demian-cli 1.0.7 → 1.0.9

package/dist/vscode-worker.mjs

@@ -1,8 +1,8 @@
 import { createRequire } from 'node:module'; const require = createRequire(import.meta.url);
 
 // src/vscode-worker.ts
-import { mkdir as mkdir13, rm as rm4, writeFile as writeFile12 } from "node:fs/promises";
-import path31 from "node:path";
+import { mkdir as mkdir15, rm as rm4, writeFile as writeFile14 } from "node:fs/promises";
+import path35 from "node:path";
 
 // src/permissions/presets.ts
 var PERMISSION_PRESETS = ["deny", "ask", "auto", "full"];
@@ -61,7 +61,7 @@ function isExitCommand(input2) {
 function isStopCommand(input2) {
   return input2.trim().toLowerCase() === "/stop";
 }
-function isCompactCommand2(input2) {
+function isCompactCommand(input2) {
   return input2.trim().toLowerCase() === "/compact";
 }
 function isRetryCommand(input2) {
@@ -971,7 +971,7 @@ var TuiStore = class {
       this.#state.promptInput = "";
       this.#state.promptError = void 0;
       this.#state.activity = "starting session";
-      if (!isCompactCommand2(prompt)) {
+      if (!isCompactCommand(prompt)) {
         this.#clearTurnDiff();
         this.#clearResolvedWorkPlan();
       }
@@ -986,7 +986,7 @@ var TuiStore = class {
       this.#state.promptInput = "";
       this.#state.promptError = void 0;
       this.#state.activity = "starting session";
-      if (!isCompactCommand2(queued)) {
+      if (!isCompactCommand(queued)) {
         this.#clearTurnDiff();
         this.#clearResolvedWorkPlan();
       }
@@ -1234,7 +1234,7 @@ var TuiStore = class {
       this.stopActiveTask();
       return;
     }
-    if (isCompactCommand2(prompt)) {
+    if (isCompactCommand(prompt)) {
       this.#resolvePrompt(prompt);
       return;
     }
@@ -1996,7 +1996,7 @@ var TuiStore = class {
     this.#state.promptInput = "";
     this.#state.promptError = void 0;
     this.#state.activity = prompt ? "starting session" : "cancelled";
-    if (prompt && !isCompactCommand2(prompt)) {
+    if (prompt && !isCompactCommand(prompt)) {
       this.#clearTurnDiff();
       this.#clearResolvedWorkPlan();
     }
@@ -2006,7 +2006,7 @@ var TuiStore = class {
   }
   #rememberPrompt(prompt) {
     const value = prompt.trim();
-    if (!value || isExitCommand(value) || isStopCommand(value) || isCompactCommand2(value) || isRetryCommand(value)) return;
+    if (!value || isExitCommand(value) || isStopCommand(value) || isCompactCommand(value) || isRetryCommand(value)) return;
     if (this.#promptHistory.at(-1) === value) {
       this.#state.canRetryLastPrompt = true;
       return;
@@ -2327,7 +2327,7 @@ function buildClaudeCodePlanExecutionPrompt(planText, requestText) {
 }
 
 // src/ui/tui/controller.ts
-import path30 from "node:path";
+import path32 from "node:path";
 
 // src/agents/types.ts
 function normalizeAgent(input2) {
@@ -2421,7 +2421,7 @@ var claudeCodeAgent = {
   name: "claudecode",
   description: "Claude Code external coding agent for focused delegated workspace tasks.",
   mode: "subagent",
-  provider: { profile: "claudecode-subagent", permissionProfile: "build" },
+  provider: { profile: "claudecode", permissionProfile: "build" },
   tools: [],
   systemPrompt: [
     "You are demian claudecode, a Claude Code external runtime working as a sub agent for Demian.",
@@ -2466,7 +2466,7 @@ var claudeCodeExplorerAgent = {
   name: "claudecode-explorer",
   description: "Claude Code external read-only explorer for cowork repository inspection.",
   mode: "subagent",
-  provider: { profile: "claudecode-subagent", permissionProfile: "explore" },
+  provider: { profile: "claudecode", permissionProfile: "explore" },
   tools: [],
   systemPrompt: [
     "You are demian claudecode-explorer, a Claude Code external runtime working as a read-only cowork sub agent for Demian.",
@@ -2501,7 +2501,7 @@ var claudeCodeBuilderAgent = {
   name: "claudecode-builder",
   description: "Claude Code-backed builder for bounded cowork implementation tasks.",
   mode: "subagent",
-  provider: { profile: "claudecode-subagent", permissionProfile: "build" },
+  provider: { profile: "claudecode", permissionProfile: "build" },
   tools: [],
   systemPrompt: [
     "You are demian claudecode-builder, a Claude Code external runtime working as a writer cowork sub agent for Demian.",
@@ -2806,7 +2806,7 @@ import { readFile as readFile6 } from "node:fs/promises";
 import crypto4 from "node:crypto";
 import fs7 from "node:fs";
 import os7 from "node:os";
-import path12 from "node:path";
+import path13 from "node:path";
 
 // src/providers/retry.ts
 var RETRY_STATUS = /* @__PURE__ */ new Set([408, 409, 425, 429, 500, 502, 503, 504]);
@@ -3199,12 +3199,14 @@ var dynamicImport2 = new Function("specifier", "return import(specifier)");
 var AnthropicProvider = class {
   id = "anthropic";
   #apiKey;
+  #baseURL;
   #defaultModel;
   #defaultMaxTokens;
   #client;
   #onRetry;
   constructor(config) {
     this.#apiKey = config.apiKey;
+    this.#baseURL = config.baseURL;
     this.#defaultModel = config.defaultModel;
     this.#defaultMaxTokens = config.defaultMaxTokens ?? 4096;
     this.#client = config.client;
@@ -3249,7 +3251,7 @@ var AnthropicProvider = class {
     if (this.#client) return this.#client;
     if (!this.#apiKey) throw new Error("AnthropicProvider requires apiKey");
     const Anthropic = await loadAnthropicConstructor();
-    this.#client = new Anthropic({ apiKey: this.#apiKey });
+    this.#client = new Anthropic({ apiKey: this.#apiKey, baseURL: this.#baseURL });
     return this.#client;
   }
 };
@@ -3482,19 +3484,56 @@ import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import fs2 from "node:fs";
 import { chmod, mkdir as mkdir2, readFile as readFile2, rename, writeFile as writeFile2 } from "node:fs/promises";
-import path2 from "node:path";
+import path3 from "node:path";
 
 // src/providers/codex-state.ts
 import crypto from "node:crypto";
 import fs from "node:fs";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
+import os2 from "node:os";
+import path2 from "node:path";
+
+// src/path-expansion.ts
 import os from "node:os";
 import path from "node:path";
+function expandPathReferences(value) {
+  let expanded = expandTilde(value);
+  expanded = expanded.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}|\$([A-Za-z_][A-Za-z0-9_]*)/g, (match, braced, bare) => envPathValue(braced ?? bare) ?? match);
+  expanded = expanded.replace(/%([A-Za-z_][A-Za-z0-9_]*)%/g, (match, name) => envPathValue(name) ?? match);
+  return expanded;
+}
+function resolveExpandedPath(value) {
+  return path.resolve(expandPathReferences(value));
+}
+function expandTilde(value) {
+  if (value === "~") return os.homedir();
+  if (value.startsWith("~/") || value.startsWith("~\\")) return path.join(os.homedir(), value.slice(2));
+  return value;
+}
+function envPathValue(name) {
+  if (!name) return void 0;
+  const value = processEnvValue(name);
+  if (value !== void 0) return value;
+  const upper = name.toUpperCase();
+  if (upper === "HOME" || upper === "USERPROFILE") return os.homedir();
+  if (process.platform === "win32" && upper === "HOMEDRIVE") return path.win32.parse(os.homedir()).root.replace(/[\\/]$/, "");
+  if (process.platform === "win32" && upper === "HOMEPATH") return os.homedir().replace(/^[A-Za-z]:/, "");
+  return void 0;
+}
+function processEnvValue(name) {
+  if (process.env[name] !== void 0) return process.env[name];
+  if (process.platform !== "win32") return void 0;
+  const upper = name.toUpperCase();
+  const key = Object.keys(process.env).find((item) => item.toUpperCase() === upper);
+  return key ? process.env[key] : void 0;
+}
+
+// src/providers/codex-state.ts
 function resolveCodexHome(configured) {
-  return path.resolve(expandCodexPath(configured ?? process.env.CODEX_HOME ?? path.join(os.homedir(), ".codex")));
+  return resolveExpandedPath(configured ?? process.env.CODEX_HOME ?? path2.join(os2.homedir(), ".codex"));
 }
 async function loadOrCreateInstallationId(codexHome) {
-  const filePath = path.join(codexHome, "installation_id");
+  const filePath = path2.join(codexHome, "installation_id");
   try {
     const existing = (await readFile(filePath, "utf8")).trim();
     if (isUuid(existing)) return existing;
@@ -3516,15 +3555,6 @@ function isNodeError(error, code) {
 function fileExists(filePath) {
   return fs.existsSync(filePath);
 }
-function expandCodexPath(value) {
-  let expanded = value;
-  if (expanded === "~") return os.homedir();
-  if (expanded.startsWith("~/")) expanded = path.join(os.homedir(), expanded.slice(2));
-  return expanded.replace(/\$\{([A-Z_][A-Z0-9_]*)\}|\$([A-Z_][A-Z0-9_]*)/gi, (match, braced, bare) => {
-    const name = braced ?? bare;
-    return name && process.env[name] !== void 0 ? process.env[name] : match;
-  });
-}
 
 // src/providers/codex-auth.ts
 var execFileAsync = promisify(execFile);
@@ -3747,10 +3777,10 @@ var CodexAuthStore = class {
   }
 };
 function authFilePath(codexHome) {
-  return path2.join(codexHome, "auth.json");
+  return path3.join(codexHome, "auth.json");
 }
 function codexKeyringAccount(codexHome) {
-  const resolved = path2.resolve(codexHome);
+  const resolved = path3.resolve(codexHome);
   const canonical = fs2.existsSync(resolved) ? fs2.realpathSync.native(resolved) : resolved;
   const hash = crypto2.createHash("sha256").update(canonical).digest("hex").slice(0, 16);
   return `cli|${hash}`;
@@ -4179,8 +4209,8 @@ import { randomUUID } from "node:crypto";
 import { execFile as execFile2 } from "node:child_process";
 import fs3 from "node:fs";
 import { chmod as chmod2, mkdir as mkdir3, readFile as readFile3, rename as rename2, writeFile as writeFile3 } from "node:fs/promises";
-import os2 from "node:os";
-import path3 from "node:path";
+import os3 from "node:os";
+import path4 from "node:path";
 import { promisify as promisify2 } from "node:util";
 var execFileAsync2 = promisify2(execFile2);
 var CLAUDE_CODE_KEYRING_SERVICE = "Claude Code-credentials";
@@ -4213,7 +4243,7 @@ function getSharedClaudeCodeAuthStore(options2 = {}) {
     proactiveRefreshMinutes: options2.proactiveRefreshMinutes ?? 30,
     refreshCache: options2.refreshCache ?? "claude-store",
     refreshTokenURL: options2.refreshTokenURL ?? DEFAULT_CLAUDE_CODE_REFRESH_TOKEN_URL,
-    keychainAccount: options2.keychainAccount ?? os2.userInfo().username
+    keychainAccount: options2.keychainAccount ?? os3.userInfo().username
   });
   const existing = sharedAuthStores2.get(key);
   if (existing) return existing;
@@ -4242,7 +4272,7 @@ var ClaudeCodeAuthStore = class {
     this.#proactiveRefreshMinutes = options2.proactiveRefreshMinutes ?? 30;
     this.#refreshCache = options2.refreshCache ?? "claude-store";
     this.#refreshTokenURL = options2.refreshTokenURL ?? DEFAULT_CLAUDE_CODE_REFRESH_TOKEN_URL;
-    this.#keychainAccount = options2.keychainAccount ?? os2.userInfo().username;
+    this.#keychainAccount = options2.keychainAccount ?? os3.userInfo().username;
     this.#fetch = options2.fetch ?? fetch;
     this.#keyring = options2.keyring ?? new MacOSSecurityKeyring2();
   }
@@ -4443,10 +4473,10 @@ var ClaudeCodeAuthStore = class {
   }
 };
 function resolveClaudeConfigDir(configured) {
-  return path3.resolve(expandClaudePath(configured ?? process.env.CLAUDE_CONFIG_DIR ?? path3.join(os2.homedir(), ".claude")));
+  return resolveExpandedPath(configured ?? process.env.CLAUDE_CONFIG_DIR ?? path4.join(os3.homedir(), ".claude"));
 }
 function claudeCodeAuthFilePath(claudeConfigDir) {
-  return path3.join(claudeConfigDir, ".credentials.json");
+  return path4.join(claudeConfigDir, ".credentials.json");
 }
 function oauthPayload(auth) {
   const raw = auth.claudeAiOauth;
@@ -4505,15 +4535,6 @@ async function writeClaudeCodeAuthFileAtomic(claudeConfigDir, auth) {
   await chmod2(tempPath, 384);
   await rename2(tempPath, filePath);
 }
-function expandClaudePath(value) {
-  let expanded = value;
-  if (expanded === "~") return os2.homedir();
-  if (expanded.startsWith("~/")) expanded = path3.join(os2.homedir(), expanded.slice(2));
-  return expanded.replace(/\$\{([A-Z_][A-Z0-9_]*)\}|\$([A-Z_][A-Z0-9_]*)/gi, (match, braced, bare) => {
-    const name = braced ?? bare;
-    return name && process.env[name] !== void 0 ? process.env[name] : match;
-  });
-}
 var MacOSSecurityKeyring2 = class {
   async load(service, account) {
     if (process.platform !== "darwin") return void 0;
@@ -4750,6 +4771,111 @@ function parseClaudeCodeErrorBody(body) {
   }
 }
 
+// src/providers/ollama.ts
+var OllamaProvider = class {
+  id = "ollama";
+  #baseURL;
+  #apiKey;
+  #defaultModel;
+  #fetch;
+  #onRetry;
+  constructor(config) {
+    this.#baseURL = config.baseURL.replace(/\/+$/, "");
+    this.#apiKey = config.apiKey;
+    this.#defaultModel = config.defaultModel;
+    this.#fetch = config.fetch ?? fetch;
+    this.#onRetry = config.onRetry;
+  }
+  async chat(req) {
+    return chatWithRetry(() => this.#rawChat(req), {
+      signal: req.signal,
+      onRetry: this.#onRetry
+    });
+  }
+  async #rawChat(req) {
+    const response = await this.#fetch(`${this.#baseURL}/chat`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        ...this.#authHeaders()
+      },
+      body: JSON.stringify({
+        model: req.model || this.#defaultModel,
+        messages: req.messages.map(toOllamaMessage),
+        ...req.tools.length > 0 ? { tools: req.tools.map(toOpenAITool) } : {},
+        stream: false,
+        ...req.temperature !== void 0 ? { options: { temperature: req.temperature } } : {}
+      }),
+      signal: req.signal
+    });
+    const text = await response.text();
+    if (!response.ok) throw new ProviderHttpError(response.status, text, parseRetryAfter(response.headers.get("retry-after")));
+    return normalizeOllamaResponse(text ? JSON.parse(text) : {});
+  }
+  #authHeaders() {
+    return this.#apiKey ? { authorization: `Bearer ${this.#apiKey}` } : {};
+  }
+};
+function toOllamaMessage(message) {
+  if (message.role === "tool") {
+    return {
+      role: "tool",
+      content: message.content,
+      tool_name: message.name
+    };
+  }
+  const out = {
+    role: message.role,
+    content: typeof message.content === "string" ? message.content : JSON.stringify(message.content ?? "")
+  };
+  if (message.role === "assistant" && message.toolCalls?.length) {
+    out.tool_calls = message.toolCalls.map((call) => ({
+      function: {
+        name: call.name,
+        arguments: call.input ?? {}
+      }
+    }));
+  }
+  return out;
+}
+function normalizeOllamaResponse(raw) {
+  const data = raw;
+  const toolCalls = [];
+  for (const call of data.message?.tool_calls ?? []) {
+    const name = call.function?.name;
+    if (!name) continue;
+    toolCalls.push({
+      id: call.id ?? `call_${toolCalls.length + 1}`,
+      name,
+      input: normalizeToolArguments(call.function?.arguments)
+    });
+  }
+  const message = {
+    role: "assistant",
+    content: data.message?.content ?? null,
+    ...toolCalls.length ? { toolCalls } : {}
+  };
+  return {
+    message,
+    toolCalls,
+    stopReason: toolCalls.length ? "tool_use" : data.done_reason === "length" ? "max_tokens" : "end_turn",
+    usage: data.prompt_eval_count !== void 0 || data.eval_count !== void 0 ? {
+      inputTokens: data.prompt_eval_count,
+      outputTokens: data.eval_count,
+      totalTokens: (data.prompt_eval_count ?? 0) + (data.eval_count ?? 0)
+    } : void 0,
+    raw
+  };
+}
+function normalizeToolArguments(value) {
+  if (typeof value !== "string") return value ?? {};
+  try {
+    return JSON.parse(value);
+  } catch {
+    return {};
+  }
+}
+
 // src/external-runtime/claudecode-cli.ts
 import { spawn as spawn3 } from "node:child_process";
 import readline from "node:readline";
@@ -4757,7 +4883,7 @@ import readline from "node:readline";
 // src/external-runtime/claudecode-attachments.ts
 import crypto3 from "node:crypto";
 import fs4 from "node:fs";
-import path4 from "node:path";
+import path5 from "node:path";
 async function resolveClaudeCodeAttachmentPrompt(runtimeLabel, config, req) {
   const attachments = req.attachments ?? [];
   if (attachments.length === 0) return req.prompt;
@@ -4799,7 +4925,7 @@ function unsupportedAttachmentError(runtimeLabel, count, detail) {
 }
 function formatAttachmentReference(value, cwd) {
   if (isUrl(value)) return imageMimeFromPath(value) ? `[image: ${value} (${imageMimeFromPath(value)}, remote)]` : `[attachment: ${value}]`;
-  const target = path4.isAbsolute(value) ? value : path4.resolve(cwd, value);
+  const target = path5.isAbsolute(value) ? value : path5.resolve(cwd, value);
   try {
     const stats = fs4.statSync(target);
     if (!stats.isFile()) return `[attachment: ${value} (${stats.size} bytes)]`;
@@ -4816,7 +4942,7 @@ function isUrl(value) {
 }
 function imageMimeFromPath(value) {
   const pathname = isUrl(value) ? new URL(value).pathname : value;
-  const ext = path4.extname(pathname).toLowerCase();
+  const ext = path5.extname(pathname).toLowerCase();
   if (ext === ".png") return "image/png";
   if (ext === ".jpg" || ext === ".jpeg") return "image/jpeg";
   if (ext === ".gif") return "image/gif";
@@ -4848,15 +4974,14 @@ function hasAnthropicApiKeyEnv(env = process.env) {
 
