open-walnut 0.4.2 → 0.4.3

package/dist/cli.js

@@ -2996,10 +2996,155 @@ var init_model_catalog = __esm({
   }
 });
 
-// src/core/ssh-config-scanner.ts
-import fs6 from "fs/promises";
-import path8 from "path";
+// src/core/claude-cli-detect.ts
+var claude_cli_detect_exports = {};
+__export(claude_cli_detect_exports, {
+  _CLAUDE_CREDENTIALS_HOME: () => _CLAUDE_CREDENTIALS_HOME,
+  describeClaudeCliAuth: () => describeClaudeCliAuth,
+  detectClaudeCli: () => detectClaudeCli,
+  hasClaudeSubscriptionAuth: () => hasClaudeSubscriptionAuth,
+  isClaudeCliInstalled: () => isClaudeCliInstalled,
+  resolveClaudeCliExecutable: () => resolveClaudeCliExecutable
+});
+import { execFileSync } from "child_process";
+import fs6 from "fs";
 import os3 from "os";
+import path8 from "path";
+function resolveClaudeCliExecutable(env3 = process.env) {
+  const home = env3.HOME || os3.homedir();
+  const pathDirs = (env3.PATH ?? "").split(path8.delimiter).filter(Boolean);
+  const fallbackDirs = [
+    path8.join(home, ".toolbox", "bin"),
+    path8.join(home, ".local", "bin"),
+    path8.join(home, ".npm-global", "bin"),
+    path8.join(home, ".bun", "bin"),
+    "/usr/local/bin",
+    "/opt/homebrew/bin",
+    "/usr/bin",
+    "/bin"
+  ];
+  for (const dir2 of [.../* @__PURE__ */ new Set([...pathDirs, ...fallbackDirs])]) {
+    const candidate = path8.join(dir2, "claude");
+    try {
+      fs6.accessSync(candidate, fs6.constants.X_OK);
+      return candidate;
+    } catch {
+    }
+  }
+  return null;
+}
+function isClaudeCliInstalled() {
+  return resolveClaudeCliExecutable() !== null;
+}
+function hasClaudeSubscriptionAuth() {
+  if (process.platform === "darwin") {
+    try {
+      execFileSync("security", ["find-generic-password", "-s", KEYCHAIN_OAUTH_SERVICE], {
+        stdio: "ignore"
+      });
+      return true;
+    } catch {
+    }
+  }
+  return fileCredentialExists();
+}
+function fileCredentialExists() {
+  try {
+    return fs6.existsSync(CLAUDE_CREDENTIALS_FILE);
+  } catch {
+    return false;
+  }
+}
+function detectClaudeCli() {
+  const installed2 = isClaudeCliInstalled();
+  const subscriptionAuth = installed2 && hasClaudeSubscriptionAuth();
+  return {
+    installed: installed2,
+    subscriptionAuth,
+    subscriptionReady: installed2 && subscriptionAuth,
+    ready: installed2,
+    auth: installed2 ? describeClaudeCliAuth() : { mode: "unknown", label: "not installed" }
+  };
+}
+function describeClaudeCliAuth(env3 = process.env, settingsEnv = readClaudeSettingsEnv()) {
+  const merged = { ...env3, ...settingsEnv };
+  const truthy = (v3) => !!v3 && v3 !== "0" && v3.toLowerCase() !== "false";
+  if (truthy(merged.CLAUDE_CODE_USE_BEDROCK)) {
+    const region = merged.AWS_REGION || merged.AWS_DEFAULT_REGION;
+    return { mode: "bedrock", label: region ? `Bedrock (${region})` : "Bedrock" };
+  }
+  if (truthy(merged.CLAUDE_CODE_USE_VERTEX)) return { mode: "vertex", label: "Vertex AI" };
+  if (merged.ANTHROPIC_API_KEY || merged.ANTHROPIC_AUTH_TOKEN) return { mode: "api-key", label: "an Anthropic API key" };
+  if (hasClaudeSubscriptionAuth()) return { mode: "subscription", label: "your Claude subscription" };
+  return { mode: "unknown", label: "its own login" };
+}
+function readClaudeSettingsEnv() {
+  try {
+    const raw = fs6.readFileSync(path8.join(os3.homedir(), ".claude", "settings.json"), "utf8");
+    const env3 = JSON.parse(raw).env ?? {};
+    return Object.fromEntries(Object.entries(env3).filter(([, v3]) => typeof v3 === "string"));
+  } catch {
+    return {};
+  }
+}
+var KEYCHAIN_OAUTH_SERVICE, _CLAUDE_CREDENTIALS_HOME;
+var init_claude_cli_detect = __esm({
+  "src/core/claude-cli-detect.ts"() {
+    "use strict";
+    init_constants();
+    KEYCHAIN_OAUTH_SERVICE = "Claude Code-credentials";
