flavor-code 1.2.15 → 1.2.16

package/dist/{app-3KW2FTVJ.js → app-7ZCJ3UOI.js}

@@ -15,7 +15,7 @@ import {
   packageVersion,
   redactErrorText,
   transcriptReducer
-} from "./chunk-5TG3E2EJ.js";
+} from "./chunk-5SRARNAC.js";
 import "./chunk-IG4Z23CL.js";
 import {
   Box_default,

package/dist/auth/store.d.ts

@@ -12,4 +12,11 @@ export interface OAuthTokenStore {
     load(): Promise<Record<string, StoredToken>>;
     save(tokens: Record<string, StoredToken>): Promise<void>;
 }
+/**
+ * Reduce the token store to a single credential. `/login` is a switch-to
+ * operation: keeping tokens from earlier services made the runtime pick the
+ * active provider by registration order, so the welcome card could show a
+ * stale service (e.g. a previous "Token Plan") instead of the one just logged in.
+ */
+export declare function retainOnlyCredentials(store: OAuthTokenStore, keepCredentialId: string): Promise<void>;
 export declare function createFileTokenStore(filePath: string): OAuthTokenStore;

package/dist/{chunk-5TG3E2EJ.js → chunk-5SRARNAC.js}

@@ -2900,6 +2900,7 @@ var MVP_COMMANDS = [
   "init",
   "config",
   "login",
+  "logout",
   "permissions",
   "skills",
   "plugins",
@@ -2937,6 +2938,7 @@ var COMMAND_DESCRIPTIONS = {
   init: "Initialize Flavor project files",
   config: "Show the resolved configuration",
   login: "Authenticate via OAuth PKCE",
+  logout: "Clear stored OAuth credentials and restore configured models",
   permissions: "Change the tool permission mode",
   skills: "List discovered skills",
   plugins: "List loaded plugins",
@@ -3214,6 +3216,7 @@ var HELP = [
   "/model <main|subagent> <provider:model>  switch any configured model",
   "/permissions <default|acceptEdits|plan|bypassPermissions|auto|bubble>",
   "/login                                  authenticate via OAuth PKCE",
+  "/logout                                 clear stored OAuth credentials",
   "/init  /config  /skills  /plugins  /hooks  /tasks",
   "/memory  /remember [type] <text>  /forget <text-or-id>  /forget-cold  /finish",
   "/checkpoint [label]  /tree  /rewind <node>  /unrevert  /fork <node>",
@@ -3628,6 +3631,8 @@ var FlavorSession = class {
     } else if (command.name === "login") {
       this.#notice("Opening browser for authentication...");
       this.#notice(await this.#services.login());
+    } else if (command.name === "logout") {
+      this.#notice(await this.#services.logout());
     } else if (command.name === "help") this.#notice(HELP);
     else if (command.name === "exit") this.#services.output({ type: "exit" });
   }
@@ -10646,7 +10651,7 @@ import { readFile as readFile11 } from "fs/promises";
 import { join as join16 } from "path";
 
 // src/tools/shell.ts
-import { spawn as spawn6 } from "child_process";
+import { spawn as spawn6, spawnSync } from "child_process";
 import { isAbsolute as isAbsolute6, relative as relative11, resolve as resolve13, sep as sep10 } from "path";
 import { z as z16 } from "zod";
 