 // src/external-runtime/claudecode-paths.ts
 import fs5 from "node:fs";
-import os3 from "node:os";
-import path5 from "node:path";
+import path6 from "node:path";
 function resolveClaudeCodeCliPath(configured) {
   if (configured) return expandHome(configured);
   if (process.env.CLAUDE_CODE_CLI) return expandHome(process.env.CLAUDE_CODE_CLI);
   const candidates = ["~/.local/bin/claude", "claude"];
   for (const candidate of candidates) {
     const expanded = expandHome(candidate);
-    if (path5.isAbsolute(expanded)) {
+    if (path6.isAbsolute(expanded)) {
       if (isExecutableFile(expanded)) return expanded;
       continue;
     }
@@ -4865,9 +4990,7 @@ function resolveClaudeCodeCliPath(configured) {
   return void 0;
 }
 function expandHome(value) {
-  if (value === "~") return os3.homedir();
-  if (value.startsWith("~/")) return path5.join(os3.homedir(), value.slice(2));
-  return value;
+  return expandPathReferences(value);
 }
 function isExecutableFile(filePath) {
   try {
@@ -5133,14 +5256,14 @@ function numberValue2(value) {
 // src/external-runtime/session-lock.ts
 import { mkdir as mkdir4, open, readFile as readFile4, unlink } from "node:fs/promises";
 import os4 from "node:os";
-import path6 from "node:path";
+import path7 from "node:path";
 var DEFAULT_STALE_MS = 30 * 60 * 1e3;
 async function acquireClaudeCodeSessionLock(sessionId, options2 = {}) {
-  const dir = options2.dir ?? path6.join(os4.homedir(), ".demian", "claude-sessions");
+  const dir = options2.dir ?? path7.join(os4.homedir(), ".demian", "claude-sessions");
   const staleMs = options2.staleMs ?? DEFAULT_STALE_MS;
   const now2 = options2.now ?? (() => Date.now());
   await mkdir4(dir, { recursive: true });
-  const lockPath = path6.join(dir, `${encodeURIComponent(sessionId)}.lock`);
+  const lockPath = path7.join(dir, `${encodeURIComponent(sessionId)}.lock`);
   for (let attempt = 0; attempt < 2; attempt++) {
     try {
       const handle = await open(lockPath, "wx");
@@ -5204,14 +5327,14 @@ function isAlreadyExists(error) {
 // src/external-runtime/usage-ledger.ts
 import { mkdir as mkdir5, readFile as readFile5, rename as rename3, writeFile as writeFile4 } from "node:fs/promises";
 import os5 from "node:os";
-import path7 from "node:path";
+import path8 from "node:path";
 var processLedger = /* @__PURE__ */ new Map();
 var ClaudeCodeUsageLedger = class {
   #scope;
   #filePath;
   constructor(options2 = {}) {
     this.#scope = options2.scope ?? "process";
-    this.#filePath = options2.filePath ?? path7.join(os5.homedir(), ".demian", "usage-ledger.json");
+    this.#filePath = options2.filePath ?? path8.join(os5.homedir(), ".demian", "usage-ledger.json");
   }
   async spentUsd(key, now2 = /* @__PURE__ */ new Date()) {
     if (this.#scope === "process") return processLedger.get(processKey(key)) ?? 0;
@@ -5242,7 +5365,7 @@ var ClaudeCodeUsageLedger = class {
     return { version: 1, buckets: {} };
   }
   async #write(file) {
-    await mkdir5(path7.dirname(this.#filePath), { recursive: true });
+    await mkdir5(path8.dirname(this.#filePath), { recursive: true });
     const temp = `${this.#filePath}.${process.pid}.tmp`;
     await writeFile4(temp, `${JSON.stringify(file, null, 2)}
 `, "utf8");
@@ -24903,10 +25026,10 @@ function now() {
 }
 
 // src/permissions/engine.ts
-import path10 from "node:path";
+import path11 from "node:path";
 
 // src/permissions/grants.ts
-import path8 from "node:path";
+import path9 from "node:path";
 
 // src/util.ts
 function stableStringify(value) {
@@ -24961,8 +25084,8 @@ function grantKeyFor(tool, input2, cwd) {
   }
   if (tool === "write_file" || tool === "edit_file") {
     const filePath = typeof object2.path === "string" ? object2.path : "";
-    const parent = filePath ? path8.dirname(path8.resolve(cwd, filePath)) : cwd;
-    return `${tool}:${path8.relative(cwd, parent) || "."}`;
+    const parent = filePath ? path9.dirname(path9.resolve(cwd, filePath)) : cwd;
+    return `${tool}:${path9.relative(cwd, parent) || "."}`;
   }
   return `${tool}:${stableStringify(input2)}`;
 }
@@ -24989,30 +25112,30 @@ function firstCommandTokens(command, count) {
 }
 
 // src/workspace/paths.ts
-import path9 from "node:path";
+import path10 from "node:path";
 function normalizePathForMatch(value) {
-  return value.split(path9.sep).join("/");
+  return value.split(path10.sep).join("/");
 }
 function isInsidePath(root, candidate) {
-  const relative = path9.relative(path9.resolve(root), path9.resolve(candidate));
-  return relative === "" || !relative.startsWith("..") && !path9.isAbsolute(relative);
+  const relative = path10.relative(path10.resolve(root), path10.resolve(candidate));
+  return relative === "" || !relative.startsWith("..") && !path10.isAbsolute(relative);
 }
 function resolveInsideCwd(cwd, inputPath) {
   if (typeof inputPath !== "string" || inputPath.length === 0) {
     throw new Error("path must be a non-empty string");
   }
-  const resolved = path9.resolve(cwd, inputPath);
+  const resolved = path10.resolve(cwd, inputPath);
   if (!isInsidePath(cwd, resolved)) {
     throw new Error(`Path is outside the workspace: ${inputPath}`);
   }
   return resolved;
 }
 function relativeToCwd(cwd, absolutePath) {
-  const relative = path9.relative(cwd, absolutePath);
+  const relative = path10.relative(cwd, absolutePath);
   return normalizePathForMatch(relative || ".");
 }
 function isEnvFile(filePath) {
-  const base = path9.basename(filePath);
+  const base = path10.basename(filePath);
   if (base === ".env.example") return false;
   return base === ".env" || base.startsWith(".env.");
 }
@@ -25119,7 +25242,7 @@ var PermissionEngine = class {
   #hardDeny(tool, input2, grantKey) {
     const paths = inputPaths(tool, input2);
     for (const item of paths) {
-      const resolved = path10.resolve(this.#cwd, item);
+      const resolved = path11.resolve(this.#cwd, item);
       if (!isInsidePath(this.#cwd, resolved)) {
         return {
           decision: "deny",
@@ -25173,7 +25296,7 @@ function matchesRule(rule, tool, input2, cwd) {
   if (rule.match.pathGlob) {
     const paths = inputPaths(tool, input2);
     if (paths.length === 0) return false;
-    if (!paths.some((item) => matchesPathRule(rule.match?.pathGlob, relativeToCwd(cwd, path10.resolve(cwd, item))))) {
+    if (!paths.some((item) => matchesPathRule(rule.match?.pathGlob, relativeToCwd(cwd, path11.resolve(cwd, item))))) {
       return false;
     }
   }
@@ -25220,7 +25343,7 @@ function rulePriority(rule, ref) {
 }
 function matchesPathRule(pattern, relativePath) {
   if (!pattern) return true;
-  if (path10.basename(relativePath) === ".env.example" && pattern.includes(".env.*")) return false;
+  if (path11.basename(relativePath) === ".env.example" && pattern.includes(".env.*")) return false;
   return matchGlob(pattern, relativePath);
 }
 function mostSpecificRule(rules, input2, cwd, ref) {
@@ -25298,13 +25421,13 @@ function permissionLabel(req) {
   if ((req.tool === "write_file" || req.tool === "edit_file" || req.tool === "read_file") && typeof inputObject.path === "string") {
     return `${req.tool}: ${inputObject.path}`;
   }
-  const path32 = typeof inputObject.path === "string" ? inputObject.path : typeof inputObject.file_path === "string" ? inputObject.file_path : void 0;
-  if (path32) return `${tool}: ${path32}`;
+  const path36 = typeof inputObject.path === "string" ? inputObject.path : typeof inputObject.file_path === "string" ? inputObject.file_path : void 0;
+  if (path36) return `${tool}: ${path36}`;
   return tool;
 }
 
 // src/workspace/write-scope.ts
-import path11 from "node:path";
+import path12 from "node:path";
 var WRITE_TOOLS = /* @__PURE__ */ new Set(["write_file", "edit_file", "Write", "Edit", "MultiEdit", "NotebookEdit"]);
 var WORKSPACE_SCOPE = "**";
 function normalizeWriteScope(cwd, scope) {
@@ -25326,7 +25449,7 @@ function enforceToolWriteScope(input2) {
   if (paths.length === 0) return { ok: true, paths: [] };
   const checked = [];
   for (const target of paths) {
-    const resolved = path11.resolve(input2.cwd, target);
+    const resolved = path12.resolve(input2.cwd, target);
     const relative = relativeToCwd(input2.cwd, resolved);
     checked.push(relative);
     const allowed = isPathAllowedByWriteScope(input2.cwd, target, input2.writeScope);
@@ -25350,7 +25473,7 @@ function outOfScopeDiffFiles(cwd, summary, writeScope) {
   return out;
 }
 function isPathAllowedByWriteScope(cwd, inputPath, writeScope) {
-  const resolved = path11.resolve(cwd, inputPath);
+  const resolved = path12.resolve(cwd, inputPath);
   if (!isInsidePath(cwd, resolved)) {
     return { ok: false, error: "path is outside the workspace", paths: [inputPath] };
   }
@@ -25369,9 +25492,9 @@ function normalizeScopePattern(cwd, raw) {
   if (!value) return { ok: false, error: "writeScope entries must be non-empty." };
   if (value.includes("\0")) return { ok: false, error: "writeScope entries must not contain NUL bytes." };
   const hasGlob2 = /[*?[\]{}]/.test(value);
-  if (path11.isAbsolute(value)) {
+  if (path12.isAbsolute(value)) {
     if (hasGlob2) return { ok: false, error: `writeScope absolute globs are not supported: ${raw}` };
-    const resolved = path11.resolve(value);
+    const resolved = path12.resolve(value);
     if (!isInsidePath(cwd, resolved)) return { ok: false, error: `writeScope path is outside the workspace: ${raw}` };
     value = relativeToCwd(cwd, resolved);
   }
@@ -25748,6 +25871,7 @@ function claudeCodePreviewEnabled(config = {}, env = process.env) {
 }
 