+    _CLAUDE_CREDENTIALS_HOME = os3.homedir();
+  }
+});
+
+// src/agent/providers/default-provider.ts
+var default_provider_exports = {};
+__export(default_provider_exports, {
+  CLAUDE_CLI_PROVIDER: () => CLAUDE_CLI_PROVIDER,
+  LEGACY_DEFAULT_PROVIDER: () => LEGACY_DEFAULT_PROVIDER,
+  _resetDefaultProviderCacheForTesting: () => _resetDefaultProviderCacheForTesting,
+  hasExplicitBedrockConfig: () => hasExplicitBedrockConfig,
+  mainProviderIsImplicit: () => mainProviderIsImplicit,
+  resolveMainProviderName: () => resolveMainProviderName
+});
+function claudeCliInstalledCached() {
+  const now = Date.now();
+  if (!cliProbe || now - cliProbe.at > CLI_PROBE_TTL_MS) {
+    cliProbe = { at: now, installed: isClaudeCliInstalled() };
+  }
+  return cliProbe.installed;
+}
+function _resetDefaultProviderCacheForTesting() {
+  cliProbe = void 0;
+}
+function hasExplicitBedrockConfig(config) {
+  const b8 = config.providers?.bedrock;
+  if (b8 && (b8.bearer_token || b8.aws_access_key_id || b8.aws_profile || b8.aws_credential_export)) return true;
+  return !!config.provider?.bedrock_bearer_token;
+}
+function resolveMainProviderName(config, claudeInstalled = claudeCliInstalledCached()) {
+  if (config.agent?.main_provider) return config.agent.main_provider;
+  if (claudeInstalled) return CLAUDE_CLI_PROVIDER;
+  return LEGACY_DEFAULT_PROVIDER;
+}
+function mainProviderIsImplicit(config) {
+  return !config.agent?.main_provider;
+}
+var LEGACY_DEFAULT_PROVIDER, CLAUDE_CLI_PROVIDER, CLI_PROBE_TTL_MS, cliProbe;
+var init_default_provider = __esm({
+  "src/agent/providers/default-provider.ts"() {
+    "use strict";
+    init_claude_cli_detect();
+    LEGACY_DEFAULT_PROVIDER = "bedrock";
+    CLAUDE_CLI_PROVIDER = "claude_cli";
+    CLI_PROBE_TTL_MS = 6e4;
+  }
+});
+
+// src/core/ssh-config-scanner.ts
+import fs7 from "fs/promises";
+import path9 from "path";
+import os4 from "os";
 function isGitServerHost(h8) {
   if (h8.user === "git") return true;
   const gitPrefix = /^(git|github|gitlab|bitbucket|codecommit|ssh\.github)\./i;
@@ -3015,10 +3160,10 @@ function shortLabelForFqdn(hostname) {
   return `${first.slice(0, 12)}\u2026${first.slice(-8)}`;
 }
 async function scanSshConfig(configPath) {
-  const sshConfigPath = configPath ?? path8.join(os3.homedir(), ".ssh", "config");
+  const sshConfigPath = configPath ?? path9.join(os4.homedir(), ".ssh", "config");
   let mtimeMs2;
   try {
-    mtimeMs2 = (await fs6.stat(sshConfigPath)).mtimeMs;
+    mtimeMs2 = (await fs7.stat(sshConfigPath)).mtimeMs;
   } catch {
     return /* @__PURE__ */ new Map();
   }
@@ -3031,7 +3176,7 @@ async function scanSshConfig(configPath) {
 async function parseSshConfigFile(sshConfigPath) {
   const discovered = /* @__PURE__ */ new Map();
   try {
-    const content = await fs6.readFile(sshConfigPath, "utf-8");
+    const content = await fs7.readFile(sshConfigPath, "utf-8");
     const lines = content.split("\n");
     let currentHost = null;
     for (const rawLine of lines) {
@@ -3132,23 +3277,24 @@ __export(config_manager_exports, {
   updatePushTokens: () => updatePushTokens,
   writeFileAtomic: () => writeFileAtomic2
 });
-import fs7 from "fs/promises";
+import fs8 from "fs/promises";
 import yaml from "js-yaml";
-function resolveAgentEngineProvider(config) {
+function resolveAgentEngineProvider(config, claudeInstalled) {
   if (CLOUD_MODE) return "walnut-agent";
   const raw = config.agent?.provider;
   if (typeof raw === "string" && VALID_AGENT_ENGINE_PROVIDERS.has(raw)) {
     return raw;
   }
-  if (raw !== void 0) {
-    log.session.warn("config-manager: agent.provider is not a known engine \u2014 using the default", {
-      value: typeof raw === "string" ? raw : `<${typeof raw}>`,
-      using: FALLBACK_AGENT_ENGINE_PROVIDER,
-      valid: [...VALID_AGENT_ENGINE_PROVIDERS].join(", ")