@@ -10776,6 +10781,29 @@ function tokenizeCommandLine(command) {
 function unquoteToken(token) {
   return token.length >= 2 && token.startsWith('"') && token.endsWith('"') ? token.slice(1, -1) : token;
 }
+var cachedWindowsShell;
+function hasExecutable(name) {
+  try {
+    return spawnSync("where", [name], { stdio: "ignore", windowsHide: true }).status === 0;
+  } catch {
+    return false;
+  }
+}
+function detectWindowsShell() {
+  if (cachedWindowsShell !== void 0) return cachedWindowsShell;
+  cachedWindowsShell = hasExecutable("pwsh") ? "pwsh" : hasExecutable("powershell") ? "powershell" : "cmd";
+  return cachedWindowsShell;
+}
+function psQuote(token) {
+  return `'${token.replace(/'/g, "''")}'`;
+}
+function buildWindowsCommandLine(kind, commandLine, command, args) {
+  if (kind === "cmd") return `chcp 65001>nul & ${commandLine}`;
+  const executable = kind === "pwsh" ? "pwsh" : "powershell";
+  const script = `& ${psQuote(command)}${args.length > 0 ? ` ${args.map(psQuote).join(" ")}` : ""}; exit $LASTEXITCODE`;
+  const encoded = Buffer.from(script, "utf16le").toString("base64");
+  return `chcp 65001>nul & ${executable} -NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass -EncodedCommand ${encoded}`;
+}
 function createShellTool(workspace, options = {}) {
   const root = resolve13(workspace);
   const maxBytes = options.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES2;
@@ -10896,7 +10924,7 @@ async function executeShell(root, input, cancellation, maxBytes, onOutput) {
     const quoteArg = (s) => s.includes(" ") ? `"${s.replace(/"/g, '""')}"` : s;
     const quoted = input.args.map(quoteArg).join(" ");
     const commandLine = quoted.length > 0 ? `${quoteArg(input.command)} ${quoted}` : quoteArg(input.command);
-    const shellCommandLine = process.platform === "win32" ? `chcp 65001>nul & ${commandLine}` : commandLine;
+    const shellCommandLine = process.platform === "win32" ? buildWindowsCommandLine(detectWindowsShell(), commandLine, input.command, input.args) : commandLine;
     const child = spawn6(shellCommandLine, {
       cwd,
       shell: true,
@@ -12435,6 +12463,11 @@ function escapeHtml(text) {
 
 // src/auth/store.ts
 import { dirname as dirname13 } from "path";
+async function retainOnlyCredentials(store, keepCredentialId) {
+  const tokens = await store.load();
+  const retained = Object.fromEntries(Object.entries(tokens).filter(([id]) => id === keepCredentialId));
+  await store.save(retained);
+}
 function createFileTokenStore(filePath) {
   let baseline = {};
   const store = {
@@ -19464,7 +19497,10 @@ async function createProductionRuntime(options) {
         states: { ...taskStates },
         results: { ...taskResults }
       },
-      models: { main: harness.mainModelId, subagent: harness.subagentModelId },
+      // Persist the resolved decision, not the harness snapshot: after logout the
+      // harness may still hold the old login model, and resuming from that stale
+      // value is what made the welcome card show a previous service.
+      models: { main: mainModel, subagent: childModel },
       permissionMode: harness.permissionMode,
       memory: memoryLifecycle,
       timeline: { version: 1, state: timelineState }
@@ -20105,8 +20141,8 @@ async function createProductionRuntime(options) {
     const services = {
       hooks,
       workspace,
-      mainModel: () => harness.mainModelId,
-      subagentModel: () => harness.subagentModelId,
+      mainModel: () => mainModel,
+      subagentModel: () => childModel,
       llmServiceName: () => effectiveLlm?.serviceName,
       permissionMode: () => harness.permissionMode,
       ...palServices === void 0 ? {} : { pals: palServices },
@@ -20180,6 +20216,8 @@ async function createProductionRuntime(options) {
           }
         }
         harness.setModel(role, id);
+        if (role === "main") mainModel = id;
+        else childModel = id;
         await persist();
       },
       setPermissionMode: async (mode) => {
@@ -20426,12 +20464,48 @@ ${renderMemoryDocument(entries)}`;
           goalOrchestrator.setModels(mainModel, mainModel);
           delete selectedModels.mainError;
           delete selectedModels.childError;
+          await retainOnlyCredentials(tokenStore, credentialId);
           if (!secrets.includes(next.accessToken)) secrets.push(next.accessToken);
           await persist();
           return `Authenticated to "${next.serviceName}". Main model ${mainModel}; subagent ${childModel}; gateway ${next.baseURL}. Configuration is active now.`;
         } catch (error) {
           return `Login failed: ${message(error)}`;
         }
+      },
+      async logout() {
+        const tokenStore = createFileTokenStore(join22(home, ".flavor-code", "auth.json"));
+        const tokens = await tokenStore.load();
+        const hadCredentials = Object.keys(tokens).length > 0 || effectiveLlm !== void 0;
+        if (!hadCredentials) {
+          return "Not authenticated \u2014 no stored OAuth credentials to clear.";
+        }
+        for (let i = registeredProviders.length - 1; i >= 0; i -= 1) {
+          const provider = registeredProviders[i];
+          if (provider !== void 0 && provider.pkceManaged === true) {
+            registry.unregister(provider.name);
+            registeredProviders.splice(i, 1);
+          }
+        }
+        if (effectiveLlm !== void 0) {
+          registry.unregister(effectiveLlm.providerId);
+          effectiveLlm = void 0;
+        }
+        await tokenStore.save({});
+        const fallback = selectModels(config, registeredProviders, diagnostics);
+        mainModel = fallback.main;
+        childModel = fallback.child;
+        if (fallback.mainError === void 0) delete selectedModels.mainError;
+        else selectedModels.mainError = fallback.mainError;
+        if (fallback.childError === void 0) delete selectedModels.childError;
+        else selectedModels.childError = fallback.childError;
+        if (fallback.mainError === void 0 && registry.has(safeProvider(mainModel)) && registry.has(safeProvider(childModel))) {
+          harness.setModel("main", mainModel);
+          harness.setModel("subagent", childModel);
+          hallucinationGuard.setModel(childModel);
+          goalOrchestrator.setModels(mainModel, mainModel);
+        }
+        await persist();
+        return fallback.mainError === void 0 ? `Logged out. Cleared OAuth credentials. Main model ${mainModel}; subagent ${childModel}.` : `Logged out. Cleared OAuth credentials. ${fallback.mainError}`;
       }
     };
     if (config.sleep) {