 // src/config.ts
+var BUILTIN_PROVIDER_ORDER = ["openai", "anthropic", "gemini", "groq", "azure", "lmstudio", "ollama-local", "ollama-cloud", "llamacpp", "vllm", "codex", "claudecode"];
 var CLAUDE_CODE_SONNET_MODEL = "claude-sonnet-4-6";
 var CLAUDE_CODE_OPUS_MODEL = "claude-opus-4-7";
 var CLAUDE_CODE_MODELS = [CLAUDE_CODE_SONNET_MODEL, CLAUDE_CODE_OPUS_MODEL];
@@ -25785,7 +25909,7 @@ var defaultConfig = {
     maxConcurrentExpensive: 1,
     maxConcurrentWriters: 1,
     maxConcurrentPerProvider: {
-      "claudecode-subagent": 1
+      claudecode: 1
     },
     tokenBudget: null,
     defaultMergeStrategy: "synthesize",
@@ -25840,6 +25964,7 @@ var defaultConfig = {
     defaultProvider: "brave",
     providers: {
       brave: {
+        apiKey: "",
         apiKeyEnv: "BRAVE_SEARCH_API_KEY",
         endpoint: "https://api.search.brave.com/res/v1/web/search",
         count: 10,
@@ -25848,12 +25973,14 @@ var defaultConfig = {
         safeSearch: "moderate"
       },
       tavily: {
+        apiKey: "",
         apiKeyEnv: "TAVILY_API_KEY",
         endpoint: "https://api.tavily.com/search",
         maxResults: 5,
         searchDepth: "basic"
       },
       exa: {
+        apiKey: "",
         apiKeyEnv: "EXA_API_KEY",
         endpoint: "https://api.exa.ai/search",
         numResults: 5,
@@ -25907,73 +26034,113 @@ var defaultConfig = {
   providers: {
     openai: {
       type: "openai-compatible",
-      model: "openai-model-name",
       baseURL: "https://api.openai.com/v1",
-      apiKeyEnv: "OPENAI_API_KEY"
+      apiKey: "",
+      apiKeyEnv: "OPENAI_API_KEY",
+      catalog: {
+        type: "openai-models",
+        endpoint: "https://api.openai.com/v1/models"
+      }
+    },
+    anthropic: {
+      type: "anthropic",
+      baseURL: "https://api.anthropic.com/v1",
+      apiKey: "",
+      apiKeyEnv: "ANTHROPIC_API_KEY",
+      catalog: {
+        type: "anthropic-models",
+        endpoint: "https://api.anthropic.com/v1/models"
+      }
     },
     gemini: {
       type: "openai-compatible",
-      model: "gemini-model-name",
       baseURL: "https://generativelanguage.googleapis.com/v1beta/openai/",
-      apiKeyEnv: "GOOGLE_API_KEY"
+      apiKey: "",
+      apiKeyEnv: "GEMINI_API_KEY",
+      apiKeyEnvAliases: ["GOOGLE_API_KEY"],
+      catalog: {
+        type: "gemini-openai-models",
+        endpoint: "https://generativelanguage.googleapis.com/v1beta/openai/models"
+      }
+    },
+    groq: {
+      type: "openai-compatible",
+      baseURL: "https://api.groq.com/openai/v1",
+      apiKey: "",
+      apiKeyEnv: "GROQ_API_KEY",
+      catalog: {
+        type: "groq-models",
+        endpoint: "https://api.groq.com/openai/v1/models"
+      }
     },
-    ollama: {
+    azure: {
       type: "openai-compatible",
-      model: "local-coder-model",
-      baseURL: "http://localhost:11434/v1",
-      apiKey: "ollama",
-      quirks: { omitTemperature: true }
+      auth: { type: "api-key", header: "api-key" },
+      modelProfiles: [
+        {
+          name: "azure-example",
+          displayName: "Azure example",
+          model: "azure-deployment-name",
+          baseURL: "https://example.openai.azure.com/openai/v1",
+          apiKey: "",
+          apiKeyEnv: "AZURE_OPENAI_API_KEY"
+        }
+      ]
     },
     lmstudio: {
       type: "openai-compatible",
-      model: "local-coder-model",
       baseURL: "http://localhost:1234/v1",
-      apiKey: "lm-studio"
+      apiKey: "lm-studio",
+      modelProfiles: [],
+      catalog: {
+        type: "openai-compatible-models",
+        endpoint: "http://localhost:1234/v1/models"
+      }
     },
-    vllm: {
+    "ollama-local": {
       type: "openai-compatible",
-      model: "local-coder-model",
-      baseURL: "http://localhost:8000/v1",
-      apiKey: "vllm"
+      baseURL: "http://localhost:11434/v1",
+      apiKey: "ollama",
+      modelProfiles: [],
+      quirks: { omitTemperature: true },
+      catalog: {
+        type: "openai-compatible-models",
+        endpoint: "http://localhost:11434/v1/models"
+      }
+    },
+    "ollama-cloud": {
+      type: "ollama",
+      baseURL: "https://ollama.com/api",
+      apiKey: "",
+      apiKeyEnv: "OLLAMA_API_KEY",
+      modelProfiles: [],
+      catalog: {
+        type: "ollama-tags",
+        endpoint: "https://ollama.com/api/tags"
+      }
     },
     llamacpp: {
       type: "openai-compatible",
-      model: "local-coder-model",
       baseURL: "http://localhost:8080/v1",
-      apiKey: "llama.cpp"
-    },
-    openrouter: {
-      type: "openai-compatible",
-      model: "provider/model-name",
-      baseURL: "https://openrouter.ai/api/v1",
-      apiKeyEnv: "OPENROUTER_API_KEY"
-    },
-    together: {
-      type: "openai-compatible",
-      model: "provider/model-name",
-      baseURL: "https://api.together.xyz/v1",
-      apiKeyEnv: "TOGETHER_API_KEY"
-    },
-    groq: {
-      type: "openai-compatible",
-      model: "provider/model-name",
-      baseURL: "https://api.groq.com/openai/v1",
-      apiKeyEnv: "GROQ_API_KEY"
+      apiKey: "llama.cpp",
+      modelProfiles: [],
+      catalog: {
+        type: "openai-compatible-models",
+        endpoint: "http://localhost:8080/v1/models"
+      }
     },
-    azure: {
+    vllm: {
       type: "openai-compatible",
-      model: "azure-deployment-name",
-      baseURL: "https://example.openai.azure.com/openai/v1",
-      apiKeyEnv: "AZURE_OPENAI_API_KEY"
-    },
-    anthropic: {
-      type: "anthropic",
-      model: "anthropic-model-name",
-      apiKeyEnv: "ANTHROPIC_API_KEY"
+      baseURL: "http://localhost:8000/v1",
+      apiKey: "vllm",
+      modelProfiles: [],
+      catalog: {
+        type: "openai-compatible-models",
+        endpoint: "http://localhost:8000/v1/models"
+      }
     },
     codex: {
       type: "codex",
-      model: "gpt-5.1-codex",
       baseURL: "https://chatgpt.com/backend-api/codex",
       authStore: "auto",
       allowApiKeyFallback: false,
@@ -25985,6 +26152,9 @@ var defaultConfig = {
           effort: "medium",
           summary: "auto"
         }
+      },
+      catalog: {
+        type: "codex-oauth-models"
       }
     },
     claudecode: {
@@ -26003,67 +26173,37 @@ var defaultConfig = {
       useBareMode: false,
       usageLedgerScope: "process",
       sessionLock: true,
-      abortPolicy: "record-only"
-    },
-    "claudecode-plan": {
-      type: "claudecode",
-      runtime: "agent-sdk",
-      model: CLAUDE_CODE_SONNET_MODEL,
-      models: [...CLAUDE_CODE_MODELS],
-      permissionProfile: "plan",
-      cliPath: "~/.local/bin/claude",
-      cwdMode: "session",
-      historyPolicy: "passthrough-resume",
-      onInvalidResume: "fresh",
-      attachmentFallback: "block",
-      allowSubagents: false,
-      sanitizeApiKeyEnv: true,
-      authPreflight: true,
-      useBareMode: false,
-      usageLedgerScope: "process",
-      sessionLock: true,
-      abortPolicy: "record-only",
-      hidden: true
-    },
-    "claudecode-subagent": {
-      type: "claudecode",
-      runtime: "agent-sdk",
-      model: CLAUDE_CODE_SONNET_MODEL,
-      models: [...CLAUDE_CODE_MODELS],
-      permissionProfile: "build",
-      cliPath: "~/.local/bin/claude",
-      cwdMode: "session",
-      historyPolicy: "passthrough-resume",
-      onInvalidResume: "fresh",
-      attachmentFallback: "block",
-      allowSubagents: false,
-      sanitizeApiKeyEnv: true,
-      authPreflight: true,
-      useBareMode: false,
-      usageLedgerScope: "process",
-      sessionLock: true,
       abortPolicy: "record-only",
-      hidden: true
+      catalog: {
+        type: "claudecode-supported-models"
+      }
     }
   }
 };
 async function loadConfig(options2) {
   const configs = [];
-  const userConfigDir = path12.join(os7.homedir(), ".demian");
-  const projectConfigDir = path12.join(options2.cwd, ".demian");
-  const configPaths = [
-    path12.join(userConfigDir, "config.json"),
-    path12.join(userConfigDir, "config.jsond"),
-    path12.join(projectConfigDir, "config.json"),
-    path12.join(projectConfigDir, "config.jsond"),
-    options2.configPath
-  ].filter(Boolean);
+  const userConfigDir = path13.join(os7.homedir(), ".demian");
+  const configPaths = [path13.join(userConfigDir, "config.json"), path13.join(userConfigDir, "config.jsond"), options2.configPath].filter(Boolean);
   for (const filePath of configPaths) {
     if (!fs7.existsSync(filePath)) continue;
-    configs.push(parseConfigText(await readFile6(filePath, "utf8"), filePath));
+    const parsed = parseConfigText(await readFile6(filePath, "utf8"), filePath);
+    warnIfV1Config(parsed, filePath);
+    configs.push(parsed);
   }
   return configs.reduce((acc, item) => mergeConfig(acc, item), structuredClone(defaultConfig));
 }
+function warnIfV1Config(parsed, filePath) {
+  if (parsed.version === 2) return;
+  const providers = parsed.providers ?? {};
+  const hasLegacyShape = Object.values(providers).some((provider) => {
+    const candidate = provider;
+    return (typeof candidate.model === "string" || Array.isArray(candidate.models)) && !Array.isArray(candidate.modelProfiles);
+  });
+  if (!hasLegacyShape && parsed.version === void 0 && Object.keys(providers).length === 0) return;
+  if (!hasLegacyShape) return;
+  process.stderr.write(`[demian] warning: ${filePath} uses the v1 schema (provider.model/models). v2 expects modelProfiles. Run \`demian config init\` to scaffold a v2 template.
+`);
+}
 function parseConfigText(text, filePath) {
   try {
     return JSON.parse(filePath.endsWith(".jsond") ? stripJsonD(text) : text);
@@ -26270,7 +26410,137 @@ function mergeConfig(base, overlay) {
   };
 }
 function normalizeProviderAlias(providerName) {
-  return providerName === "claudecode-plan" ? "claudecode" : providerName;
+  if (providerName === "claudecode-plan" || providerName === "claudecode-subagent") return "claudecode";
+  if (providerName === "ollama") return "ollama-local";
+  return providerName;
+}
+function sortProviderNames(names) {
+  const order = new Map(BUILTIN_PROVIDER_ORDER.map((name, index) => [name, index]));
+  return [...names].sort((left, right) => {
+    const leftIndex = order.get(left);
+    const rightIndex = order.get(right);
+    if (leftIndex !== void 0 && rightIndex !== void 0) return leftIndex - rightIndex;
+    if (leftIndex !== void 0) return -1;
+    if (rightIndex !== void 0) return 1;
+    return left.localeCompare(right);
+  });
+}
+function providerModelProfiles(providerName, providerConfig) {
+  const explicit = Array.isArray(providerConfig.modelProfiles) ? providerConfig.modelProfiles.filter((profile) => typeof profile?.model === "string" && profile.model.trim()).map((profile) => ({
+    ...profile,
+    name: profile.name?.trim() || profile.displayName?.trim() || profile.model.trim(),
+    displayName: profile.displayName?.trim() || profile.name?.trim() || profile.model.trim(),
+    model: profile.model.trim()
+  })) : [];
+  const seenNames = /* @__PURE__ */ new Set();
+  const seenDisplayNames = /* @__PURE__ */ new Set();
+  const seenModels = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const profile of explicit) {
+    if (seenNames.has(profile.name)) {
+      process.stderr.write(`[demian] warning: provider ${providerName} has duplicate modelProfile name "${profile.name}". Later entry ignored.
+`);
+      continue;
+    }
+    if (profile.displayName && seenDisplayNames.has(profile.displayName)) {
+      process.stderr.write(`[demian] warning: provider ${providerName} has duplicate modelProfile displayName "${profile.displayName}". Later entry ignored.
+`);
+      continue;
+    }
+    seenNames.add(profile.name);
+    if (profile.displayName) seenDisplayNames.add(profile.displayName);
+    seenModels.add(profile.model);
+    out.push(profile);
+  }
+  const legacy = [...typeof providerConfig.model === "string" && providerConfig.model.trim() ? [providerConfig.model.trim()] : [], ...(providerConfig.models ?? []).filter((model) => typeof model === "string" && model.trim())];
+  for (const model of legacy) {
+    const trimmed = model.trim();
+    if (!trimmed || seenModels.has(trimmed)) continue;
+    seenModels.add(trimmed);
+    const name = trimmed;
+    if (!seenNames.has(name)) seenNames.add(name);
+    out.push({ name, displayName: name, model: trimmed });
+  }
+  const fallback = fallbackModelForProvider(providerName, providerConfig);
+  if (out.length === 0 && fallback) out.push({ name: fallback, displayName: fallback, model: fallback });
+  return out;
+}
+function providerModelOptions(providerName, providerConfig) {
+  return providerModelProfiles(providerName, providerConfig).filter((profile) => !profile.hidden).map((profile) => displayModelForProfile(profile));
+}
+function defaultModelForProvider(providerName, providerConfig) {
+  return providerModelProfiles(providerName, providerConfig)[0]?.model ?? "";
+}
+function displayModelForProfile(profile) {
+  return profile.displayName?.trim() || profile.name?.trim() || profile.model;
+}
+function defaultDisplayModelForProvider(providerName, providerConfig) {
+  const profile = providerModelProfiles(providerName, providerConfig)[0];
+  return profile ? displayModelForProfile(profile) : defaultModelForProvider(providerName, providerConfig);
+}
+function resolveConfiguredApiKey(providerConfig) {
+  if (providerConfig.apiKey) return { value: providerConfig.apiKey };
+  for (const envName of [providerConfig.apiKeyEnv, ...providerConfig.apiKeyEnvAliases ?? []]) {
+    if (!envName) continue;
+    const value = process.env[envName];
+    if (value) return { value, envName };
+  }
+  return { envName: providerConfig.apiKeyEnv ?? providerConfig.apiKeyEnvAliases?.[0] };
+}
+function resolveProviderRuntimeConfig(config, selection) {
+  const providerName = normalizeProviderAlias(selection.providerName);
+  const providerConfig = resolveProviderConfig(config, providerName);
+  const profiles = providerModelProfiles(providerName, providerConfig);
+  let profile;
+  if (selection.modelProfileName) profile = profiles.find((item) => item.name === selection.modelProfileName);
+  if (!profile && selection.model) profile = profiles.find((item) => item.displayName === selection.model);
+  if (!profile && selection.model) profile = profiles.find((item) => item.model === selection.model);
+  if (!profile) profile = profiles[0];
+  if (!profile) {
+    const model = selection.model ?? defaultModelForProvider(providerName, providerConfig);
+    if (!model) throw new Error(`Provider ${providerName} has no model. Run \`demian config models ${providerName} --refresh\` or add a model profile.`);
+    return { providerName, providerConfig, model };
+  }
+  const merged = mergeModelProfile(providerConfig, profile);
+  return {
+    providerName,
+    providerConfig: merged,
+    model: profile.model,
+    modelProfileName: profile.name
+  };
+}
+function mergeModelProfile(providerConfig, profile) {
+  const merged = {
+    ...providerConfig,
+    ...definedOnly({
+      baseURL: profile.baseURL,
+      apiKey: nonEmptyString(profile.apiKey),
+      apiKeyEnv: profile.apiKeyEnv,
+      apiKeyEnvAliases: profile.apiKeyEnvAliases,
+      auth: profile.auth,
+      headers: profile.headers,
+      quirks: profile.quirks,
+      maxTokens: profile.maxTokens
+    }),
+    model: profile.model
+  };
+  return merged;
+}
+function definedOnly(input2) {
+  return Object.fromEntries(Object.entries(input2).filter(([, value]) => value !== void 0));
+}
+function nonEmptyString(value) {
+  return typeof value === "string" && value.length > 0 ? value : void 0;
+}
+function fallbackModelForProvider(providerName, providerConfig) {
+  if (typeof providerConfig.model === "string" && providerConfig.model.trim()) return providerConfig.model.trim();
+  if (providerName === "openai") return "gpt-5.5";
+  if (providerName === "anthropic") return CLAUDE_CODE_SONNET_MODEL;
+  if (providerName === "codex" || providerConfig.type === "codex") return "gpt-5.5";
+  if (providerName === "claudecode") return CLAUDE_CODE_SONNET_MODEL;
+  if (providerName === "gemini") return "gemini-2.5-pro";
+  if (providerName === "groq") return "openai/gpt-oss-120b";
+  return void 0;
 }
 function migrateProviderConfig(provider, baseProvider) {
   if (isLegacyClaudeCodeShape(provider)) {
@@ -26352,12 +26622,14 @@ function resolveAgentMode(config, flagMode) {
   return "single-agent";
 }
 function resolveProviderConfig(config, providerName) {
-  const provider = config.providers[providerName];
+  const normalized = normalizeProviderAlias(providerName);
+  const provider = config.providers[normalized];
   if (!provider) throw new Error(`Unknown provider: ${providerName}`);
   return provider;
 }
 function resolveProvider(providerConfig, options2 = {}) {
   const model = options2.model ?? providerConfig.model;
+  if (!model) throw new Error("Provider has no selected model. Choose a model or add a model profile.");
   if (providerConfig.type === "claudecode") {
     throw new Error("claudecode is an external agent runtime. Use resolveExecutionBackend().");
   }
@@ -26404,12 +26676,28 @@ function resolveProvider(providerConfig, options2 = {}) {
     };
   }
   if (providerConfig.type === "anthropic") {
-    const apiKey2 = providerConfig.apiKey ?? (providerConfig.apiKeyEnv ? process.env[providerConfig.apiKeyEnv] : void 0);
+    const apiKey2 = resolveConfiguredApiKey(providerConfig).value;
     if (!apiKey2) {
       throw new Error(`Missing API key for provider. Set ${providerConfig.apiKeyEnv ?? "apiKey"} or configure apiKey.`);
     }
     return {
       provider: new AnthropicProvider({
+        apiKey: apiKey2,
+        baseURL: providerConfig.baseURL,
+        defaultModel: model,
+        onRetry: options2.onRetry
+      }),
+      model
+    };
+  }
+  if (providerConfig.type === "ollama") {
+    const apiKey2 = resolveConfiguredApiKey(providerConfig).value;
+    if (!apiKey2) {
+      throw new Error(`Missing API key for provider. Set ${providerConfig.apiKeyEnv ?? "apiKey"} or configure apiKey.`);
+    }
+    return {
+      provider: new OllamaProvider({
+        baseURL: providerConfig.baseURL,
         apiKey: apiKey2,
         defaultModel: model,
         onRetry: options2.onRetry
@@ -26417,7 +26705,7 @@ function resolveProvider(providerConfig, options2 = {}) {
       model
     };
   }
-  const apiKey = providerConfig.apiKey ?? (providerConfig.apiKeyEnv ? process.env[providerConfig.apiKeyEnv] : void 0);
+  const apiKey = resolveConfiguredApiKey(providerConfig).value;
   if (!apiKey) {
     throw new Error(`Missing API key for provider. Set ${providerConfig.apiKeyEnv ?? "apiKey"} or configure apiKey.`);
   }
@@ -26436,6 +26724,7 @@ function resolveProvider(providerConfig, options2 = {}) {
 }
 function resolveExecutionBackend(providerConfig, options2 = {}) {
   const model = options2.model ?? providerConfig.model;
+  if (!model) throw new Error("Provider has no selected model. Choose a model or add a model profile.");
   if (providerConfig.type === "claudecode") {
     const runtimeConfig = options2.config || providerConfig.permissionProfile ? resolveClaudeCodeRuntimeConfig(providerConfig, options2.config ?? defaultConfig, options2.agent) : providerConfig;
     return {
@@ -26479,7 +26768,8 @@ var CLAUDE_CODE_PERMISSION_PROFILE_KEYS = ["permissionMode", "defaultDecision",
 
 // src/transcript.ts
 import { mkdir as mkdir6, appendFile, writeFile as writeFile5 } from "node:fs/promises";
-import path13 from "node:path";
+import os8 from "node:os";
+import path14 from "node:path";
 var TranscriptWriter = class {
   filePath;
   #enabled;
@@ -26487,8 +26777,8 @@ var TranscriptWriter = class {
   #queue = Promise.resolve();
   constructor(options2) {
     this.#enabled = options2.enabled !== false;
-    const dir = path13.join(options2.cwd, ".demian", "transcripts", options2.sessionId);
-    this.filePath = path13.join(dir, "session.jsonl");
+    const dir = path14.join(options2.storageDir ?? defaultDemianStorageDir(), "transcripts", options2.sessionId);
+    this.filePath = path14.join(dir, "session.jsonl");
     this.#ready = this.#enabled ? mkdir6(dir, { recursive: true }).then(() => writeFile5(this.filePath, "", { flag: "a" })) : Promise.resolve();
   }
   write(event) {
@@ -26504,12 +26794,15 @@ var TranscriptWriter = class {
     await this.#queue;
   }
 };
+function defaultDemianStorageDir() {
+  return path14.join(os8.homedir(), ".demian");
+}
 
 // src/external-runtime/snapshot-diff.ts
 import { createHash as createHash2 } from "node:crypto";
 import { createReadStream } from "node:fs";
 import { readdir, readFile as readFile7, stat as stat3 } from "node:fs/promises";
-import path14 from "node:path";
+import path15 from "node:path";
 