-    });
-    return FALLBACK_AGENT_ENGINE_PROVIDER;
+  if (raw === void 0) {
+    const main = claudeInstalled === void 0 ? resolveMainProviderName(config) : resolveMainProviderName(config, claudeInstalled);
+    return main === CLAUDE_CLI_PROVIDER ? "claude-code" : "walnut-agent";
   }
-  return DEFAULT_AGENT_ENGINE_PROVIDER;
+  log.session.warn("config-manager: agent.provider is not a known engine \u2014 using the fallback", {
+    value: typeof raw === "string" ? raw : `<${typeof raw}>`,
+    using: FALLBACK_AGENT_ENGINE_PROVIDER,
+    valid: [...VALID_AGENT_ENGINE_PROVIDERS].join(", ")
+  });
+  return FALLBACK_AGENT_ENGINE_PROVIDER;
 }
 function migrateConfigToProjectOnly(config) {
   let changed = false;
@@ -3221,13 +3367,13 @@ function migrateConfigToProjectOnly(config) {
 }
 async function readRawConfigContent() {
   try {
-    const primary = await fs7.readFile(CONFIG_FILE, "utf-8");
+    const primary = await fs8.readFile(CONFIG_FILE, "utf-8");
     if (primary.trim()) return primary;
     throw new Error("config.yaml is empty");
   } catch (primaryErr) {
     let backup;
     try {
-      backup = await fs7.readFile(CONFIG_BACKUP_FILE, "utf-8");
+      backup = await fs8.readFile(CONFIG_BACKUP_FILE, "utf-8");
     } catch {
       return null;
     }
@@ -3237,7 +3383,7 @@ async function readRawConfigContent() {
       backup: CONFIG_BACKUP_FILE
     });
     try {
-      await fs7.writeFile(CONFIG_FILE, backup, "utf-8");
+      await fs8.writeFile(CONFIG_FILE, backup, "utf-8");
     } catch {
     }
     return backup;
@@ -3246,10 +3392,10 @@ async function readRawConfigContent() {
 async function writeFileAtomic2(filePath, content) {
   const tmp = `${filePath}.tmp-${process.pid}-${Date.now().toString(36)}`;
   try {
-    await fs7.writeFile(tmp, content, "utf-8");
-    await fs7.rename(tmp, filePath);
+    await fs8.writeFile(tmp, content, "utf-8");
+    await fs8.rename(tmp, filePath);
   } catch (err2) {
-    await fs7.rm(tmp, { force: true }).catch(() => {
+    await fs8.rm(tmp, { force: true }).catch(() => {
     });
     throw err2;
   }
@@ -3447,7 +3593,7 @@ async function seedConfigDefaults() {
   const config = await getConfig();
   let needsWrite = false;
   try {
-    const raw = await fs7.readFile(CONFIG_FILE, "utf-8");
+    const raw = await fs8.readFile(CONFIG_FILE, "utf-8");
     if (!raw.includes("available_models")) {
       needsWrite = true;
     }
@@ -3475,6 +3621,7 @@ var init_config_manager = __esm({
     init_constants();
     init_types();
     init_model_catalog();
+    init_default_provider();
     init_ssh_config_scanner();
     DEFAULT_CONFIG = {
       version: 1,
@@ -3486,12 +3633,12 @@ var init_config_manager = __esm({
       // so this never re-routes an established setup.
       defaults: { priority: "none", platform: "local" },
       provider: { type: "claude-code" },
-      // Which ENGINE answers a Personal AI chat turn. 'walnut-agent' = today's in-process
-      // agent loop; 'claude-code' routes the turn into a lane-bound `claude` session.
-      // NOTE: getConfig() spreads the parsed file OVER these defaults at the TOP
-      // level, so a config.yaml with any `agent:` section replaces this whole object
-      // — resolveAgentEngineProvider() (below) is what actually applies the default.
-      agent: { provider: DEFAULT_AGENT_ENGINE_PROVIDER }
+      // Which ENGINE answers a Personal AI chat turn is NOT defaulted here: it follows
+      // the AI provider (Settings → AI Provider) — see resolveAgentEngineProvider().
+      // getConfig() spreads the parsed file OVER these defaults at the TOP level, so
+      // anything put in this object is dropped by any config.yaml with an `agent:`
+      // section; the resolver is what actually applies the rule.