package/dist/{chunk-BKARQJQZ.js → chunk-PGS3M32Y.js}

@@ -4,7 +4,7 @@ import {
   message,
   redactErrorText,
   redactSecrets
-} from "./chunk-5TG3E2EJ.js";
+} from "./chunk-5SRARNAC.js";
 
 // src/rpc/server.ts
 import { createInterface } from "readline";

package/dist/cli.js

@@ -3,7 +3,7 @@ import { createRequire } from "node:module"; const require = createRequire(impor
 import {
   FlavorRpcServer,
   TraceRecorder
-} from "./chunk-BKARQJQZ.js";
+} from "./chunk-PGS3M32Y.js";
 import {
   staticTaskLines
 } from "./chunk-KKIBYDJI.js";
@@ -22,7 +22,7 @@ import {
   packageVersion,
   redactErrorText,
   runPalBroker
-} from "./chunk-5TG3E2EJ.js";
+} from "./chunk-5SRARNAC.js";
 import {
   McpServerConfigSchema,
   McpServerNameSchema,
@@ -861,7 +861,7 @@ async function runInteractiveCli(props) {
   const [{ render, AlternateScreen }, { createElement }, { App }] = await Promise.all([
     import("./claude-ink-ORUA7GWG.js"),
     import("react"),
-    import("./app-3KW2FTVJ.js")
+    import("./app-7ZCJ3UOI.js")
   ]);
   const instance = await render(createElement(
     AlternateScreen,

package/dist/desktop/main.js

@@ -505,6 +505,7 @@ var DESKTOP_CHANNELS = {
   d2cRunQualityJudge: "desktop:d2c-run-quality-judge",
   d2cResolveQualityIssue: "desktop:d2c-resolve-quality-issue",
   d2cSetManualAcceptance: "desktop:d2c-set-manual-acceptance",
+  e2eGetDeliveryRun: "desktop:e2e-get-delivery-run",
   event: "desktop:event"
 };
 