 // src/workspace/diff.ts
 var CONTEXT_LINES = 3;
@@ -26719,7 +27012,7 @@ async function diffWorkspaceSnapshot(before) {
 }
 async function walk(root, relativeDir, entries, options2) {
   if (entries.size >= options2.maxFiles) return;
-  const absoluteDir = path14.join(root, relativeDir);
+  const absoluteDir = path15.join(root, relativeDir);
   let items;
   try {
     items = await readdir(absoluteDir, { withFileTypes: true });
@@ -26730,8 +27023,8 @@ async function walk(root, relativeDir, entries, options2) {
     if (entries.size >= options2.maxFiles) return;
     if (item.name.startsWith(".") && item.name !== ".env.example" && SKIP_DIRS.has(item.name)) continue;
     if (SKIP_DIRS.has(item.name)) continue;
-    const relativePath = normalizeRelativePath(path14.join(relativeDir, item.name));
-    const absolutePath = path14.join(root, relativePath);
+    const relativePath = normalizeRelativePath(path15.join(relativeDir, item.name));
+    const absolutePath = path15.join(root, relativePath);
     if (item.isDirectory()) {
       await walk(root, relativePath, entries, options2);
       continue;
@@ -26767,7 +27060,7 @@ function sha256File(filePath) {
   });
 }
 function normalizeRelativePath(value) {
-  return value.split(path14.sep).join("/");
+  return value.split(path15.sep).join("/");
 }
 
 // src/external-runtime/session-runner.ts
@@ -27202,7 +27495,7 @@ function safeJson(value) {
 }
 
 // src/hooks/dispatcher.ts
-import path16 from "node:path";
+import path17 from "node:path";
 
 // src/hooks/command.ts
 import { spawn as spawn4 } from "node:child_process";
@@ -27295,7 +27588,7 @@ var blockDangerousBashHook = {
 };
 
 // src/hooks/builtin/protect-env-files.ts
-import path15 from "node:path";
+import path16 from "node:path";
 var protectEnvFilesHook = {
   name: "protect-env-files",
   event: "PreToolUse",
@@ -27303,7 +27596,7 @@ var protectEnvFilesHook = {
   run(ctx) {
     if (ctx.toolName !== "write_file" && ctx.toolName !== "edit_file") return { decision: "allow" };
     const input2 = ctx.toolInput && typeof ctx.toolInput === "object" ? ctx.toolInput : {};
-    const filePath = typeof input2.path === "string" ? path15.resolve(ctx.cwd, input2.path) : "";
+    const filePath = typeof input2.path === "string" ? path16.resolve(ctx.cwd, input2.path) : "";
     if (filePath && isEnvFile(filePath)) {
       return {
         decision: "block",
@@ -27340,7 +27633,7 @@ var maskSecretsHook = {
 };
 
 // src/hooks/builtin/inject-env-info.ts
-import os8 from "node:os";
+import os9 from "node:os";
 var injectEnvInfoHook = {
   name: "inject-env-info",
   event: "SessionStart",
@@ -27349,7 +27642,7 @@ var injectEnvInfoHook = {
       decision: "allow",
       patch: {
         systemNote: [
-          `Environment: ${os8.type()} ${os8.release()} (${os8.platform()}/${os8.arch()})`,
+          `Environment: ${os9.type()} ${os9.release()} (${os9.platform()}/${os9.arch()})`,
           `cwd: ${ctx.cwd}`,
           `provider: ${ctx.provider ?? "unknown"}`,
           `model: ${ctx.model ?? "unknown"}`,
@@ -27418,14 +27711,14 @@ function matchesHook(match, ctx) {
     const input2 = ctx.toolInput && typeof ctx.toolInput === "object" ? ctx.toolInput : {};
     const filePath = typeof input2.path === "string" ? input2.path : typeof input2.workdir === "string" ? input2.workdir : void 0;
     if (!filePath) return false;
-    if (!matchGlob(match.pathGlob, relativeToCwd(ctx.cwd, path16.resolve(ctx.cwd, filePath)))) return false;
+    if (!matchGlob(match.pathGlob, relativeToCwd(ctx.cwd, path17.resolve(ctx.cwd, filePath)))) return false;
   }
   return true;
 }
 
 // src/multimodal.ts
 import { readFile as readFile8, stat as stat4 } from "node:fs/promises";
-import path17 from "node:path";
+import path18 from "node:path";
 var DEFAULT_MAX_IMAGE_BYTES = 8 * 1024 * 1024;
 async function buildUserContent(prompt, images = [], options2) {
   if (images.length === 0) return prompt;
@@ -27453,7 +27746,7 @@ async function imageToUrl(input2, options2) {
   return `data:${mime};base64,${bytes.toString("base64")}`;
 }
 function mimeFromPath(filePath) {
-  switch (path17.extname(filePath).toLowerCase()) {
+  switch (path18.extname(filePath).toLowerCase()) {
     case ".jpg":
     case ".jpeg":
       return "image/jpeg";
@@ -27464,15 +27757,15 @@ function mimeFromPath(filePath) {
     case ".webp":
       return "image/webp";
     default:
-      throw new Error(`Unsupported image extension: ${path17.extname(filePath) || "(none)"}`);
+      throw new Error(`Unsupported image extension: ${path18.extname(filePath) || "(none)"}`);
   }
 }
 
 // src/permissions/persistent-grants.ts
 import { mkdir as mkdir7, readFile as readFile9, writeFile as writeFile6 } from "node:fs/promises";
 import fs8 from "node:fs";
-import os9 from "node:os";
-import path18 from "node:path";
+import os10 from "node:os";
+import path19 from "node:path";
 var DEFAULT_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var PersistentGrantStore = class {
   filePath;
@@ -27510,15 +27803,15 @@ var PersistentGrantStore = class {
     };
   }
   async #write(file) {
-    await mkdir7(path18.dirname(this.filePath), { recursive: true });
+    await mkdir7(path19.dirname(this.filePath), { recursive: true });
     await writeFile6(this.filePath, `${JSON.stringify(file, null, 2)}
 `, { mode: 384 });
   }
 };
 function resolveGrantPath(cwd, config) {
-  if (config.path) return path18.resolve(cwd, config.path);
-  if ((config.scope ?? "project") === "user") return path18.join(os9.homedir(), ".demian", "grants.json");
-  return path18.join(cwd, ".demian", "grants.json");
+  if (config.path) return path19.resolve(cwd, config.path);
+  if ((config.scope ?? "project") === "user") return path19.join(os10.homedir(), ".demian", "grants.json");
+  return path19.join(cwd, ".demian", "grants.json");
 }
 function isGrantRecord(value) {
   if (!value || typeof value !== "object") return false;
@@ -27952,16 +28245,16 @@ function fail(content, metadata) {
 
 // src/tools/output.ts
 import { mkdir as mkdir8, writeFile as writeFile7 } from "node:fs/promises";
-import path19 from "node:path";
+import path20 from "node:path";
 var DEFAULT_CAP_BYTES = 32 * 1024;
 var HALF_PREVIEW_BYTES = 16 * 1024;
 async function capToolOutput(result, options2) {
   const capBytes = options2.capBytes ?? DEFAULT_CAP_BYTES;
   const bytes = Buffer.byteLength(result.content, "utf8");
   if (bytes <= capBytes) return result;
-  const dir = path19.join(options2.cwd, ".demian", "tmp");
+  const dir = path20.join(options2.cwd, ".demian", "tmp");
   await mkdir8(dir, { recursive: true });
-  const outputPath = path19.join(dir, `output-${safeCallId(options2.callId)}.txt`);
+  const outputPath = path20.join(dir, `output-${safeCallId(options2.callId)}.txt`);
   await writeFile7(outputPath, result.content, "utf8");
   return {
     ...result,
@@ -27969,7 +28262,7 @@ async function capToolOutput(result, options2) {
       sliceUtf8(result.content, 0, HALF_PREVIEW_BYTES),
       `
 
-[Full output saved to ${path19.relative(options2.cwd, outputPath)}; showing head and tail because output exceeded ${capBytes} bytes]
+[Full output saved to ${path20.relative(options2.cwd, outputPath)}; showing head and tail because output exceeded ${capBytes} bytes]
 
 `,
       sliceUtf8(result.content, Math.max(0, bytes - HALF_PREVIEW_BYTES), bytes)
@@ -27995,7 +28288,7 @@ function sliceUtf8(text, startByte, endByte) {
 
 // src/tools/read-file.ts
 import { open as open2, stat as stat5 } from "node:fs/promises";
-import path20 from "node:path";
+import path21 from "node:path";
 
 // src/tools/validation.ts
 function assertObject(input2, toolName) {
@@ -28079,7 +28372,7 @@ var readFileTool = {
     const truncated = start + sliced.length < lines.length;
     return ok(content + (truncated ? `
 ... (${lines.length - start - sliced.length} more lines)` : ""), {
-      path: path20.relative(ctx.cwd, filePath),
+      path: path21.relative(ctx.cwd, filePath),
       lines: sliced.length,
       totalLines: lines.length,
       truncated
@@ -28118,7 +28411,7 @@ function looksBinary(buffer) {
 
 // src/tools/write-file.ts
 import { mkdir as mkdir9, readFile as readFile10, writeFile as writeFile8 } from "node:fs/promises";
-import path21 from "node:path";
+import path22 from "node:path";
 var writeFileTool = {
   name: "write_file",
   description: "Create or replace a text file inside the workspace.",
@@ -28136,7 +28429,7 @@ var writeFileTool = {
     const filePath = resolveInsideCwd(ctx.cwd, stringField(object2, "path"));
     const content = stringField(object2, "content", { allowEmpty: true });
     const before = await readOptionalTextFile(filePath);
-    await mkdir9(path21.dirname(filePath), { recursive: true });
+    await mkdir9(path22.dirname(filePath), { recursive: true });
     await writeFile8(filePath, content, "utf8");
     const relative = relativeToCwd(ctx.cwd, filePath);
     const diff = createTextDiff(before, content, relative);
@@ -28212,7 +28505,7 @@ function countMatches(text, needle) {
 
 // src/tools/bash.ts
 import { spawn as spawn5 } from "node:child_process";
-import path23 from "node:path";
+import path24 from "node:path";
 
 // src/sandbox/env-only.ts
 function buildEnvOnlyLaunch(command, config) {
@@ -28272,7 +28565,7 @@ function bwrapPath() {
 
 // src/sandbox/macos.ts
 import { existsSync as existsSync3 } from "node:fs";
-import path22 from "node:path";
+import path23 from "node:path";
 function canUseMacOSSandbox() {
   return process.platform === "darwin" && existsSync3("/usr/bin/sandbox-exec");
 }
@@ -28298,7 +28591,7 @@ function macosProfile(cwd, config) {
   }
   if (mode === "workspace-write") {
     lines.push("(deny file-write*)");
-    lines.push(`(allow file-write* (subpath "${escapeProfilePath(path22.resolve(cwd))}"))`);
+    lines.push(`(allow file-write* (subpath "${escapeProfilePath(path23.resolve(cwd))}"))`);
     lines.push('(allow file-write* (subpath "/tmp"))');
     lines.push('(allow file-write* (subpath "/private/tmp"))');
     lines.push('(allow file-write* (subpath "/private/var/folders"))');
@@ -28360,7 +28653,7 @@ ${result.stderr}` : ""
     ].filter(Boolean).join("\n");
     return ok(content, {
       command,
-      workdir: path23.relative(ctx.cwd, workdir) || ".",
+      workdir: path24.relative(ctx.cwd, workdir) || ".",
       exitCode: result.exitCode,
       signal: result.signal,
       timedOut: result.timedOut,
@@ -28413,7 +28706,7 @@ function runCommand(command, cwd, timeoutMs, signal, sandbox = { mode: "workspac
 // src/tools/grep.ts
 import { spawn as spawn6 } from "node:child_process";
 import { readdir as readdir2, readFile as readFile12, stat as stat6 } from "node:fs/promises";
-import path24 from "node:path";
+import path25 from "node:path";
 var MAX_MATCHES = 200;
 var grepTool = {
   name: "grep",
@@ -28488,7 +28781,7 @@ function runRg(cwd, base, pattern, glob, signal) {
 }
 function rewriteRgPath(cwd, line) {
   const [file, rest] = splitFirst(line, ":");
-  if (!path24.isAbsolute(file)) return line;
+  if (!path25.isAbsolute(file)) return line;
   return `${relativeToCwd(cwd, file)}:${rest}`;
 }
 function splitFirst(value, delimiter) {
@@ -28505,7 +28798,7 @@ async function fallbackSearch(cwd, base, pattern, glob) {
     if (isIgnoredPath(relative)) return;
     const info = await stat6(item);
     if (info.isDirectory()) {
-      for (const entry of await readdir2(item)) await walk2(path24.join(item, entry));
+      for (const entry of await readdir2(item)) await walk2(path25.join(item, entry));
       return;
     }
     if (glob && !matchGlob(glob, relative)) return;
@@ -28524,7 +28817,7 @@ async function fallbackSearch(cwd, base, pattern, glob) {
 
 // src/tools/glob.ts
 import { readdir as readdir3, stat as stat7 } from "node:fs/promises";
-import path25 from "node:path";
+import path26 from "node:path";
 var MAX_PATHS = 1e3;
 var globTool = {
   name: "glob",
@@ -28556,7 +28849,7 @@ async function collectPaths(cwd, root, pattern) {
   async function walk2(dir) {
     const entries = await readdir3(dir, { withFileTypes: true });
     for (const entry of entries) {
-      const absolute = path25.join(dir, entry.name);
+      const absolute = path26.join(dir, entry.name);
       const relative = relativeToCwd(cwd, absolute);
       if (isIgnoredPath(relative)) continue;
       const info = await stat7(absolute);
@@ -28767,7 +29060,7 @@ async function runExaSearch(config, options2) {
   return searchResult("exa", options2.query, results, json.value);
 }
 function resolveApiKey(provider, config) {
-  const value = config.apiKey ?? (config.apiKeyEnv ? process.env[config.apiKeyEnv] : void 0);
+  const value = config.apiKey || (config.apiKeyEnv ? process.env[config.apiKeyEnv] : void 0);
   if (value) return { ok: true, value };
   return toolFail(`Missing API key for web_search provider "${provider}". Set webSearch.providers.${provider}.apiKey or set ${config.apiKeyEnv ?? "the configured apiKeyEnv"}.`);
 }
@@ -29559,13 +29852,13 @@ async function runExecutionSession(options2) {
 
 // src/goals/lock.ts
 import { mkdir as mkdir11, open as open3, rm as rm2 } from "node:fs/promises";
-import path27 from "node:path";
+import path28 from "node:path";
 
 // src/goals/storage.ts
 import { createHash as createHash3 } from "node:crypto";
 import { mkdir as mkdir10, readFile as readFile13, rename as rename4, writeFile as writeFile10 } from "node:fs/promises";
 import fs9 from "node:fs";
-import path26 from "node:path";
+import path27 from "node:path";
 var GoalStore = class {
   cwd;
   dir;
@@ -29576,8 +29869,8 @@ var GoalStore = class {
     this.cwd = cwd;
     this.scope = normalizeGoalStoreScope(options2.scope);
     this.dir = goalStoreDir(cwd, this.scope);
-    this.activePath = path26.join(this.dir, "active.json");
-    this.archiveDir = path26.join(this.dir, "archive");
+    this.activePath = path27.join(this.dir, "active.json");
+    this.archiveDir = path27.join(this.dir, "archive");
   }
   async loadActive() {
     if (!fs9.existsSync(this.activePath)) return void 0;
@@ -29591,7 +29884,7 @@ var GoalStore = class {
   }
   async saveActive(state) {
     await mkdir10(this.dir, { recursive: true });
-    const tmp = path26.join(this.dir, `active.${process.pid}.${Date.now()}.tmp`);
+    const tmp = path27.join(this.dir, `active.${process.pid}.${Date.now()}.tmp`);
     await writeFile10(tmp, `${JSON.stringify(state, null, 2)}
 `, "utf8");
     await rename4(tmp, this.activePath);
@@ -29605,21 +29898,21 @@ var GoalStore = class {
       status,
       updatedAt: Date.now()
     };
-    await writeFile10(path26.join(this.archiveDir, `${archived.id}.json`), `${JSON.stringify(archived, null, 2)}
+    await writeFile10(path27.join(this.archiveDir, `${archived.id}.json`), `${JSON.stringify(archived, null, 2)}
 `, "utf8");
     await fs9.promises.rm(this.activePath, { force: true });
     return archived;
   }
   async backupCorrupted(text) {
     await mkdir10(this.dir, { recursive: true });
-    const backup = path26.join(this.dir, `active.corrupt.${Date.now()}.json`);
+    const backup = path27.join(this.dir, `active.corrupt.${Date.now()}.json`);
     await writeFile10(backup, text, "utf8");
     await fs9.promises.rm(this.activePath, { force: true });
   }
 };
 function goalStoreDir(cwd, scope) {
   const safeScope = normalizeGoalStoreScope(scope);
-  return safeScope ? path26.join(cwd, ".demian", "goals", "sessions", safeScope) : path26.join(cwd, ".demian", "goals");
+  return safeScope ? path27.join(cwd, ".demian", "goals", "sessions", safeScope) : path27.join(cwd, ".demian", "goals");
 }
 function normalizeGoalStoreScope(scope) {
   const trimmed = scope?.trim();
@@ -29633,10 +29926,10 @@ function normalizeGoalStoreScope(scope) {
 var GoalLock = class {
   path;
   constructor(cwd, scope) {
-    this.path = path27.join(goalStoreDir(cwd, scope), "active.lock");
+    this.path = path28.join(goalStoreDir(cwd, scope), "active.lock");
   }
   async acquire() {
-    await mkdir11(path27.dirname(this.path), { recursive: true });
+    await mkdir11(path28.dirname(this.path), { recursive: true });
     const handle = await open3(this.path, "wx").catch((error) => {
       const code = typeof error === "object" && error && "code" in error ? String(error.code) : "";
       if (code === "EEXIST") throw new Error("Another goal is already active in this workspace.");
@@ -30224,8 +30517,8 @@ function sha256(value) {
 