+      agent: {}
     };
     CONFIG_BACKUP_FILE = `${CONFIG_FILE}.bak`;
     writeLock = Promise.resolve();
@@ -3500,15 +3647,15 @@ var init_config_manager = __esm({
 
 // src/core/tmp-sweep.ts
 import fsp5 from "fs/promises";
-import path9 from "path";
+import path10 from "path";
 function sweepDirs() {
   return [
     WALNUT_HOME,
     SYNC_DIR,
-    path9.join(WALNUT_HOME, "sessions"),
-    path9.join(WALNUT_HOME, "sessions", "transcripts"),
+    path10.join(WALNUT_HOME, "sessions"),
+    path10.join(WALNUT_HOME, "sessions", "transcripts"),
     TASKS_DIR,
-    path9.join(TASKS_DIR, "outbox"),
+    path10.join(TASKS_DIR, "outbox"),
     CONVERSATIONS_DIR,
     MEMORY_DIR,
     DAILY_DIR,
@@ -3529,7 +3676,7 @@ async function sweepOrphanAtomicTmpFiles() {
       const entries = await fsp5.readdir(dir2, { withFileTypes: true });
       for (const entry of entries) {
         if (!entry.isFile() || !ORPHAN_RE.test(entry.name)) continue;
-        const full = path9.join(dir2, entry.name);
+        const full = path10.join(dir2, entry.name);
         try {
           const st = await fsp5.stat(full);
           if (st.mtimeMs > cutoff) continue;
@@ -3566,10 +3713,10 @@ __export(init_exports, {
   initDirectories: () => initDirectories
 });
 import fsp6 from "fs/promises";
-import fs8 from "fs";
+import fs9 from "fs";
 async function migrateLegacyMemoryFile() {
   try {
-    if (fs8.existsSync(LEGACY_MEMORY_FILE) && !fs8.existsSync(MEMORY_FILE)) {
+    if (fs9.existsSync(LEGACY_MEMORY_FILE) && !fs9.existsSync(MEMORY_FILE)) {
       await fsp6.rename(LEGACY_MEMORY_FILE, MEMORY_FILE);
       log.memory.info("Migrated MEMORY.md into memory/ folder", { from: LEGACY_MEMORY_FILE, to: MEMORY_FILE });
     }
@@ -4524,15 +4671,15 @@ __export(task_db_exports, {
   transaction: () => transaction
 });
 import Database from "better-sqlite3";
-import fs9 from "fs";
-import path10 from "path";
+import fs10 from "fs";
+import path11 from "path";
 import yaml2 from "js-yaml";
 function getDb() {
   if (db) return db;
   if (initAttempted) throw initError;
   initAttempted = true;
   try {
-    fs9.mkdirSync(path10.dirname(TASK_DB_PATH), { recursive: true });
+    fs10.mkdirSync(path11.dirname(TASK_DB_PATH), { recursive: true });
     const handle2 = new Database(TASK_DB_PATH);
     handle2.pragma("journal_mode = WAL");
     handle2.pragma("busy_timeout = 5000");
@@ -4762,8 +4909,8 @@ function migrateToProjectOnly(handle2) {
   }
   try {
     handle2.pragma("wal_checkpoint(TRUNCATE)");
-    if (!fs9.existsSync(TASK_DB_PRE_V5_BACKUP_PATH)) {
-      fs9.copyFileSync(TASK_DB_PATH, TASK_DB_PRE_V5_BACKUP_PATH);
+    if (!fs10.existsSync(TASK_DB_PRE_V5_BACKUP_PATH)) {
+      fs10.copyFileSync(TASK_DB_PATH, TASK_DB_PRE_V5_BACKUP_PATH);
       log.task.info("task-db v5: wrote pre-migration backup", { path: TASK_DB_PRE_V5_BACKUP_PATH });
     }
   } catch (err2) {
@@ -5273,7 +5420,7 @@ var init_task_db = __esm({
     init_constants();
     init_logging();
     init_phase2();
-    TASK_DB_PATH = path10.join(TASKS_DIR, "tasks.sqlite");
+    TASK_DB_PATH = path11.join(TASKS_DIR, "tasks.sqlite");
     EXPLICIT_TASK_COLUMNS = [
       "id",
       "title",
@@ -5436,8 +5583,8 @@ var init_task_db = __esm({
 });
 
 // src/core/task-db-migration.ts
-import fs10 from "fs";
-import path11 from "path";
+import fs11 from "fs";
+import path12 from "path";
 import yaml3 from "js-yaml";
 async function runMigrationIfNeeded() {
   const db5 = getDb();
@@ -5448,7 +5595,7 @@ async function runMigrationIfNeeded() {
   if (existing.n > 0) {
     return { migrated: false, count: existing.n };
   }
-  if (!fs10.existsSync(TASKS_FILE)) {
+  if (!fs11.existsSync(TASKS_FILE)) {
     return { migrated: false, count: 0 };
   }
   const store3 = await readJsonFile(TASKS_FILE, { version: 1, tasks: [] });
@@ -5605,9 +5752,9 @@ async function runMigrationIfNeeded() {
   }
   const after = db5.prepare("SELECT COUNT(*) AS n FROM tasks").get();
   const count2 = after.n;
