function show(options, positionals, home) {
+	const keyId = positionals[1];
+	if (keyId === void 0) throw new UsageError("error: key show requires a <keyId> argument");
+	const material = openStore(resolveDataDir(str(options.data), home)).getKeyMaterial(keyId);
+	if (material === void 0) {
+		process.stdout.write(`key '${keyId}' has no retrievable material (missing, revoked, or issued before raw storage)\n`);
+		return 1;
+	}
+	process.stdout.write(`${material}\n`);
+	return 0;
+}
 function revoke(options, positionals, home) {
 	const keyId = positionals[1];
 	if (keyId === void 0) throw new UsageError("error: key revoke requires a <keyId> argument");

package/dist/{key-KcUU3yhJ.mjs → key-D_66hrWW.mjs}

@@ -1,8 +1,8 @@
 import { n as UsageError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { n as consumersRoot } from "./store-CQShpYar.mjs";
-import { n as ctxHomedir, r as ctxOut } from "./common-CgxCXeTt.mjs";
-import { r as formatKeyringSummary, t as addKey } from "./join-u1DqTU3U.mjs";
+import { n as consumersRoot } from "./store-DOFDy1rY.mjs";
+import { n as ctxHomedir, r as ctxOut } from "./common-CanLn0Qt.mjs";
+import { r as formatKeyringSummary, t as addKey } from "./join-BRow9_3-.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/key.ts
 async function run(argv, ctx = {}) {

package/dist/{local-test-C3HGjGY3.mjs → local-test-BZHGo22F.mjs}

@@ -1,4 +1,4 @@
-import { n as ROUTE_LOCAL_PREFIX } from "./rpc-contract-5qyWzT5t.mjs";
+import { n as ROUTE_LOCAL_PREFIX } from "./rpc-contract-cB5SuyQ_.mjs";
 //#region src/consumer/local-test.ts
 const DEFAULT_TIMEOUT_MS = 2e4;
 const BODY_EXCERPT_MAX = 2e3;

package/dist/{models-dev-2UfQoIpQ.mjs → models-dev-CDEyd2k3.mjs}

@@ -1,4 +1,4 @@
-import { t as PRESET_SCHEMA } from "./rpc-contract-5qyWzT5t.mjs";
+import { t as PRESET_SCHEMA } from "./rpc-contract-cB5SuyQ_.mjs";
 import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
@@ -58,6 +58,26 @@ var providers_default = {
 			}],
 			"notes": "OpenAI-compatible at /v1/* (chat completions + responses, codex-ready); Anthropic-compatible surface at /anthropic/* (per vendor docs).",
 			"source": "https://models.dev/api.json + https://api-docs.deepseek.com/guides/anthropic_api"
+		},
+		{
+			"id": "codex",
+			"label": "Codex (ChatGPT backend)",
+			"apiForm": "openai-responses",
+			"baseUrl": "https://chatgpt.com",
+			"defaultPort": 4306,
+			"matchDomains": ["chatgpt.com"],
+			"routes": [{
+				"forms": ["openai-responses"],
+				"localPrefix": "/codex",
+				"upstreamPrefix": "/backend-api/codex"
+			}],
+			"authHeader": {
+				"hook": "authHeader",
+				"bearer": true
+			},
+			"notes": "ChatGPT Codex backend (Responses API). Auth reads ~/.codex/auth.json per request (codex CLI login state; no key needed). Point agents at OPENAI_BASE_URL=http://127.0.0.1:<port>/codex with wire_api=responses. WS clients: ws://127.0.0.1:<port>/codex/responses upgrades to wss upstream.",
+			"source": "https://github.com/openai/codex (~/.codex/auth.json login state)",
+			"hooks": "codex"
 		}
 	]
 };

package/dist/{mux-CS1zhF4W.mjs → mux-BaIDugDq.mjs}

@@ -1,5 +1,5 @@
-import { s as randomZ32 } from "./rpc-contract-5qyWzT5t.mjs";
-import { a as FRAME_TYPE_NAME, d as isKnownFrameType, i as FRAME_TYPE, r as FRAME_HEADER_SCHEMAS, t as ERROR_CODE, u as classifySchemaFailure } from "./frames-BDqvhB2Y.mjs";
+import { s as randomZ32 } from "./rpc-contract-cB5SuyQ_.mjs";
+import { a as FRAME_TYPE_NAME, d as isKnownFrameType, i as FRAME_TYPE, r as FRAME_HEADER_SCHEMAS, t as ERROR_CODE, u as classifySchemaFailure } from "./frames-BDz8buix.mjs";
 //#region src/wire/codec.ts
 const WIRE_MAGIC_PREFIX = "aifly";
 const WIRE_MAGIC = "aifly1";

package/dist/{ports-BRXd5UXh.mjs → ports-TQ4tWmiJ.mjs}

@@ -1,7 +1,7 @@
 import { n as UsageError } from "./errors-BGtxPkM7.mjs";
 import { n as parseArgv } from "./args-CSxXW9eD.mjs";
-import { m as setPort, n as consumersRoot, s as listKeyrings } from "./store-CQShpYar.mjs";
-import { n as ctxHomedir, r as ctxOut } from "./common-CgxCXeTt.mjs";
+import { m as setPort, n as consumersRoot, s as listKeyrings } from "./store-DOFDy1rY.mjs";
+import { n as ctxHomedir, r as ctxOut } from "./common-CanLn0Qt.mjs";
 import { i as validatePortArg, n as desiredPortFor } from "./ports-pI59MtmI.mjs";
 import { homedir } from "node:os";
 //#region src/cli/commands/consumer/ports.ts