 // src/root-session.ts
 import { cp, mkdtemp, rm as rm3 } from "node:fs/promises";
-import os10 from "node:os";
-import path28 from "node:path";
+import os11 from "node:os";
+import path29 from "node:path";
 
 // src/tools/cowork.ts
 function createCoworkTool(options2) {
@@ -31048,8 +31341,8 @@ Writer changed files outside writeScope: ${outOfScope.join(", ")}` : result.erro
     }
   }
   async createCoworkIsolatedWorkspace(groupId, memberId) {
-    const root = await mkdtemp(path28.join(os10.tmpdir(), `demian-cowork-${groupId}-${memberId}-`));
-    const cwd = path28.join(root, "workspace");
+    const root = await mkdtemp(path29.join(os11.tmpdir(), `demian-cowork-${groupId}-${memberId}-`));
+    const cwd = path29.join(root, "workspace");
     await cp(this.#options.cwd, cwd, {
       recursive: true,
       filter: (source) => shouldCopyIntoCoworkWorkspace(this.#options.cwd, source)
@@ -31197,7 +31490,7 @@ Writer changed files outside writeScope: ${outOfScope.join(", ")}` : result.erro
     const denyTools = ["write_file", "edit_file", "bash", "claudecode.Edit", "claudecode.Write", "claudecode.MultiEdit", "claudecode.Bash"];
     return this.withPermissionPreset({
       ...agent,
-      provider: agent.provider?.profile === "claudecode-subagent" ? { ...agent.provider, permissionProfile: "explore" } : agent.provider,
+      provider: agent.provider?.profile === "claudecode" && agent.name === "claudecode-explorer" ? { ...agent.provider, permissionProfile: "explore" } : agent.provider,
       tools: agent.tools.filter((tool) => readTools.has(tool)),
       permissions: [
         ...agent.permissions.filter((rule) => !denyTools.includes(rule.tool)),
@@ -31244,13 +31537,14 @@ Writer changed files outside writeScope: ${outOfScope.join(", ")}` : result.erro
     return lines.join("\n");
   }
   resolveInvocationBackend(profileName, modelOverride, agent) {
-    const providerConfig = resolveProviderConfig(this.#options.config, profileName);
+    const runtime = resolveProviderRuntimeConfig(this.#options.config, { providerName: profileName, model: modelOverride });
+    const providerConfig = runtime.providerConfig;
     if (this.#options.resolveExecutionBackend) return this.#options.resolveExecutionBackend(profileName, providerConfig, modelOverride);
     if (this.#options.resolveProvider) {
-      const resolved = this.#options.resolveProvider(profileName, providerConfig, modelOverride);
+      const resolved = this.#options.resolveProvider(profileName, providerConfig, runtime.model);
       return { kind: "provider", ...resolved };
     }
-    return resolveExecutionBackend(providerConfig, { model: modelOverride, config: this.#options.config, agent });
+    return resolveExecutionBackend(providerConfig, { model: runtime.model, config: this.#options.config, agent });
   }
   loadAgentSession(agent, providerProfile, model, sessionScope, cwd = this.#options.cwd) {
     const key = `${this.id}:${sessionScope ?? "delegate"}:${agent.name}:${providerProfile}:${model}:${cwd}`;
@@ -31352,17 +31646,17 @@ function findDependencyCycle(group) {
   const byId = new Map(group.map((member) => [member.memberId, member]));
   const visiting = /* @__PURE__ */ new Set();
   const visited = /* @__PURE__ */ new Set();
-  const path32 = [];
+  const path36 = [];
   const visit = (id) => {
-    if (visiting.has(id)) return [...path32.slice(path32.indexOf(id)), id];
+    if (visiting.has(id)) return [...path36.slice(path36.indexOf(id)), id];
     if (visited.has(id)) return void 0;
     visiting.add(id);
-    path32.push(id);
+    path36.push(id);
     for (const dep of byId.get(id)?.dependsOn ?? []) {
       const cycle = visit(dep);
       if (cycle) return cycle;
     }
-    path32.pop();
+    path36.pop();
     visiting.delete(id);
     visited.add(id);
     return void 0;
@@ -31403,7 +31697,7 @@ function scopeStaticPrefix(pattern) {
   return prefix.replace(/\/+$/, "").split("/").filter(Boolean).join("/") || ".";
 }
 function shouldCopyIntoCoworkWorkspace(root, source) {
-  const relative = path28.relative(root, source).split(path28.sep).join("/");
+  const relative = path29.relative(root, source).split(path29.sep).join("/");
   if (!relative) return true;
   const parts = relative.split("/");
   return !parts.includes(".git") && !parts.includes("node_modules") && !parts.includes(".demian");
@@ -31617,11 +31911,11 @@ function finitePositiveInteger(value) {
 // src/ui/preferences.ts
 import { mkdir as mkdir12, readFile as readFile14, writeFile as writeFile11 } from "node:fs/promises";
 import fs10 from "node:fs";
-import path29 from "node:path";
+import path30 from "node:path";
 var UiPreferenceStore = class {
   filePath;
   constructor(cwd, filePath) {
-    this.filePath = filePath ? path29.resolve(cwd, filePath) : path29.join(cwd, ".demian", "preferences.json");
+    this.filePath = filePath ? path30.resolve(cwd, filePath) : path30.join(cwd, ".demian", "preferences.json");
   }
   async load() {
     if (!fs10.existsSync(this.filePath)) return void 0;
@@ -31639,7 +31933,7 @@ var UiPreferenceStore = class {
       model: selection.model,
       updatedAt: Date.now()
     };
-    await mkdir12(path29.dirname(this.filePath), { recursive: true });
+    await mkdir12(path30.dirname(this.filePath), { recursive: true });
     await writeFile11(this.filePath, `${JSON.stringify(file, null, 2)}
 `, { mode: 384 });
   }
@@ -31659,37 +31953,533 @@ function preferenceKey(selection) {
   return `${selection.providerName}\0${selection.model}`;
 }
 