-  const backupPath = path11.join(path11.dirname(TASKS_FILE), "tasks.json.migrated-from-json.backup");
+  const backupPath = path12.join(path12.dirname(TASKS_FILE), "tasks.json.migrated-from-json.backup");
   try {
-    fs10.copyFileSync(TASKS_FILE, backupPath);
+    fs11.copyFileSync(TASKS_FILE, backupPath);
   } catch (err2) {
     log.task.warn("task-db migration: backup copy failed (non-fatal)", {
       path: backupPath,
@@ -5631,9 +5778,9 @@ var init_task_db_migration = __esm({
 });
 
 // src/core/memory-dir-migration.ts
-import fs11 from "fs";
+import fs12 from "fs";
 import fsp7 from "fs/promises";
-import path12 from "path";
+import path13 from "path";
 function bodyOf(content) {
   const fm = content.match(/^---\r?\n[\s\S]*?\r?\n---\r?\n?/);
   return fm ? content.slice(fm[0].length) : content;
@@ -5651,7 +5798,7 @@ ${legacyBody}
 }
 function mtimeMs(file) {
   try {
-    return fs11.statSync(file).mtimeMs;
+    return fs12.statSync(file).mtimeMs;
   } catch {
     return 0;
   }
@@ -5660,24 +5807,24 @@ function findCandidates(root6) {
   const out = [];
   let level1;
   try {
-    level1 = fs11.readdirSync(root6, { withFileTypes: true });
+    level1 = fs12.readdirSync(root6, { withFileTypes: true });
   } catch {
     return out;
   }
   for (const cat of level1) {
     if (!cat.isDirectory()) continue;
-    const catDir = path12.join(root6, cat.name);
-    if (fs11.existsSync(path12.join(catDir, MEMORY_FILE_NAME))) continue;
+    const catDir = path13.join(root6, cat.name);
+    if (fs12.existsSync(path13.join(catDir, MEMORY_FILE_NAME))) continue;
     let level2;
     try {
-      level2 = fs11.readdirSync(catDir, { withFileTypes: true });
+      level2 = fs12.readdirSync(catDir, { withFileTypes: true });
     } catch {
       continue;
     }
     for (const proj of level2) {
       if (!proj.isDirectory()) continue;
-      const sourceDir = path12.join(catDir, proj.name);
-      if (!fs11.existsSync(path12.join(sourceDir, MEMORY_FILE_NAME))) continue;
+      const sourceDir = path13.join(catDir, proj.name);
+      if (!fs12.existsSync(path13.join(sourceDir, MEMORY_FILE_NAME))) continue;
       out.push({ category: cat.name, project: proj.name, sourceDir });
     }
   }
@@ -5691,11 +5838,11 @@ async function drainDir(from, to) {
     return;
   }
   for (const name of entries) {
-    const target = path12.join(to, name);
-    if (fs11.existsSync(target)) continue;
-    await fsp7.rename(path12.join(from, name), target).catch((err2) => {
+    const target = path13.join(to, name);
+    if (fs12.existsSync(target)) continue;
+    await fsp7.rename(path13.join(from, name), target).catch((err2) => {
       log.memory.warn("memory-dir migration: entry move failed", {
-        from: path12.join(from, name),
+        from: path13.join(from, name),
         to: target,
         error: String(err2)
       });
@@ -5707,23 +5854,23 @@ async function drainDir(from, to) {
 async function migrateProjectMemoryDirs() {
   const result = { ran: false, moved: 0, merged: 0 };
   try {
-    if (!fs11.existsSync(PROJECTS_MEMORY_DIR)) return result;
-    if (fs11.existsSync(MEMORY_DIR_MIGRATION_MARKER)) return result;
+    if (!fs12.existsSync(PROJECTS_MEMORY_DIR)) return result;
+    if (fs12.existsSync(MEMORY_DIR_MIGRATION_MARKER)) return result;
     result.ran = true;
     const candidates = findCandidates(PROJECTS_MEMORY_DIR);
     const touchedCategories = new Set(candidates.map((c8) => c8.category));
     for (const c8 of candidates) {
-      const targetDir = path12.join(PROJECTS_MEMORY_DIR, c8.project);
+      const targetDir = path13.join(PROJECTS_MEMORY_DIR, c8.project);
       const label = `${c8.category}/${c8.project}`;
       try {
-        if (!fs11.existsSync(targetDir)) {
+        if (!fs12.existsSync(targetDir)) {
           await fsp7.rename(c8.sourceDir, targetDir);
           result.moved += 1;
           continue;
         }
-        const sourceMem = path12.join(c8.sourceDir, MEMORY_FILE_NAME);