@@ -11210,7 +11211,7 @@ import { readFile as readFile12 } from "fs/promises";
 import { join as join17 } from "path";
 
 // src/tools/shell.ts
-import { spawn as spawn3 } from "child_process";
+import { spawn as spawn3, spawnSync } from "child_process";
 import { isAbsolute as isAbsolute8, relative as relative11, resolve as resolve13, sep as sep10 } from "path";
 import { z as z21 } from "zod";
 
@@ -11340,6 +11341,29 @@ function tokenizeCommandLine(command) {
 function unquoteToken(token) {
   return token.length >= 2 && token.startsWith('"') && token.endsWith('"') ? token.slice(1, -1) : token;
 }
+var cachedWindowsShell;
+function hasExecutable(name) {
+  try {
+    return spawnSync("where", [name], { stdio: "ignore", windowsHide: true }).status === 0;
+  } catch {
+    return false;
+  }
+}
+function detectWindowsShell() {
+  if (cachedWindowsShell !== void 0) return cachedWindowsShell;
+  cachedWindowsShell = hasExecutable("pwsh") ? "pwsh" : hasExecutable("powershell") ? "powershell" : "cmd";
+  return cachedWindowsShell;
+}
+function psQuote(token) {
+  return `'${token.replace(/'/g, "''")}'`;
+}
+function buildWindowsCommandLine(kind, commandLine, command, args) {
+  if (kind === "cmd") return `chcp 65001>nul & ${commandLine}`;
+  const executable = kind === "pwsh" ? "pwsh" : "powershell";
+  const script = `& ${psQuote(command)}${args.length > 0 ? ` ${args.map(psQuote).join(" ")}` : ""}; exit $LASTEXITCODE`;
+  const encoded = Buffer.from(script, "utf16le").toString("base64");
+  return `chcp 65001>nul & ${executable} -NoLogo -NoProfile -NonInteractive -ExecutionPolicy Bypass -EncodedCommand ${encoded}`;
+}
 function createShellTool(workspace, options = {}) {
   const root = resolve13(workspace);
   const maxBytes = options.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES2;
@@ -11460,7 +11484,7 @@ async function executeShell(root, input, cancellation, maxBytes, onOutput) {
     const quoteArg = (s) => s.includes(" ") ? `"${s.replace(/"/g, '""')}"` : s;
     const quoted = input.args.map(quoteArg).join(" ");
     const commandLine = quoted.length > 0 ? `${quoteArg(input.command)} ${quoted}` : quoteArg(input.command);
-    const shellCommandLine = process.platform === "win32" ? `chcp 65001>nul & ${commandLine}` : commandLine;
+    const shellCommandLine = process.platform === "win32" ? buildWindowsCommandLine(detectWindowsShell(), commandLine, input.command, input.args) : commandLine;
     const child = spawn3(shellCommandLine, {
       cwd,
       shell: true,
@@ -13090,6 +13114,11 @@ function escapeHtml(text) {
 