-// src/ui/settings.ts
-function providerOptions(config) {
-  return Object.entries(config.providers).filter(([, provider]) => !provider.hidden && !(provider.type === "claudecode" && provider.runtime === "cli")).map(([name, provider]) => ({
-    name,
-    model: provider.model,
-    models: provider.models?.length ? [...new Set([provider.model, ...provider.models].filter((item) => typeof item === "string" && item.trim()))] : [provider.model],
-    type: provider.type,
-    runtime: provider.type === "claudecode" ? provider.runtime : void 0,
-    permissionMode: provider.type === "claudecode" ? provider.permissionMode : void 0,
-    ga: provider.type === "claudecode" ? claudeCodeGaEnabled(provider) : void 0
+// src/models/catalog.ts
+import crypto6 from "node:crypto";
+import { mkdir as mkdir13, readFile as readFile15, rename as rename5, writeFile as writeFile12 } from "node:fs/promises";
+import os12 from "node:os";
+import path31 from "node:path";
+var DEFAULT_CACHE_TTL_MS = 5 * 60 * 1e3;
+var PING_TIMEOUT_MS = 1500;
+var DEFAULT_CODEX_CLIENT_VERSION = "0.0.0";
+var dynamicImport3 = new Function("specifier", "return import(specifier)");
+var inflight = /* @__PURE__ */ new Map();
+var pingCache = /* @__PURE__ */ new Map();
+var PING_CACHE_TTL_MS = 30 * 1e3;
+var packageVersionPromise;
+async function listProviderModelCatalog(providerName, providerConfig, options2 = {}) {
+  const key = `${catalogCacheKey(providerName, providerConfig)}:${options2.refresh ? "refresh" : "default"}`;
+  const existing = inflight.get(key);
+  if (existing) return existing;
+  const promise = doListProviderModelCatalog(providerName, providerConfig, options2).finally(() => inflight.delete(key));
+  inflight.set(key, promise);
+  return promise;
+}
+async function doListProviderModelCatalog(providerName, providerConfig, options2) {
+  const staticModels = staticModelEntries(providerName, providerConfig);
+  const catalog = providerConfig.catalog;
+  if (!catalog || catalog.type === "static") {
+    return { status: staticModels.length ? "ready" : "unavailable", providerName, models: staticModels, source: "config" };
+  }
+  const missingAuthEnv = missingCatalogAuth(providerConfig);
+  if (missingAuthEnv) {
+    return {
+      status: "missing-auth",
+      providerName,
+      models: staticModels,
+      source: staticModels.length ? "config" : "fallback",
+      message: `missing-auth:${missingAuthEnv}`
+    };
+  }
+  const cacheKey = catalogCacheKey(providerName, providerConfig);
+  const ttlMs = catalog.refreshTtlMs ?? DEFAULT_CACHE_TTL_MS;
+  const cached = await readCatalogCache(cacheKey, ttlMs, options2.refresh !== true);
+  if (cached && !options2.refresh) return { ...cached, models: mergeCatalogWithStatic(staticModels, cached.models) };
+  if (catalog.endpoint) {
+    const reachable = await pingEndpoint(catalog.endpoint, options2.fetch);
+    if (!reachable) {
+      const stale = await readCatalogCache(cacheKey, Number.POSITIVE_INFINITY, true);
+      if (stale) return { ...stale, models: mergeCatalogWithStatic(staticModels, stale.models), message: `endpoint ${catalog.endpoint} unreachable; using cached models` };
+      if (staticModels.length) return { status: "ready", providerName, models: staticModels, source: "config", message: `endpoint ${catalog.endpoint} unreachable; using configured profiles` };
+      return { status: "unavailable", providerName, models: [], source: "fallback", message: `endpoint ${catalog.endpoint} unreachable` };
+    }
+  }
+  try {
+    const remote = await fetchCatalog(providerName, providerConfig, options2);
+    const merged = mergeCatalogWithStatic(staticModels, remote.models);
+    const result = { ...remote, models: merged };
+    if (result.status === "ready") await writeCatalogCache(cacheKey, result);
+    return result;
+  } catch (error) {
+    const authMissing = isMissingAuthError(error);
+    const stale = await readCatalogCache(cacheKey, Number.POSITIVE_INFINITY, true);
+    if (stale) return { ...stale, status: authMissing ? "missing-auth" : stale.status, models: mergeCatalogWithStatic(staticModels, stale.models), message: errorMessage2(error) };
+    if (staticModels.length) return { status: authMissing ? "missing-auth" : "ready", providerName, models: staticModels, source: "config", message: errorMessage2(error) };
+    return { status: authMissing ? "missing-auth" : "unavailable", providerName, models: [], source: "fallback", message: errorMessage2(error) };
+  }
+}
+async function pingEndpoint(endpoint, fetcher) {
+  const now2 = Date.now();
+  const cached = pingCache.get(endpoint);
+  if (cached && cached.expiresAt > now2) return cached.ok;
+  const ok2 = await tryPing(endpoint, fetcher);
+  pingCache.set(endpoint, { ok: ok2, expiresAt: now2 + PING_CACHE_TTL_MS });
+  return ok2;
+}
+async function tryPing(endpoint, fetcher) {
+  const fn = fetcher ?? fetch;
+  try {
+    const response = await fn(endpoint, { method: "HEAD", signal: AbortSignal.timeout(PING_TIMEOUT_MS) });
+    if (response.status < 500) return true;
+  } catch {
+  }
+  try {
+    const response = await fn(endpoint, { method: "GET", signal: AbortSignal.timeout(PING_TIMEOUT_MS), headers: { range: "bytes=0-0" } });
+    return response.status < 500;
+  } catch {
+    return false;
+  }
+}
+function invalidateCatalogPingCache(endpoint) {
+  if (endpoint) pingCache.delete(endpoint);
+  else pingCache.clear();
+}
+async function fetchCatalog(providerName, providerConfig, options2) {
+  if (providerConfig.type === "codex" || providerConfig.catalog?.type === "codex-oauth-models") return fetchCodexCatalog(providerName, providerConfig, options2);
+  if (providerConfig.type === "claudecode" || providerConfig.catalog?.type === "claudecode-supported-models") return fetchClaudeCodeCatalog(providerName, providerConfig, options2);
+  if (providerConfig.catalog?.type === "anthropic-models") return fetchAnthropicCatalog(providerName, providerConfig, options2);
+  if (providerConfig.catalog?.type === "ollama-tags") return fetchOllamaTagsCatalog(providerName, providerConfig, options2);
+  return fetchOpenAIStyleCatalog(providerName, providerConfig, options2);
+}
+async function fetchOpenAIStyleCatalog(providerName, providerConfig, options2) {
+  if (providerConfig.type !== "openai-compatible") throw new Error(`Provider ${providerName} is not OpenAI-compatible.`);
+  const apiKey = resolveConfiguredApiKey(providerConfig);
+  if (!apiKey.value) throw missingAuth(providerConfig.apiKeyEnv ?? "apiKey");
+  const endpoint = providerConfig.catalog?.endpoint ?? `${providerConfig.baseURL.replace(/\/+$/, "")}/models`;
+  const response = await fetchJson2(endpoint, {
+    fetcher: options2.fetch,
+    timeoutMs: options2.timeoutMs,
+    headers: {
+      ...authHeadersForOpenAICompatible(providerConfig, apiKey.value),
+      ...providerConfig.headers ?? {}
+    }
+  });
+  return {
+    status: "ready",
+    providerName,
+    models: normalizeOpenAIModels(response).map((entry) => ({ ...entry, source: "api" })),
+    source: "api"
+  };
+}
+async function fetchAnthropicCatalog(providerName, providerConfig, options2) {
+  if (providerConfig.type !== "anthropic") throw new Error(`Provider ${providerName} is not Anthropic.`);
+  const apiKey = resolveConfiguredApiKey(providerConfig);
+  if (!apiKey.value) throw missingAuth(providerConfig.apiKeyEnv ?? "apiKey");
+  const base = providerConfig.baseURL ?? "https://api.anthropic.com/v1";
+  const endpoint = providerConfig.catalog?.endpoint ?? `${base.replace(/\/+$/, "")}/models`;
+  const models = [];
+  let afterId;
+  for (; ; ) {
+    const url = new URL(endpoint);
+    if (afterId) url.searchParams.set("after_id", afterId);
+    url.searchParams.set("limit", "100");
+    const response = await fetchJson2(url.toString(), {
+      fetcher: options2.fetch,
+      timeoutMs: options2.timeoutMs,
+      headers: {
+        "x-api-key": apiKey.value,
+        "anthropic-version": "2023-06-01"
+      }
+    });
+    const page = normalizeAnthropicModels(response);
+    models.push(...page);
+    if (!response.has_more || !response.last_id) break;
+    afterId = response.last_id;
+  }
+  return { status: "ready", providerName, models, source: "api" };
+}
+async function fetchOllamaTagsCatalog(providerName, providerConfig, options2) {
+  if (providerConfig.type !== "ollama") throw new Error(`Provider ${providerName} is not Ollama native.`);
+  const apiKey = resolveConfiguredApiKey(providerConfig);
+  if (!apiKey.value) throw missingAuth(providerConfig.apiKeyEnv ?? "apiKey");
+  const endpoint = providerConfig.catalog?.endpoint ?? `${providerConfig.baseURL.replace(/\/+$/, "")}/tags`;
+  const response = await fetchJson2(endpoint, {
+    fetcher: options2.fetch,
+    timeoutMs: options2.timeoutMs,
+    headers: { authorization: `Bearer ${apiKey.value}` }
+  });
+  return {
+    status: "ready",
+    providerName,
+    models: normalizeOllamaTags(response).map((entry) => ({ ...entry, source: "api" })),
+    source: "api"
+  };
+}
+async function fetchCodexCatalog(providerName, providerConfig, options2) {
+  if (providerConfig.type !== "codex") throw new Error(`Provider ${providerName} is not Codex.`);
+  const fetcher = options2.fetch ?? fetch;
+  const baseURL = (providerConfig.baseURL ?? "https://chatgpt.com/backend-api/codex").replace(/\/+$/, "");
+  const installationId = await loadOrCreateInstallationId(resolveCodexHome(providerConfig.codexHome));
+  const auth = getSharedCodexAuthStore({
+    codexHome: providerConfig.codexHome,
+    authStore: providerConfig.authStore,
+    allowApiKeyFallback: providerConfig.allowApiKeyFallback,
+    proactiveRefreshMinutes: providerConfig.refresh?.proactiveRefreshMinutes,
+    refreshCache: providerConfig.refresh?.cache,
+    fetch: fetcher
+  });
+  const headers = await auth.requestHeaders(installationId);
+  const url = new URL(`${baseURL}/models`);
+  url.searchParams.set("client_version", await codexClientVersion(options2.clientVersion));
+  const response = await fetchJson2(url.toString(), {
+    fetcher,
+    timeoutMs: options2.timeoutMs,
+    headers
+  });
+  return {
+    status: "ready",
+    providerName,
+    models: normalizeCodexModels(response).map((entry) => ({ ...entry, source: "oauth" })),
+    source: "oauth"
+  };
+}
+async function fetchClaudeCodeCatalog(providerName, providerConfig, options2) {
+  if (providerConfig.type !== "claudecode") throw new Error(`Provider ${providerName} is not Claude Code.`);
+  const fallback = staticModelEntries(providerName, providerConfig);
+  try {
+    const module = await dynamicImport3("@anthropic-ai/claude-agent-sdk");
+    if (!module.query) throw new Error("Claude Agent SDK query export is unavailable.");
+    const query = module.query({
+      prompt: "",
+      options: {
+        model: defaultModelForProvider(providerName, providerConfig),
+        maxTurns: 0,
+        pathToClaudeCodeExecutable: resolveClaudeCodeCliPath(providerConfig.cliPath),
+        env: sanitizedClaudeCodeEnv(providerConfig.env, providerConfig.sanitizeApiKeyEnv ?? true)
+      }
+    });
+    try {
+      if (typeof query.supportedModels !== "function") throw new Error("Claude Agent SDK supportedModels is unavailable.");
+      const models = await withTimeout(query.supportedModels(), options2.timeoutMs ?? 5e3);
+      return {
+        status: "ready",
+        providerName,
+        models: models.map((model, index) => ({
+          name: model.displayName || model.value,
+          displayName: model.displayName || model.value,
+          model: model.value,
+          description: model.description,
+          isDefault: index === 0,
+          source: "oauth"
+        })),
+        source: "oauth"
+      };
+    } finally {
+      query.close?.();
+    }
+  } catch (error) {
+    if (fallback.length) return { status: "ready", providerName, models: fallback, source: "fallback", message: errorMessage2(error) };
+    throw error;
+  }
+}
+function staticModelEntries(providerName, providerConfig) {
+  return providerModelProfiles(providerName, providerConfig).filter((profile) => !profile.hidden).map((profile, index) => ({
+    name: profile.displayName ?? profile.name,
+    displayName: profile.displayName ?? profile.name,
+    model: profile.model,
+    description: profile.description,
+    isDefault: index === 0,
+    source: "config"
   }));
 }
+function mergeCatalogWithStatic(staticModels, remoteModels) {
+  const byModel = /* @__PURE__ */ new Map();
+  for (const model of remoteModels) byModel.set(model.model, model);
+  for (const model of staticModels) byModel.set(model.model, { ...byModel.get(model.model), ...model, source: model.source });
+  return [...byModel.values()];
+}
+function normalizeOpenAIModels(raw) {
+  const items = Array.isArray(raw.data) ? raw.data : Array.isArray(raw.models) ? raw.models : [];
+  return items.map((item) => {
+    const object2 = item;
+    const id = stringValue5(object2.id) ?? stringValue5(object2.name) ?? stringValue5(object2.model);
+    if (!id) return void 0;
+    return {
+      name: id,
+      displayName: stringValue5(object2.display_name) ?? stringValue5(object2.displayName) ?? id,
+      model: id,
+      description: stringValue5(object2.description)
+    };
+  }).filter(Boolean);
+}
+function normalizeAnthropicModels(raw) {
+  return (raw.data ?? []).map((item) => {
+    const object2 = item;
+    const id = stringValue5(object2.id);
+    if (!id) return void 0;
+    return {
+      name: stringValue5(object2.display_name) ?? id,
+      displayName: stringValue5(object2.display_name) ?? id,
+      model: id,
+      description: stringValue5(object2.description),
+      source: "api"
+    };
+  }).filter(Boolean);
+}
+function normalizeOllamaTags(raw) {
+  const items = Array.isArray(raw.models) ? raw.models : [];
+  return items.map((item) => {
+    const object2 = item;
+    const id = stringValue5(object2.name) ?? stringValue5(object2.model);
+    if (!id) return void 0;
+    return { name: id, displayName: id, model: id };
+  }).filter(Boolean);
+}
+function normalizeCodexModels(raw) {
+  const items = Array.isArray(raw.models) ? raw.models : [];
+  return items.map((item, index) => {
+    const object2 = item;
+    const id = stringValue5(object2.slug) ?? stringValue5(object2.id) ?? stringValue5(object2.model);
+    if (!id) return void 0;
+    return {
+      name: stringValue5(object2.display_name) ?? id,
+      displayName: stringValue5(object2.display_name) ?? id,
+      model: id,
+      description: stringValue5(object2.description),
+      isDefault: index === 0
+    };
+  }).filter(Boolean);
+}
+function authHeadersForOpenAICompatible(providerConfig, apiKey) {
+  const auth = inferOpenAICompatibleAuth(providerConfig.baseURL, providerConfig.auth);
+  const type = auth.type ?? "bearer";
+  const header = auth.header ?? (type === "api-key" ? "api-key" : "authorization");
+  return { [header]: type === "bearer" ? `Bearer ${apiKey}` : apiKey };
+}
+async function fetchJson2(url, options2) {
+  const response = await (options2.fetcher ?? fetch)(url, {
+    method: "GET",
+    headers: {
+      accept: "application/json",
+      ...options2.headers ?? {}
+    },
+    signal: AbortSignal.timeout(options2.timeoutMs ?? 5e3)
+  });
+  const text = await response.text();
+  if (!response.ok) throw new Error(`HTTP ${response.status}: ${text}`);
+  return text ? JSON.parse(text) : {};
+}
+function cachePath(cacheKey) {
+  return path31.join(os12.homedir(), ".demian", "cache", "models", `${safeCacheName(cacheKey)}.json`);
+}
+async function readCatalogCache(cacheKey, ttlMs, allow) {
+  if (!allow) return void 0;
+  try {
+    const raw = JSON.parse(await readFile15(cachePath(cacheKey), "utf8"));
+    if (!raw.result) return void 0;
+    if (ttlMs !== Number.POSITIVE_INFINITY && Date.now() - (raw.savedAt ?? 0) > ttlMs) return void 0;
+    return { ...raw.result, source: "cache", models: raw.result.models.map((model) => ({ ...model, source: "cache" })) };
+  } catch {
+    return void 0;
+  }
+}
+async function writeCatalogCache(cacheKey, result) {
+  const filePath = cachePath(cacheKey);
+  await mkdir13(path31.dirname(filePath), { recursive: true, mode: 448 });
+  const temp = `${filePath}.${process.pid}.${Date.now()}.tmp`;
+  await writeFile12(temp, JSON.stringify({ savedAt: Date.now(), result }, null, 2), { mode: 384 });
+  await rename5(temp, filePath);
+}
+function safeCacheName(providerName) {
+  return providerName.replace(/[^a-zA-Z0-9_.-]+/g, "_");
+}
+function catalogCacheKey(providerName, providerConfig) {
+  const identity = {
+    providerName,
+    type: providerConfig.type,
+    catalogType: providerConfig.catalog?.type,
+    endpoint: providerConfig.catalog?.endpoint,
+    baseURL: "baseURL" in providerConfig ? providerConfig.baseURL : void 0,
+    apiKeyEnv: "apiKeyEnv" in providerConfig ? providerConfig.apiKeyEnv : void 0,
+    apiKeyEnvAliases: "apiKeyEnvAliases" in providerConfig ? providerConfig.apiKeyEnvAliases : void 0,
+    auth: "auth" in providerConfig ? providerConfig.auth : void 0
+  };
+  const digest = crypto6.createHash("sha256").update(JSON.stringify(identity)).digest("hex").slice(0, 16);
+  return `${providerName}-${digest}`;
+}
+function missingCatalogAuth(providerConfig) {
+  if (providerConfig.type !== "openai-compatible" && providerConfig.type !== "anthropic" && providerConfig.type !== "ollama") return void 0;
+  if (providerConfig.catalog?.requiresAuth === false) return void 0;
+  const expectsAuth = providerConfig.catalog?.requiresAuth === true || !!providerConfig.apiKey || !!providerConfig.apiKeyEnv || !!providerConfig.apiKeyEnvAliases?.length;
+  if (!expectsAuth) return void 0;
+  const apiKey = resolveConfiguredApiKey(providerConfig);
+  return apiKey.value ? void 0 : apiKey.envName ?? "apiKey";
+}
+function stringValue5(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+function missingAuth(envName) {
+  const error = new Error(`missing-auth:${envName}`);
+  return error;
+}
+function isMissingAuthError(error) {
+  if (error instanceof CodexAuthError) {
+    return error.code === "missing_auth" || error.code === "missing_chatgpt_tokens" || error.code === "refresh_unavailable" || error.code === "keyring_write_unsupported" || error.code === "refresh_expired" || error.code === "refresh_invalidated" || error.code === "refresh_reused" || error.code === "refresh_other";
+  }
+  return error instanceof Error && error.message.startsWith("missing-auth:");
+}
+function errorMessage2(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+async function codexClientVersion(override) {
+  const normalized = semverLike(override);
+  if (normalized) return normalized;
+  packageVersionPromise ??= readPackageVersion();
+  return packageVersionPromise;
+}
+async function readPackageVersion() {
+  try {
+    const raw = JSON.parse(await readFile15(new URL("../package.json", import.meta.url), "utf8"));
+    return semverLike(raw.version) ?? DEFAULT_CODEX_CLIENT_VERSION;
+  } catch {
+    return DEFAULT_CODEX_CLIENT_VERSION;
+  }
+}
+function semverLike(value) {
+  if (typeof value !== "string") return void 0;
+  const trimmed = value.trim();
+  return /^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?$/.test(trimmed) ? trimmed : void 0;
+}
+function withTimeout(promise, timeoutMs) {
+  return new Promise((resolve, reject) => {
+    const timer = setTimeout(() => reject(new Error(`Timed out after ${timeoutMs}ms`)), timeoutMs);
+    promise.then(
+      (value) => {
+        clearTimeout(timer);
+        resolve(value);
+      },
+      (error) => {
+        clearTimeout(timer);
+        reject(error);
+      }
+    );
+  });
+}
+
+// src/ui/settings.ts
+function providerOptions(config, catalogs = {}) {
+  const orderedNames = sortProviderNames(Object.keys(config.providers));
+  const order = new Map(orderedNames.map((name, index) => [name, index]));
+  return orderedNames.map((name) => [name, config.providers[name]]).filter(([, provider]) => provider && !provider.hidden && !(provider.type === "claudecode" && provider.runtime === "cli")).map(([name, provider]) => {
+    const catalog = catalogs[name];
+    const available = providerCatalogAvailable(catalog);
+    const profiles = catalog?.models.length ? catalog.models.map((model) => ({
+      name: model.name,
+      displayName: model.displayName ?? model.name,
+      model: model.model,
+      description: model.description,
+      source: model.source,
+      isDefault: model.isDefault
+    })) : providerModelProfiles(name, provider);
+    const modelProfiles = profiles.map((profile) => {
+      const displayName = displayModelForProfile(profile);
+      return {
+        ...profile,
+        label: available ? displayName : unavailableLabel(displayName),
+        available
+      };
+    });
+    const models = modelProfiles.length ? [...new Set(modelProfiles.map((item) => item.model).filter((item) => typeof item === "string" && item.trim()))] : providerModelOptions(name, provider);
+    const defaultModel = defaultDisplayModelForProvider(name, provider);
+    return {
+      name,
+      label: available ? name : unavailableLabel(name),
+      model: defaultModel,
+      modelLabel: available || !defaultModel ? defaultModel : unavailableLabel(defaultModel),
+      models,
+      modelProfiles,
+      type: provider.type,
+      runtime: provider.type === "claudecode" ? provider.runtime : void 0,
+      permissionMode: provider.type === "claudecode" ? provider.permissionMode : void 0,
+      ga: provider.type === "claudecode" ? claudeCodeGaEnabled(provider) : void 0,
+      available,
+      catalog: catalog ? { status: catalog.status, source: catalog.source, message: catalog.message } : void 0
+    };
+  }).sort((left, right) => {
+    if (left.available !== right.available) return left.available ? -1 : 1;
+    return (order.get(left.name) ?? 0) - (order.get(right.name) ?? 0);
+  });
+}
+async function providerOptionsWithCatalog(config, options2 = {}) {
+  const entries = sortProviderNames(Object.keys(config.providers)).map((name) => [name, config.providers[name]]).filter(([, provider]) => provider && !provider.hidden && !(provider.type === "claudecode" && provider.runtime === "cli"));
+  const catalogs = Object.fromEntries(
+    await Promise.all(
+      entries.map(async ([name, provider]) => {
+        const catalog = await listProviderModelCatalog(name, provider, { timeoutMs: options2.timeoutMs }).catch((error) => ({
+          status: "unavailable",
+          providerName: name,
+          models: [],
+          source: "fallback",
+          message: errorMessage3(error)
+        }));
+        return [name, catalog];
+      })
+    )
+  );
+  return providerOptions(config, catalogs);
+}
+var MISSING_SELECTION_PLACEHOLDER = "-";
 function createInteractiveModelSelection(config, flags = {}, saved) {
   const savedProviderName = saved?.providerName === "claudecode-plan" ? "claudecode" : saved?.providerName;
-  const savedProviderConfig = savedProviderName ? config.providers[savedProviderName] : void 0;
-  const savedProvider = savedProviderName && savedProviderConfig && !savedProviderConfig.hidden ? savedProviderName : void 0;
-  const providerName = flags.provider ?? savedProvider ?? config.defaultProvider;
-  const providerConfig = resolveProviderConfig(config, providerName);
-  const usesSavedProvider = !flags.provider && providerName === savedProvider;
+  const savedProviderExists = savedProviderName && config.providers[savedProviderName] && !config.providers[savedProviderName]?.hidden;
+  if (saved?.providerName && !flags.provider && !savedProviderExists) {
+    return {
+      providerName: saved.providerName,
+      providerSource: "saved",
+      model: MISSING_SELECTION_PLACEHOLDER,
+      modelSource: "saved"
+    };
+  }
+  const providerName = flags.provider ?? (savedProviderExists ? savedProviderName : config.defaultProvider);
+  let providerConfig;
+  try {
+    providerConfig = resolveProviderConfig(config, providerName);
+  } catch {
+    return {
+      providerName,
+      providerSource: flags.provider ? "flag" : "config",
+      model: MISSING_SELECTION_PLACEHOLDER,
+      modelSource: "config"
+    };
+  }
+  const usesSavedProvider = !flags.provider && savedProviderExists && providerName === savedProviderName;
   const savedModel = usesSavedProvider && saved?.model ? saved.model : void 0;
+  const profiles = providerModelProfiles(providerName, providerConfig);
+  const savedProfile = savedModel ? profiles.find((profile) => profile.model === savedModel || profile.displayName === savedModel || profile.name === savedModel) : void 0;
+  const defaultModel = displayModelForProfile(profiles[0] ?? { name: "", displayName: "", model: "" }) || defaultDisplayModelForProvider(providerName, providerConfig);
+  const flagProfile = flags.model ? profiles.find((profile) => profile.model === flags.model || profile.displayName === flags.model || profile.name === flags.model) : void 0;
+  const selectedProfile = flags.model ? flagProfile : savedModel ? savedProfile : profiles[0];
+  const model = flags.model ?? (savedProfile ? displayModelForProfile(savedProfile) : savedModel) ?? defaultModel;
   return {
     providerName,
     providerSource: flags.provider ? "flag" : usesSavedProvider ? "saved" : "config",
-    model: flags.model ?? savedModel ?? providerConfig.model,
-    modelSource: flags.model ? "flag" : savedModel ? "saved" : "config"
+    model,
+    modelSource: flags.model ? "flag" : savedModel ? "saved" : "config",
+    modelProfileName: selectedProfile?.name
   };
 }
+function providerCatalogAvailable(catalog) {
+  return catalog ? catalog.status === "ready" && catalog.models.length > 0 : true;
+}
+function unavailableLabel(value) {
+  return `(n/a) ${value}`;
+}
+function errorMessage3(error) {
+  return error instanceof Error ? error.message : String(error);
+}
 