-        const targetMem = path12.join(targetDir, MEMORY_FILE_NAME);
-        if (!fs11.existsSync(targetMem)) {
+        const sourceMem = path13.join(c8.sourceDir, MEMORY_FILE_NAME);
+        const targetMem = path13.join(targetDir, MEMORY_FILE_NAME);
+        if (!fs12.existsSync(targetMem)) {
           await fsp7.rename(sourceMem, targetMem);
           await drainDir(c8.sourceDir, targetDir);
           result.moved += 1;
@@ -5745,7 +5892,7 @@ async function migrateProjectMemoryDirs() {
       }
     }
     for (const cat of touchedCategories) {
-      await fsp7.rmdir(path12.join(PROJECTS_MEMORY_DIR, cat)).catch(() => {
+      await fsp7.rmdir(path13.join(PROJECTS_MEMORY_DIR, cat)).catch(() => {
       });
     }
     await fsp7.writeFile(
@@ -5773,7 +5920,7 @@ var init_memory_dir_migration = __esm({
     "use strict";
     init_constants();
     init_logging();
-    MEMORY_DIR_MIGRATION_MARKER = path12.join(PROJECTS_MEMORY_DIR, ".migrated-project-only");
+    MEMORY_DIR_MIGRATION_MARKER = path13.join(PROJECTS_MEMORY_DIR, ".migrated-project-only");
     MEMORY_FILE_NAME = "MEMORY.md";
   }
 });
@@ -5989,7 +6136,7 @@ __export(microsoft_todo_exports, {
 });
 import * as msal from "@azure/msal-node";
 import https from "https";
-import path13 from "path";
+import path14 from "path";
 function getMsTodoConfig(config) {
   return config.plugins?.["ms-todo"];
 }
@@ -7208,8 +7355,8 @@ var init_microsoft_todo = __esm({
     init_format();
     init_task_manager();
     init_task_remote_links();
-    TOKENS_FILE = path13.join(SYNC_DIR, "ms-todo-tokens.json");
-    DELTA_FILE = path13.join(SYNC_DIR, "ms-todo-delta.json");
+    TOKENS_FILE = path14.join(SYNC_DIR, "ms-todo-tokens.json");
+    DELTA_FILE = path14.join(SYNC_DIR, "ms-todo-delta.json");
     GRAPH_BASE = "https://graph.microsoft.com/v1.0";
     SCOPES = ["Tasks.ReadWrite"];
     PRIORITY_TO_IMPORTANCE = {
@@ -7332,8 +7479,8 @@ __export(daemon_version_check_exports, {
   verifyDaemonBinaryVersion: () => verifyDaemonBinaryVersion
 });
 import { createHash } from "crypto";
-import fs12 from "fs";
-import path14 from "path";
+import fs13 from "fs";
+import path15 from "path";
 import { spawnSync } from "child_process";
 import { fileURLToPath as fileURLToPath2 } from "url";
 function computeExpectedDaemonVersion() {
@@ -7342,11 +7489,11 @@ function computeExpectedDaemonVersion() {
   const hash = createHash("sha256");
   const NUL = Buffer.from([0]);
   for (const rel of DAEMON_SOURCE_FILES) {
-    const abs = path14.join(repoRoot, rel);
+    const abs = path15.join(repoRoot, rel);
     try {
       hash.update(Buffer.from(rel));
       hash.update(NUL);
-      hash.update(fs12.readFileSync(abs));
+      hash.update(fs13.readFileSync(abs));
       hash.update(NUL);
     } catch {
       return null;
@@ -7355,12 +7502,12 @@ function computeExpectedDaemonVersion() {
   return "walnut-daemon-" + hash.digest("hex").slice(0, 12);
 }
 function findRepoRoot() {
-  let dir2 = path14.dirname(fileURLToPath2(import.meta.url));
+  let dir2 = path15.dirname(fileURLToPath2(import.meta.url));
   for (let i8 = 0; i8 < 10; i8++) {
-    if (fs12.existsSync(path14.join(dir2, "package.json")) && fs12.existsSync(path14.join(dir2, "src", "providers", "daemon-standalone.ts"))) {
+    if (fs13.existsSync(path15.join(dir2, "package.json")) && fs13.existsSync(path15.join(dir2, "src", "providers", "daemon-standalone.ts"))) {
       return dir2;
     }
-    const parent = path14.dirname(dir2);
+    const parent = path15.dirname(dir2);
     if (parent === dir2) break;
     dir2 = parent;
   }
@@ -7369,14 +7516,14 @@ function findRepoRoot() {
 function bunAvailable() {
   const home = process.env.HOME ?? "";
   const candidates = [
-    ...(process.env.PATH ?? "").split(path14.delimiter).filter(Boolean).map((d8) => path14.join(d8, "bun")),
-    path14.join(home, ".bun", "bin", "bun"),
+    ...(process.env.PATH ?? "").split(path15.delimiter).filter(Boolean).map((d8) => path15.join(d8, "bun")),
+    path15.join(home, ".bun", "bin", "bun"),