 // src/auth/store.ts
 import { dirname as dirname13 } from "path";
+async function retainOnlyCredentials(store, keepCredentialId) {
+  const tokens2 = await store.load();
+  const retained = Object.fromEntries(Object.entries(tokens2).filter(([id]) => id === keepCredentialId));
+  await store.save(retained);
+}
 function createFileTokenStore(filePath) {
   let baseline = {};
   const store = {
@@ -18789,6 +18818,7 @@ var MVP_COMMANDS = [
   "init",
   "config",
   "login",
+  "logout",
   "permissions",
   "skills",
   "plugins",
@@ -19066,6 +19096,7 @@ var HELP = [
   "/model <main|subagent> <provider:model>  switch any configured model",
   "/permissions <default|acceptEdits|plan|bypassPermissions|auto|bubble>",
   "/login                                  authenticate via OAuth PKCE",
+  "/logout                                 clear stored OAuth credentials",
   "/init  /config  /skills  /plugins  /hooks  /tasks",
   "/memory  /remember [type] <text>  /forget <text-or-id>  /forget-cold  /finish",
   "/checkpoint [label]  /tree  /rewind <node>  /unrevert  /fork <node>",
@@ -19480,6 +19511,8 @@ var FlavorSession = class {
     } else if (command.name === "login") {
       this.#notice("Opening browser for authentication...");
       this.#notice(await this.#services.login());
+    } else if (command.name === "logout") {
+      this.#notice(await this.#services.logout());
     } else if (command.name === "help") this.#notice(HELP);
     else if (command.name === "exit") this.#services.output({ type: "exit" });
   }
@@ -23167,7 +23200,10 @@ async function createProductionRuntime(options) {
         states: { ...taskStates },
         results: { ...taskResults }
       },
-      models: { main: harness.mainModelId, subagent: harness.subagentModelId },
+      // Persist the resolved decision, not the harness snapshot: after logout the
+      // harness may still hold the old login model, and resuming from that stale
+      // value is what made the welcome card show a previous service.
+      models: { main: mainModel, subagent: childModel },
       permissionMode: harness.permissionMode,
       memory: memoryLifecycle,
       timeline: { version: 1, state: timelineState }
@@ -23808,8 +23844,8 @@ async function createProductionRuntime(options) {
     const services = {
       hooks,
       workspace,
-      mainModel: () => harness.mainModelId,
-      subagentModel: () => harness.subagentModelId,
+      mainModel: () => mainModel,
+      subagentModel: () => childModel,
       llmServiceName: () => effectiveLlm?.serviceName,
       permissionMode: () => harness.permissionMode,
       ...palServices === void 0 ? {} : { pals: palServices },
@@ -23883,6 +23919,8 @@ async function createProductionRuntime(options) {
           }
         }
         harness.setModel(role, id);
+        if (role === "main") mainModel = id;
+        else childModel = id;
         await persist();
       },
       setPermissionMode: async (mode) => {
@@ -24129,12 +24167,48 @@ ${renderMemoryDocument(entries)}`;
           goalOrchestrator.setModels(mainModel, mainModel);
           delete selectedModels.mainError;
           delete selectedModels.childError;
+          await retainOnlyCredentials(tokenStore, credentialId);
           if (!secrets.includes(next.accessToken)) secrets.push(next.accessToken);
           await persist();
           return `Authenticated to "${next.serviceName}". Main model ${mainModel}; subagent ${childModel}; gateway ${next.baseURL}. Configuration is active now.`;
         } catch (error) {
           return `Login failed: ${message(error)}`;
         }
+      },
+      async logout() {
+        const tokenStore = createFileTokenStore(join29(home, ".flavor-code", "auth.json"));
+        const tokens2 = await tokenStore.load();
+        const hadCredentials = Object.keys(tokens2).length > 0 || effectiveLlm !== void 0;
+        if (!hadCredentials) {
+          return "Not authenticated \u2014 no stored OAuth credentials to clear.";
+        }
+        for (let i = registeredProviders.length - 1; i >= 0; i -= 1) {
+          const provider = registeredProviders[i];
+          if (provider !== void 0 && provider.pkceManaged === true) {
+            registry.unregister(provider.name);
+            registeredProviders.splice(i, 1);
+          }
+        }
+        if (effectiveLlm !== void 0) {
+          registry.unregister(effectiveLlm.providerId);
+          effectiveLlm = void 0;
+        }
+        await tokenStore.save({});
+        const fallback = selectModels(config, registeredProviders, diagnostics);
+        mainModel = fallback.main;
+        childModel = fallback.child;
+        if (fallback.mainError === void 0) delete selectedModels.mainError;
+        else selectedModels.mainError = fallback.mainError;
+        if (fallback.childError === void 0) delete selectedModels.childError;
+        else selectedModels.childError = fallback.childError;
+        if (fallback.mainError === void 0 && registry.has(safeProvider(mainModel)) && registry.has(safeProvider(childModel))) {
+          harness.setModel("main", mainModel);
+          harness.setModel("subagent", childModel);
+          hallucinationGuard.setModel(childModel);
+          goalOrchestrator.setModels(mainModel, mainModel);
+        }
+        await persist();
+        return fallback.mainError === void 0 ? `Logged out. Cleared OAuth credentials. Main model ${mainModel}; subagent ${childModel}.` : `Logged out. Cleared OAuth credentials. ${fallback.mainError}`;
       }
     };
     if (config.sleep) {
@@ -27738,11 +27812,12 @@ var DesktopRuntimeController = class {
     ].join("\n");
     const delivery = await readDeliveryRun(workspace, task);
     if (delivery?.nodes.api.status === "running") {
+      const apiArtifacts = await Promise.all(generated.files.map(async (file) => artifactRef(file, await readFile33(join39(project, file)))));
       const completed = await updateDeliveryRun(
         workspace,
         task,
         delivery.revision,
-        (run) => completeDeliveryNode(run, "api", generated.files.map((file) => artifactRef(file, file)))
+        (run) => completeDeliveryNode(run, "api", apiArtifacts)
       );
       await updateDeliveryRun(
         workspace,
@@ -28018,6 +28093,12 @@ VITE_API_BASE_URL=${running.url}
     });
     return readD2cProductPlanView(workspace, task).then((view) => view);
   }
+  /** Read-only snapshot of the seven-node E2E delivery run; undefined when the task never started a delivery. */
+  async getE2eDeliveryRun(task) {
+    const workspace = this.#workspace;
+    if (workspace === void 0) return void 0;
+    return readDeliveryRun(workspace, task);
+  }
   async #assertProductPrdLocked(workspace, task) {
     const current = await readD2cProductPlanView(workspace, task);
     if (current?.plan.approvedPrd === void 0) return;
@@ -28742,6 +28823,9 @@ function installIpcHandlers() {
     const input = D2cQualityIssueDecisionInputSchema.parse(value);
     return controller.resolveD2cQualityIssue(input.task, input.issueId, input.decision);
   });
+  ipcMain.handle(DESKTOP_CHANNELS.e2eGetDeliveryRun, async (_event, value) => {
+    return controller.getE2eDeliveryRun(D2cTaskActionInputSchema.parse(value).task);
+  });
 }
 function applicationMenu() {
   return Menu.buildFromTemplate([