 // src/ui/tui/controller.ts
 async function runTuiSession(flags, store2) {
-  const cwd = path30.resolve(flags.cwd ?? process.cwd());
+  const cwd = path32.resolve(flags.cwd ?? process.cwd());
   const eventBus = new EventBus();
   eventBus.subscribe((event) => store2.handleEvent(event));
   const loadedConfig2 = await loadConfig({ cwd, configPath: flags.configPath });
@@ -31710,7 +32500,7 @@ async function runTuiSession(flags, store2) {
     const current = agentRegistry.get(agentName);
     agentOptions.unshift({ name: current.name, description: current.description });
   }
-  store2.configureSettings(initialSelection, providerOptions(config), {
+  store2.configureSettings(initialSelection, await providerOptionsWithCatalog(config, { timeoutMs: 1500 }), {
     agent: agentName,
     cwd,
     agentOptions,
@@ -31727,9 +32517,9 @@ async function runTuiSession(flags, store2) {
   const rootSessionId = flags.sessionId ?? createRootSessionId();
   const goalTitleGenerator = async (input2) => {
     const selection = store2.currentSelection();
-    const providerConfig = resolveProviderConfig(config, selection.providerName);
-    const resolved = resolveExecutionBackend(providerConfig, {
-      model: selection.model,
+    const runtime = resolveProviderRuntimeConfig(config, selection);
+    const resolved = resolveExecutionBackend(runtime.providerConfig, {
+      model: runtime.model,
       onRetry: (event) => eventBus.emit({
         type: "provider.retry",
         sessionId: "goal-title",
@@ -31750,7 +32540,7 @@ async function runTuiSession(flags, store2) {
       return 0;
     }
     if (!prompt) return 0;
-    if (isCompactCommand2(prompt)) {
+    if (isCompactCommand(prompt)) {
       const result = compactInteractiveHistory(history, config.context.main);
       history = result.messages;
       store2.prepareForPrompt("waiting for next message");
@@ -31787,6 +32577,7 @@ async function runTuiSession(flags, store2) {
     if (goalCommand.kind === "message") {
       store2.showSystemMessage("Goal", goalCommand.message);
       if (parsedGoalCommand?.action === "clear") store2.clearGoalState();
+      else if (!goalCommand.state && isGoalStateClearingAction(parsedGoalCommand?.action)) store2.clearGoalState();
       else if (goalCommand.state) store2.showGoalState(goalCommand.state);
       store2.prepareForPrompt("waiting for next message");
       continue;
@@ -31838,10 +32629,10 @@ async function runTuiSession(flags, store2) {
         if (goalState) await goalRuntime.finishIteration({ state: goalState, finalAnswer: result.finalAnswer, reason: result.endReason, usage: result.usage });
         history = interactiveHistoryFromRunMessages(result.messages);
       } else {
-        const providerConfig = resolveProviderConfig(runConfig, selection.providerName);
         const runtimeAgent = goalState ? withGoalTools(agent) : agent;
-        const backend = resolveExecutionBackend(providerConfig, {
-          model: selection.model,
+        const runtime = resolveProviderRuntimeConfig(runConfig, selection);
+        const backend = resolveExecutionBackend(runtime.providerConfig, {
+          model: runtime.model,
           config: runConfig,
           agent: runtimeAgent,
           onRetry: (event) => eventBus.emit({
@@ -31933,8 +32724,461 @@ async function runTuiSession(flags, store2) {
     savedSelectionKey = key;
   }
 }
+function isGoalStateClearingAction(action) {
+  return action === "status" || action === "pause" || action === "resume";
+}
+
+// src/config-watcher.ts
+import { EventEmitter } from "node:events";
+import fs11 from "node:fs";
+import path34 from "node:path";
+
+// src/config-scaffold.ts
+import { chmod as chmod3, mkdir as mkdir14, readFile as readFile16, rename as rename6, stat as stat8, writeFile as writeFile13 } from "node:fs/promises";
+import os13 from "node:os";
+import path33 from "node:path";
+function defaultUserConfigPath() {
+  return path33.join(os13.homedir(), ".demian", "config.json");
+}
+function defaultUserConfig(defaultProvider = detectDefaultProvider()) {
+  return {
+    version: 2,
+    defaultProvider,
+    providers: {
+      openai: {
+        type: "openai-compatible",
+        baseURL: "https://api.openai.com/v1",
+        apiKey: "",
+        apiKeyEnv: "OPENAI_API_KEY",
+        catalog: { type: "openai-models", endpoint: "https://api.openai.com/v1/models" }
+      },
+      anthropic: {
+        type: "anthropic",
+        baseURL: "https://api.anthropic.com/v1",
+        apiKey: "",
+        apiKeyEnv: "ANTHROPIC_API_KEY",
+        catalog: { type: "anthropic-models", endpoint: "https://api.anthropic.com/v1/models" }
+      },
+      gemini: {
+        type: "openai-compatible",
+        baseURL: "https://generativelanguage.googleapis.com/v1beta/openai/",
+        apiKey: "",
+        apiKeyEnv: "GEMINI_API_KEY",
+        apiKeyEnvAliases: ["GOOGLE_API_KEY"],
+        catalog: { type: "gemini-openai-models", endpoint: "https://generativelanguage.googleapis.com/v1beta/openai/models" }
+      },
+      groq: {
+        type: "openai-compatible",
+        baseURL: "https://api.groq.com/openai/v1",
+        apiKey: "",
+        apiKeyEnv: "GROQ_API_KEY",
+        catalog: { type: "groq-models", endpoint: "https://api.groq.com/openai/v1/models" }
+      },
+      azure: {
+        type: "openai-compatible",
+        auth: { type: "api-key", header: "api-key" },
+        modelProfiles: [
+          {
+            name: "azure-example",
+            displayName: "Azure example",
+            model: "azure-deployment-name",
+            baseURL: "https://example.openai.azure.com/openai/v1",
+            apiKey: "",
+            apiKeyEnv: "AZURE_OPENAI_API_KEY"
+          }
+        ]
+      },
+      lmstudio: {
+        type: "openai-compatible",
+        baseURL: "http://localhost:1234/v1",
+        apiKey: "lm-studio",
+        modelProfiles: [],
+        catalog: { type: "openai-compatible-models", endpoint: "http://localhost:1234/v1/models" }
+      },
+      "ollama-local": {
+        type: "openai-compatible",
+        baseURL: "http://localhost:11434/v1",
+        apiKey: "ollama",
+        modelProfiles: [],
+        quirks: { omitTemperature: true },
+        catalog: { type: "openai-compatible-models", endpoint: "http://localhost:11434/v1/models" }
+      },
+      "ollama-cloud": {
+        type: "ollama",
+        baseURL: "https://ollama.com/api",
+        apiKey: "",
+        apiKeyEnv: "OLLAMA_API_KEY",
+        modelProfiles: [],
+        catalog: { type: "ollama-tags", endpoint: "https://ollama.com/api/tags" }
+      },
+      llamacpp: {
+        type: "openai-compatible",
+        baseURL: "http://localhost:8080/v1",
+        apiKey: "llama.cpp",
+        modelProfiles: [],
+        catalog: { type: "openai-compatible-models", endpoint: "http://localhost:8080/v1/models" }
+      },
+      vllm: {
+        type: "openai-compatible",
+        baseURL: "http://localhost:8000/v1",
+        apiKey: "vllm",
+        modelProfiles: [],
+        catalog: { type: "openai-compatible-models", endpoint: "http://localhost:8000/v1/models" }
+      },
+      codex: {
+        type: "codex",
+        baseURL: "https://chatgpt.com/backend-api/codex",
+        authStore: "auto",
+        allowApiKeyFallback: false,
+        promptCacheKey: "root-session",
+        catalog: { type: "codex-oauth-models" }
+      },
+      claudecode: {
+        type: "claudecode",
+        runtime: "agent-sdk",
+        cliPath: "~/.local/bin/claude",
+        cwdMode: "session",
+        historyPolicy: "passthrough-resume",
+        onInvalidResume: "fresh",
+        attachmentFallback: "block",
+        allowSubagents: false,
+        sanitizeApiKeyEnv: true,
+        authPreflight: true,
+        useBareMode: false,
+        usageLedgerScope: "process",
+        sessionLock: true,
+        abortPolicy: "record-only",
+        catalog: { type: "claudecode-supported-models" }
+      }
+    }
+  };
+}
+async function createUserConfig(options2 = {}) {
+  const filePath = expandHome2(options2.path ?? defaultUserConfigPath());
+  const content = `${JSON.stringify(defaultUserConfig(options2.defaultProvider), null, 2)}
+`;
+  if (options2.print) return { path: filePath, created: false, content };
+  const existed = await exists(filePath);
+  if (existed && !options2.force) return { path: filePath, created: false, content: await readFile16(filePath, "utf8"), existed: true };
+  await writeJsonAtomic(filePath, content);
+  return { path: filePath, created: true, content, existed };
+}
+async function addProvider(options2) {
+  const filePath = expandHome2(options2.path ?? defaultUserConfigPath());
+  const config = await readConfigObject(filePath);
+  const providers = objectValue(config.providers);
+  const name = options2.name;
+  if (providers[name] && !options2.force) throw new Error(`Provider ${name} already exists. Use --force to overwrite it.`);
+  providers[name] = providerPreset(options2);
+  config.providers = providers;
+  const content = `${JSON.stringify(config, null, 2)}
+`;
+  await writeJsonAtomic(filePath, content);
+  return { path: filePath, created: true, content };
+}
+async function addModelProfile(options2) {
+  const filePath = expandHome2(options2.path ?? defaultUserConfigPath());
+  const config = await readConfigObject(filePath);
+  const providers = objectValue(config.providers);
+  const provider = objectValue(providers[options2.provider]);
+  const profiles = Array.isArray(provider.modelProfiles) ? [...provider.modelProfiles] : [];
+  const displayName = options2.displayName ?? options2.name;
+  const existingByName = profiles.findIndex((entry) => entry.name === options2.name);
+  const existingByDisplay = profiles.findIndex((entry) => entry.displayName === displayName);
+  if (existingByName >= 0 && !options2.force) throw new Error(`Profile name "${options2.name}" already exists on provider ${options2.provider}. Use --force to overwrite it.`);
+  if (existingByDisplay >= 0 && existingByDisplay !== existingByName && !options2.force) {
+    throw new Error(`Profile displayName "${displayName}" already exists on provider ${options2.provider} (profile name: ${profiles[existingByDisplay].name}). Use --force or pick a different --display-name.`);
+  }
+  const next = {
+    name: options2.name,
+    displayName,
+    model: options2.model,
+    ...options2.baseURL ? { baseURL: options2.baseURL } : {},
+    ...options2.apiKey !== void 0 || options2.apiKeyEnv ? { apiKey: options2.apiKey ?? "" } : {},
+    ...options2.apiKeyEnv ? { apiKeyEnv: options2.apiKeyEnv } : {}
+  };
+  if (existingByName >= 0) profiles[existingByName] = next;
+  else profiles.push(next);
+  provider.modelProfiles = profiles;
+  providers[options2.provider] = provider;
+  config.providers = providers;
+  const content = `${JSON.stringify(config, null, 2)}
+`;
+  await writeJsonAtomic(filePath, content);
+  return { path: filePath, created: true, content };
+}
+async function updateConfigDefaults(options2) {
+  const filePath = expandHome2(options2.path ?? defaultUserConfigPath());
+  const config = await readConfigObject(filePath);
+  const defaultProvider = normalizeOptionalName(options2.defaultProvider);
+  const defaultAgent = normalizeOptionalName(options2.defaultAgent);
+  if (!defaultProvider && !defaultAgent) throw new Error("At least one of defaultProvider or defaultAgent is required.");
+  if (defaultProvider) config.defaultProvider = defaultProvider;
+  if (defaultAgent) config.defaultAgent = defaultAgent;
+  const content = `${JSON.stringify(config, null, 2)}
+`;
+  await writeJsonAtomic(filePath, content);
+  return { path: filePath, created: true, content };
+}
+async function readConfigObject(filePath) {
+  if (!await exists(filePath)) await createUserConfig({ path: filePath });
+  const raw = JSON.parse(await readFile16(filePath, "utf8"));
+  raw.version ??= 2;
+  raw.providers = objectValue(raw.providers);
+  return raw;
+}
+function providerPreset(options2) {
+  const preset = options2.preset ?? options2.name;
+  const auth = apiKeyAuthFields(options2);
+  const openAIAuth = options2.authHeader ? { auth: { type: "api-key", header: options2.authHeader } } : {};
+  if (preset === "openai") return { type: "openai-compatible", baseURL: options2.baseURL ?? "https://api.openai.com/v1", ...apiKeyAuthFields(options2, "OPENAI_API_KEY"), ...openAIAuth, catalog: { type: "openai-models", endpoint: `${(options2.baseURL ?? "https://api.openai.com/v1").replace(/\/+$/, "")}/models` } };
+  if (preset === "anthropic") return { type: "anthropic", baseURL: options2.baseURL ?? "https://api.anthropic.com/v1", ...apiKeyAuthFields(options2, "ANTHROPIC_API_KEY"), catalog: { type: "anthropic-models", endpoint: `${(options2.baseURL ?? "https://api.anthropic.com/v1").replace(/\/+$/, "")}/models` } };
+  if (preset === "gemini") {
+    const geminiBase = options2.baseURL ?? "https://generativelanguage.googleapis.com/v1beta/openai/";
+    return { type: "openai-compatible", baseURL: geminiBase, ...apiKeyAuthFields(options2, "GEMINI_API_KEY"), apiKeyEnvAliases: ["GOOGLE_API_KEY"], ...openAIAuth, catalog: { type: "gemini-openai-models", endpoint: `${geminiBase.replace(/\/+$/, "")}/models` } };
+  }
+  if (preset === "groq") return { type: "openai-compatible", baseURL: options2.baseURL ?? "https://api.groq.com/openai/v1", ...apiKeyAuthFields(options2, "GROQ_API_KEY"), ...openAIAuth, catalog: { type: "groq-models", endpoint: `${(options2.baseURL ?? "https://api.groq.com/openai/v1").replace(/\/+$/, "")}/models` } };
+  if (preset === "azure") {
+    return {
+      type: "openai-compatible",
+      auth: { type: "api-key", header: options2.authHeader ?? "api-key" },
+      ...auth,
+      modelProfiles: [
+        {
+          name: "azure-example",
+          displayName: "Azure example",
+          model: "azure-deployment-name",
+          baseURL: options2.baseURL ?? "https://example.openai.azure.com/openai/v1",
+          ...options2.apiKey ? {} : { apiKey: "" },
+          apiKeyEnv: options2.apiKeyEnv ?? "AZURE_OPENAI_API_KEY"
+        }
+      ]
+    };
+  }
+  if (preset === "lmstudio") return { type: "openai-compatible", baseURL: options2.baseURL ?? "http://localhost:1234/v1", apiKey: options2.apiKey ?? "lm-studio", modelProfiles: [], catalog: { type: "openai-compatible-models", endpoint: `${(options2.baseURL ?? "http://localhost:1234/v1").replace(/\/+$/, "")}/models` } };
+  if (preset === "ollama-local" || preset === "ollama") return { type: "openai-compatible", baseURL: options2.baseURL ?? "http://localhost:11434/v1", apiKey: options2.apiKey ?? "ollama", modelProfiles: [], quirks: { omitTemperature: true }, catalog: { type: "openai-compatible-models", endpoint: `${(options2.baseURL ?? "http://localhost:11434/v1").replace(/\/+$/, "")}/models` } };
+  if (preset === "ollama-cloud") return { type: "ollama", baseURL: options2.baseURL ?? "https://ollama.com/api", ...apiKeyAuthFields(options2, "OLLAMA_API_KEY"), modelProfiles: [], catalog: { type: "ollama-tags", endpoint: `${(options2.baseURL ?? "https://ollama.com/api").replace(/\/+$/, "")}/tags` } };
+  if (preset === "llamacpp") return { type: "openai-compatible", baseURL: options2.baseURL ?? "http://localhost:8080/v1", apiKey: options2.apiKey ?? "llama.cpp", modelProfiles: [], catalog: { type: "openai-compatible-models", endpoint: `${(options2.baseURL ?? "http://localhost:8080/v1").replace(/\/+$/, "")}/models` } };
+  if (preset === "vllm") return { type: "openai-compatible", baseURL: options2.baseURL ?? "http://localhost:8000/v1", apiKey: options2.apiKey ?? "vllm", modelProfiles: [], catalog: { type: "openai-compatible-models", endpoint: `${(options2.baseURL ?? "http://localhost:8000/v1").replace(/\/+$/, "")}/models` } };
+  if (preset === "codex") return { type: "codex", baseURL: options2.baseURL ?? "https://chatgpt.com/backend-api/codex", authStore: "auto", allowApiKeyFallback: false, promptCacheKey: "root-session", catalog: { type: "codex-oauth-models" } };
+  if (preset === "claudecode") return { type: "claudecode", runtime: "agent-sdk", cliPath: "~/.local/bin/claude", cwdMode: "session", historyPolicy: "passthrough-resume", onInvalidResume: "fresh", attachmentFallback: "block", allowSubagents: false, sanitizeApiKeyEnv: true, authPreflight: true, useBareMode: false, usageLedgerScope: "process", sessionLock: true, abortPolicy: "record-only", catalog: { type: "claudecode-supported-models" } };
+  if ((options2.type ?? preset) === "openai-compatible") {
+    const baseURL = options2.baseURL;
+    if (!baseURL) throw new Error("openai-compatible provider requires --base-url.");
+    return {
+      type: "openai-compatible",
+      baseURL,
+      ...auth,
+      ...openAIAuth,
+      catalog: { type: "openai-compatible-models", endpoint: `${baseURL.replace(/\/+$/, "")}/models` }
+    };
+  }
+  throw new Error(`Unknown provider preset: ${preset}`);
+}
+function apiKeyAuthFields(options2, defaultApiKeyEnv) {
+  const apiKeyEnv = options2.apiKeyEnv ?? defaultApiKeyEnv;
+  return {
+    ...options2.apiKey !== void 0 || apiKeyEnv ? { apiKey: options2.apiKey ?? "" } : {},
+    ...apiKeyEnv ? { apiKeyEnv } : {}
+  };
+}
+async function writeJsonAtomic(filePath, content) {
+  await mkdir14(path33.dirname(filePath), { recursive: true, mode: 448 });
+  const temp = `${filePath}.${process.pid}.${Date.now()}.tmp`;
+  await writeFile13(temp, content, { mode: 384 });
+  await rename6(temp, filePath);
+  await chmod3(filePath, 384).catch(() => void 0);
+}
+function detectDefaultProvider() {
+  if (process.env.OPENAI_API_KEY) return "openai";
+  if (process.env.ANTHROPIC_API_KEY) return "anthropic";
+  if (process.env.GEMINI_API_KEY || process.env.GOOGLE_API_KEY) return "gemini";
+  if (process.env.GROQ_API_KEY) return "groq";
+  return "openai";
+}
+function objectValue(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? { ...value } : {};
+}
+function normalizeOptionalName(value) {
+  return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+async function exists(filePath) {
+  try {
+    await stat8(filePath);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function expandHome2(value) {
+  return resolveExpandedPath(value);
+}
+
+// src/config-watcher.ts
+var ConfigWatcher = class extends EventEmitter {
+  #filePath;
+  #debounceMs;
+  #watcher;
+  #pollIntervalMs = 1e3;
+  #lastSeen;
+  #pending;
+  #started = false;
+  constructor(options2 = {}) {
+    super();
+    this.#filePath = options2.path ?? defaultUserConfigPath();
+    this.#debounceMs = options2.debounceMs ?? 300;
+  }
+  get filePath() {
+    return this.#filePath;
+  }
+  start() {
+    if (this.#started) return;
+    this.#started = true;
+    this.#lastSeen = this.#snapshot();
+    try {
+      fs11.mkdirSync(path34.dirname(this.#filePath), { recursive: true, mode: 448 });
+      this.#watcher = fs11.watch(path34.dirname(this.#filePath), { persistent: false }, (_eventType, filename) => {
+        if (filename && filename !== path34.basename(this.#filePath)) return;
+        this.#schedule();
+      });
+      this.#watcher.on("error", () => void 0);
+    } catch {
+      this.#watcher = void 0;
+    }
+    fs11.watchFile(this.#filePath, { persistent: false, interval: this.#pollIntervalMs }, () => this.#schedule());
+  }
+  stop() {
+    this.#started = false;
+    if (this.#pending) clearTimeout(this.#pending);
+    this.#pending = void 0;
+    this.#watcher?.close();
+    this.#watcher = void 0;
+    try {
+      fs11.unwatchFile(this.#filePath);
+    } catch {
+    }
+  }
+  #schedule() {
+    if (this.#pending) clearTimeout(this.#pending);
+    this.#pending = setTimeout(() => this.#emit(), this.#debounceMs);
+  }
+  #emit() {
+    this.#pending = void 0;
+    const snapshot = this.#snapshot();
+    const previous = this.#lastSeen ?? { size: 0, mtimeMs: 0, exists: false };
+    this.#lastSeen = snapshot;
+    if (previous.exists && !snapshot.exists) {
+      this.emit("unlink", this.#filePath);
+      this.emit("changed", this.#filePath, "unlink");
+      return;
+    }
+    if (!previous.exists && snapshot.exists) {
+      this.emit("create", this.#filePath);
+      this.emit("changed", this.#filePath, "create");
+      return;
+    }
+    if (snapshot.exists && (snapshot.mtimeMs !== previous.mtimeMs || snapshot.size !== previous.size)) {
+      this.emit("change", this.#filePath);
+      this.emit("changed", this.#filePath, "change");
+    }
+  }
+  #snapshot() {
+    try {
+      const stat9 = fs11.statSync(this.#filePath);
+      return { size: stat9.size, mtimeMs: stat9.mtimeMs, exists: true };
+    } catch {
+      return { size: 0, mtimeMs: 0, exists: false };
+    }
+  }
+};
+function createConfigWatcher(options2) {
+  const watcher = new ConfigWatcher(options2);
+  watcher.start();
+  return watcher;
+}
 