     "/opt/homebrew/bin/bun",
     "/usr/local/bin/bun"
   ];
   return candidates.some((p6) => {
     try {
-      fs12.accessSync(p6, fs12.constants.X_OK);
+      fs13.accessSync(p6, fs13.constants.X_OK);
       return true;
     } catch {
       return false;
@@ -7386,10 +7533,10 @@ function bunAvailable() {
 function readBuiltVersions() {
   const out = /* @__PURE__ */ new Map();
   try {
-    for (const f8 of fs12.readdirSync(DAEMON_BINARIES_DIR)) {
+    for (const f8 of fs13.readdirSync(DAEMON_BINARIES_DIR)) {
       if (!f8.endsWith(".version")) continue;
       const arch = f8.slice(0, -".version".length);
-      const v3 = fs12.readFileSync(path14.join(DAEMON_BINARIES_DIR, f8), "utf-8").trim();
+      const v3 = fs13.readFileSync(path15.join(DAEMON_BINARIES_DIR, f8), "utf-8").trim();
       if (v3) out.set(arch, v3);
     }
   } catch {
@@ -7849,12 +7996,12 @@ var init_daemon_fold = __esm({
 });
 
 // src/providers/daemon-source.ts
-import fs13 from "fs";
-import path15 from "path";
+import fs14 from "fs";
+import path16 from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 function resolveDaemonSourceVersion() {
   const here = fileURLToPath3(import.meta.url);
-  const bundled = here.split(path15.sep).includes("dist");
+  const bundled = here.split(path16.sep).includes("dist");
   if (bundled) {
     const sidecar = readSidecarDaemonVersion(here);
     if (sidecar) return sidecar;
@@ -7862,32 +8009,32 @@ function resolveDaemonSourceVersion() {
   const computed = computeExpectedDaemonVersion();
   if (computed) return computed;
   if (process.env.DAEMON_VERSION) return process.env.DAEMON_VERSION;
-  let dir2 = path15.dirname(fileURLToPath3(import.meta.url));
+  let dir2 = path16.dirname(fileURLToPath3(import.meta.url));
   for (let i8 = 0; i8 < 10; i8++) {
     try {
-      const pkg = JSON.parse(fs13.readFileSync(path15.join(dir2, "package.json"), "utf-8"));
+      const pkg = JSON.parse(fs14.readFileSync(path16.join(dir2, "package.json"), "utf-8"));
       if (pkg.name === "open-walnut" && pkg.version) return `walnut-daemon-pkg-${pkg.version}`;
     } catch {
     }
-    const parent = path15.dirname(dir2);
+    const parent = path16.dirname(dir2);
     if (parent === dir2) break;
     dir2 = parent;
   }
   return "dev-source";
 }
 function readSidecarDaemonVersion(fromPath) {
-  let dir2 = path15.dirname(fromPath);
+  let dir2 = path16.dirname(fromPath);
   for (let i8 = 0; i8 < 5; i8++) {
-    const binDir = path15.join(dir2, "daemon-binaries");
+    const binDir = path16.join(dir2, "daemon-binaries");
     try {
-      for (const name of fs13.readdirSync(binDir)) {
+      for (const name of fs14.readdirSync(binDir)) {
         if (!name.endsWith(".version")) continue;
-        const v3 = fs13.readFileSync(path15.join(binDir, name), "utf-8").trim();
+        const v3 = fs14.readFileSync(path16.join(binDir, name), "utf-8").trim();
         if (v3) return v3;
       }
     } catch {
     }
-    const parent = path15.dirname(dir2);
+    const parent = path16.dirname(dir2);
     if (parent === dir2) break;
     dir2 = parent;
   }
@@ -15001,7 +15148,7 @@ if (action === '--start') {
 });
 
 // src/core/jsonl-tailer.ts
-import fs14 from "fs";
+import fs15 from "fs";
 var init_jsonl_tailer = __esm({
   "src/core/jsonl-tailer.ts"() {
     "use strict";
@@ -15010,10 +15157,10 @@ var init_jsonl_tailer = __esm({
 });
 
 // src/providers/session-io.ts
-import fs15 from "fs";
+import fs16 from "fs";
 import fsp8 from "fs/promises";
-import path16 from "path";
-import { execFileSync } from "child_process";
+import path17 from "path";
+import { execFileSync as execFileSync2 } from "child_process";
 function shellQuote(s4) {
   return "'" + s4.replace(/'/g, "'\\''") + "'";
 }
@@ -15058,7 +15205,7 @@ function findRelativeImageNames(text, opts) {
 function findLocalImagePaths(text) {
   return findImagePaths(text).filter((p6) => {
     try {
-      return fs15.statSync(p6).isFile();