package/dist/desktop/preload.cjs

@@ -65,6 +65,7 @@ var DESKTOP_CHANNELS = {
   d2cRunQualityJudge: "desktop:d2c-run-quality-judge",
   d2cResolveQualityIssue: "desktop:d2c-resolve-quality-issue",
   d2cSetManualAcceptance: "desktop:d2c-set-manual-acceptance",
+  e2eGetDeliveryRun: "desktop:e2e-get-delivery-run",
   event: "desktop:event"
 };
 
@@ -158,6 +159,7 @@ var api = {
   saveD2cJudgeConfig: (input) => import_electron.ipcRenderer.invoke(DESKTOP_CHANNELS.d2cSaveJudgeConfig, input),
   runD2cQualityJudge: (task) => import_electron.ipcRenderer.invoke(DESKTOP_CHANNELS.d2cRunQualityJudge, { task }),
   resolveD2cQualityIssue: (task, issueId, decision) => import_electron.ipcRenderer.invoke(DESKTOP_CHANNELS.d2cResolveQualityIssue, { task, issueId, decision }),
+  getE2eDeliveryRun: (task) => import_electron.ipcRenderer.invoke(DESKTOP_CHANNELS.e2eGetDeliveryRun, { task }),
   onEvent(listener) {
     const handler = (_event, value) => listener(value);
     import_electron.ipcRenderer.on(DESKTOP_CHANNELS.event, handler);