 // src/vscode-worker.ts
+if (process.argv.includes("--config-template")) {
+  process.stdout.write(`${JSON.stringify(defaultUserConfig(), null, 2)}
+`);
+  process.exit(0);
+}
+if (process.argv.includes("--config-init")) {
+  const force = process.argv.includes("--force");
+  await createUserConfig({ force }).then(
+    (result) => {
+      process.stdout.write(`${JSON.stringify({ ok: true, path: result.path, created: result.created, existed: result.existed ?? false })}
+`);
+      process.exit(0);
+    },
+    (error) => {
+      process.stderr.write(`${error instanceof Error ? error.message : String(error)}
+`);
+      process.exit(1);
+    }
+  );
+}
+if (process.argv.includes("--config-add-provider")) {
+  await addProvider(jsonArg("--config-add-provider")).then(
+    (result) => {
+      process.stdout.write(`${JSON.stringify({ ok: true, path: result.path })}
+`);
+      process.exit(0);
+    },
+    (error) => {
+      process.stderr.write(`${error instanceof Error ? error.message : String(error)}
+`);
+      process.exit(1);
+    }
+  );
+}
+if (process.argv.includes("--config-add-model")) {
+  await addModelProfile(jsonArg("--config-add-model")).then(
+    (result) => {
+      process.stdout.write(`${JSON.stringify({ ok: true, path: result.path })}
+`);
+      process.exit(0);
+    },
+    (error) => {
+      process.stderr.write(`${error instanceof Error ? error.message : String(error)}
+`);
+      process.exit(1);
+    }
+  );
+}
+if (process.argv.includes("--config-set-defaults")) {
+  await updateConfigDefaults(jsonArg("--config-set-defaults")).then(
+    (result) => {
+      process.stdout.write(`${JSON.stringify({ ok: true, path: result.path })}
+`);
+      process.exit(0);
+    },
+    (error) => {
+      process.stderr.write(`${error instanceof Error ? error.message : String(error)}
+`);
+      process.exit(1);
+    }
+  );
+}
+if (process.argv.includes("--provider-auth-check")) {
+  await checkProviderAuth(jsonArg("--provider-auth-check")).then(
+    (result) => {
+      process.stdout.write(`${JSON.stringify({ ok: true, ...result })}
+`);
+      process.exit(0);
+    },
+    (error) => {
+      process.stderr.write(`${error instanceof Error ? error.message : String(error)}
+`);
+      process.exit(1);
+    }
+  );
+}
+if (process.argv.includes("--config-path")) {
+  process.stdout.write(`${defaultUserConfigPath()}
+`);
+  process.exit(0);
+}
 var options = parseOptions();
 var store = new TuiStore();
 var diffState = normalizeDiffState(options.initialSnapshot?.diff);
@@ -31956,7 +33200,7 @@ store.handleEvent = (event) => {
 };
 store.subscribe(scheduleSnapshot);
 process.on("message", (message) => {
-  void handleMessage(message).catch((error) => send({ type: "error", message: errorMessage2(error) }));
+  void handleMessage(message).catch((error) => send({ type: "error", message: errorMessage4(error) }));
 });
 process.on("disconnect", () => {
   closed = true;
@@ -31998,7 +33242,7 @@ async function main() {
     },
     (error) => {
       sendSnapshotNow();
-      send({ type: "error", message: errorMessage2(error) });
+      send({ type: "error", message: errorMessage4(error) });
       process.exit(1);
     }
   );
@@ -32061,21 +33305,21 @@ async function undoDiffAction(actionId) {
   if (!action) throw new Error("No diff action is available to undo.");
   if (!canUndoDiffAction(diffState, action.id)) throw new Error("Only the latest change for a file can be undone.");
   if (!hasBeforeSnapshot(action)) throw new Error("This diff was not recorded with enough content to undo safely.");
-  const target = path31.resolve(options.cwd, action.path);
-  const relative = path31.relative(options.cwd, target);
-  if (relative.startsWith("..") || path31.isAbsolute(relative)) throw new Error("Refusing to undo a file outside the workspace.");
+  const target = path35.resolve(options.cwd, action.path);
+  const relative = path35.relative(options.cwd, target);
+  if (relative.startsWith("..") || path35.isAbsolute(relative)) throw new Error("Refusing to undo a file outside the workspace.");
   if (!action.beforeExists) {
     await rm4(target, { force: true });
   } else {
-    await mkdir13(path31.dirname(target), { recursive: true });
-    await writeFile12(target, action.beforeContent ?? "", "utf8");
+    await mkdir15(path35.dirname(target), { recursive: true });
+    await writeFile14(target, action.beforeContent ?? "", "utf8");
   }
   markDiffActionUndone(action.id);
   send({ type: "diffUndoCompleted", actionId: action.id, path: action.path });
   sendSnapshotNow();
 }
 function submitPrompt(prompt, displayPrompt, images = []) {
-  if (isGoalClearPrompt(prompt)) clearRestoredGoal();
+  if (isGoalCommandPrompt(prompt)) clearRestoredGoal();
   if (!isCompactCommand(prompt)) clearResolvedRestoredWorkPlan();
   if (displayPrompt && displayPrompt !== prompt) displayPromptOverrides.push({ prompt, displayPrompt });
   pendingImages = images;
@@ -32089,6 +33333,32 @@ function submitGoalCommand(command) {
   if (store.snapshot().inputMode !== "prompt") return;
   submitPrompt(`/goal ${normalized}`);
 }
+function jsonArg(flag) {
+  const index = process.argv.indexOf(flag);
+  const raw = index >= 0 ? process.argv[index + 1] : void 0;
+  if (!raw) throw new Error(`${flag} requires a JSON payload.`);
+  const parsed = JSON.parse(raw);
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error(`${flag} payload must be an object.`);
+  return parsed;
+}
+async function checkProviderAuth(options2) {
+  const config = await loadConfig({ cwd: process.cwd(), configPath: options2.configPath });
+  const providerName = typeof options2.provider === "string" && options2.provider.trim() ? options2.provider.trim() : config.defaultProvider;
+  const provider = config.providers[providerName];
+  if (!provider) throw new Error(`Unknown provider: ${providerName}`);
+  const catalog = await listProviderModelCatalog(providerName, provider, {
+    refresh: options2.refresh !== false,
+    timeoutMs: typeof options2.timeoutMs === "number" && options2.timeoutMs > 0 ? options2.timeoutMs : 5e3
+  });
+  return {
+    providerName,
+    providerType: provider.type,
+    status: catalog.status,
+    source: catalog.source,
+    message: catalog.message,
+    models: catalog.models.map((model) => ({ name: model.name, displayName: model.displayName, model: model.model, source: model.source, isDefault: model.isDefault }))
+  };
+}
 function displayUserMessageEvent(event) {
   if (isNestedInvocationEvent2(event)) return event;
   const index = displayPromptOverrides.findIndex((item) => item.prompt === event.text);
@@ -32183,8 +33453,8 @@ function clearResolvedRestoredWorkPlan() {
     progressNotes: []
   };
 }
-function isGoalClearPrompt(prompt) {
-  return /^\/(?:goal|ralph-loop)\s+(?:clear|reset)\b/i.test(String(prompt || "").trim());
+function isGoalCommandPrompt(prompt) {
+  return /^\/(?:goal|ralph-loop)\b/i.test(String(prompt || "").trim());
 }
 function normalizeGoalCommand(command) {
   return command === "pause" || command === "resume" || command === "clear" ? command : void 0;
@@ -32401,7 +33671,7 @@ function numberOrZero(value) {
 }
 function compactEvent(event) {
   if (!event || typeof event !== "object") return event;
-  if (event.type === "model.text.delta") return { ...event, text: void 0, textLength: event.text?.length ?? 0 };
+  if (event.type === "model.text.delta") return { ...event, textLength: event.text?.length ?? 0 };
   return event;
 }
 function send(message) {
@@ -32440,11 +33710,16 @@ async function loadAndSendConfigMeta() {
       }
     }) : config;
     applyInitialApiKeys();
-    sendConfigMeta();
+    void sendConfigMeta();
   } catch (error) {
-    send({ type: "error", message: errorMessage2(error) });
+    send({ type: "error", message: errorMessage4(error) });
   }
 }
+var configWatcher = createConfigWatcher();
+configWatcher.on("changed", () => {
+  invalidateCatalogPingCache();
+  void loadAndSendConfigMeta();
+});
 function applyInitialApiKeys() {
   for (const [provider, apiKey] of Object.entries(options.apiKeys ?? {})) {
     if (typeof apiKey === "string") setApiKey(provider, apiKey, { quiet: true });
@@ -32454,12 +33729,18 @@ function setApiKey(providerName, apiKey, opts = {}) {
   const provider = loadedConfig?.providers?.[providerName];
   const envName = provider?.apiKeyEnv;
   if (envName && apiKey.trim()) process.env[envName] = apiKey.trim();
-  if (!opts.quiet) sendConfigMeta();
+  if (!opts.quiet) void sendConfigMeta();
 }
-function sendConfigMeta() {
+async function sendConfigMeta() {
   if (!loadedConfig) return;
   const registry = new AgentRegistry();
   for (const agentDefinition of Object.values(loadedConfig.agents ?? {})) registry.register(agentDefinition, { scope: "user", trusted: true });
+  const providerEntries = sortProviderNames(Object.keys(loadedConfig.providers)).map((name) => [name, loadedConfig.providers[name]]).filter(([, provider]) => provider && !provider.hidden);
+  const providerOrder = new Map(providerEntries.map(([name], index) => [name, index]));
+  const providers = (await Promise.all(providerEntries.map(([name, provider]) => providerMeta(name, provider)))).sort((left, right) => {
+    if (left.available !== right.available) return left.available ? -1 : 1;
+    return (providerOrder.get(left.name) ?? 0) - (providerOrder.get(right.name) ?? 0);
+  });
   send({
     type: "configMeta",
     config: {
@@ -32468,30 +33749,61 @@ function sendConfigMeta() {
       context: {
         main: loadedConfig.context?.main
       },
-      providers: Object.entries(loadedConfig.providers).filter(([, provider]) => !provider.hidden).map(([name, provider]) => providerMeta(name, provider)),
+      providerOrder: providers.map((provider) => provider.name),
+      providers,
       agents: registry.list().filter((agent) => !agent.hidden && isPrimaryAgent(agent)).map((agent) => ({ name: agent.name, description: agent.description }))
     }
   });
 }
-function providerMeta(name, provider) {
+async function providerMeta(name, provider) {
   const apiKeyEnv = typeof provider.apiKeyEnv === "string" ? provider.apiKeyEnv : void 0;
-  const extraModels = [...asStringArray(provider.models), ...asStringArray(provider.modelOptions), ...asStringArray(provider.deployments)];
-  const models = [...new Set([provider.model, ...extraModels].filter((item) => typeof item === "string" && item.trim()))];
+  const catalog = await listProviderModelCatalog(name, provider).catch((error) => ({ status: "unavailable", providerName: name, models: [], source: "fallback", message: errorMessage4(error) }));
+  const available = providerCatalogAvailable2(catalog);
+  const modelProfiles = catalog.models.length ? catalog.models.map((model) => ({
+    name: model.name,
+    displayName: model.displayName ?? model.name,
+    model: model.model,
+    description: model.description,
+    source: model.source,
+    isDefault: model.isDefault
+  })) : providerModelProfiles(name, provider);
+  const labeledProfiles = modelProfiles.map((profile) => {
+    const displayName = displayModelForProfile(profile);
+    return {
+      ...profile,
+      label: available ? displayName : unavailableLabel2(displayName),
+      available
+    };
+  });
+  const models = modelProfiles.length ? [...new Set(modelProfiles.map((item) => item.model).filter((item) => typeof item === "string" && item.trim()))] : providerModelOptions(name, provider);
+  const defaultModel = defaultDisplayModelForProvider(name, provider);
   return {
     name,
+    label: available ? name : unavailableLabel2(name),
+    available,
     type: provider.type,
     runtime: provider.runtime,
     permissionMode: provider.permissionMode,
     ga: provider.ga === true || process.env.DEMIAN_CLAUDECODE_GA === "1",
-    model: provider.model,
+    model: defaultModel,
+    modelLabel: available || !defaultModel ? defaultModel : unavailableLabel2(defaultModel),
     models,
+    modelProfiles: labeledProfiles,
     baseURL: provider.baseURL,
     apiKeyEnv,
+    apiKeyEnvAliases: asStringArray(provider.apiKeyEnvAliases),
+    catalog: { status: catalog.status, source: catalog.source, message: catalog.message },
     hasInlineApiKey: typeof provider.apiKey === "string" && provider.apiKey.length > 0,
-    hasEnvApiKey: !!(apiKeyEnv && process.env[apiKeyEnv]),
-    requiresApiKey: provider.type === "openai-compatible" || provider.type === "anthropic"
+    hasEnvApiKey: !![apiKeyEnv, ...asStringArray(provider.apiKeyEnvAliases)].find((envName) => envName && process.env[envName]),
+    requiresApiKey: provider.type === "openai-compatible" || provider.type === "anthropic" || provider.type === "ollama"
   };
 }
+function providerCatalogAvailable2(catalog) {
+  return catalog?.status === "ready" && Array.isArray(catalog.models) && catalog.models.length > 0;
+}
+function unavailableLabel2(value) {
+  return `(n/a) ${value}`;
+}
 function asStringArray(value) {
   return Array.isArray(value) ? value.filter((item) => typeof item === "string") : [];
 }
@@ -32502,6 +33814,6 @@ function contextOptions(value) {
   if (typeof value.compactAtRatio === "number" && Number.isFinite(value.compactAtRatio) && value.compactAtRatio > 0 && value.compactAtRatio <= 1) context.compactAtRatio = value.compactAtRatio;
   return Object.keys(context).length ? context : void 0;
 }
-function errorMessage2(error) {
+function errorMessage4(error) {
   return error instanceof Error ? error.message : String(error);
 }