+      return fs16.statSync(p6).isFile();
     } catch {
       return false;
     }
@@ -16103,107 +16250,6 @@ var init_daemon_core = __esm({
   }
 });
 
-// src/core/claude-cli-detect.ts
-var claude_cli_detect_exports = {};
-__export(claude_cli_detect_exports, {
-  _CLAUDE_CREDENTIALS_HOME: () => _CLAUDE_CREDENTIALS_HOME,
-  describeClaudeCliAuth: () => describeClaudeCliAuth,
-  detectClaudeCli: () => detectClaudeCli,
-  hasClaudeSubscriptionAuth: () => hasClaudeSubscriptionAuth,
-  isClaudeCliInstalled: () => isClaudeCliInstalled,
-  resolveClaudeCliExecutable: () => resolveClaudeCliExecutable
-});
-import { execFileSync as execFileSync2 } from "child_process";
-import fs16 from "fs";
-import os4 from "os";
-import path17 from "path";
-function resolveClaudeCliExecutable(env3 = process.env) {
-  const home = env3.HOME || os4.homedir();
-  const pathDirs = (env3.PATH ?? "").split(path17.delimiter).filter(Boolean);
-  const fallbackDirs = [
-    path17.join(home, ".toolbox", "bin"),
-    path17.join(home, ".local", "bin"),
-    path17.join(home, ".npm-global", "bin"),
-    path17.join(home, ".bun", "bin"),
-    "/usr/local/bin",
-    "/opt/homebrew/bin",
-    "/usr/bin",
-    "/bin"
-  ];
-  for (const dir2 of [.../* @__PURE__ */ new Set([...pathDirs, ...fallbackDirs])]) {
-    const candidate = path17.join(dir2, "claude");
-    try {
-      fs16.accessSync(candidate, fs16.constants.X_OK);
-      return candidate;
-    } catch {
-    }
-  }
-  return null;
-}
-function isClaudeCliInstalled() {
-  return resolveClaudeCliExecutable() !== null;
-}
-function hasClaudeSubscriptionAuth() {
-  if (process.platform === "darwin") {
-    try {
-      execFileSync2("security", ["find-generic-password", "-s", KEYCHAIN_OAUTH_SERVICE], {
-        stdio: "ignore"
-      });
-      return true;
-    } catch {
-    }
-  }
-  return fileCredentialExists();
-}
-function fileCredentialExists() {
-  try {
-    return fs16.existsSync(CLAUDE_CREDENTIALS_FILE);
-  } catch {
-    return false;
-  }
-}
-function detectClaudeCli() {
-  const installed2 = isClaudeCliInstalled();
-  const subscriptionAuth = installed2 && hasClaudeSubscriptionAuth();
-  return {
-    installed: installed2,
-    subscriptionAuth,
-    subscriptionReady: installed2 && subscriptionAuth,
-    ready: installed2,
-    auth: installed2 ? describeClaudeCliAuth() : { mode: "unknown", label: "not installed" }
-  };
-}
-function describeClaudeCliAuth(env3 = process.env, settingsEnv = readClaudeSettingsEnv()) {
-  const merged = { ...env3, ...settingsEnv };
-  const truthy = (v3) => !!v3 && v3 !== "0" && v3.toLowerCase() !== "false";
-  if (truthy(merged.CLAUDE_CODE_USE_BEDROCK)) {
-    const region = merged.AWS_REGION || merged.AWS_DEFAULT_REGION;
-    return { mode: "bedrock", label: region ? `Bedrock (${region})` : "Bedrock" };
-  }
-  if (truthy(merged.CLAUDE_CODE_USE_VERTEX)) return { mode: "vertex", label: "Vertex AI" };
-  if (merged.ANTHROPIC_API_KEY || merged.ANTHROPIC_AUTH_TOKEN) return { mode: "api-key", label: "an Anthropic API key" };
-  if (hasClaudeSubscriptionAuth()) return { mode: "subscription", label: "your Claude subscription" };
-  return { mode: "unknown", label: "its own login" };
-}
-function readClaudeSettingsEnv() {
-  try {
-    const raw = fs16.readFileSync(path17.join(os4.homedir(), ".claude", "settings.json"), "utf8");
-    const env3 = JSON.parse(raw).env ?? {};
-    return Object.fromEntries(Object.entries(env3).filter(([, v3]) => typeof v3 === "string"));
-  } catch {
-    return {};
-  }
-}
-var KEYCHAIN_OAUTH_SERVICE, _CLAUDE_CREDENTIALS_HOME;
-var init_claude_cli_detect = __esm({
-  "src/core/claude-cli-detect.ts"() {
-    "use strict";
-    init_constants();
-    KEYCHAIN_OAUTH_SERVICE = "Claude Code-credentials";
-    _CLAUDE_CREDENTIALS_HOME = os4.homedir();
-  }
-});
-
 // src/providers/daemon-ownership.ts
 import fs17 from "fs";
 import os5 from "os";
@@ -67054,50 +67100,6 @@ var init_registry2 = __esm({
   }
 });
 
-// src/agent/providers/default-provider.ts
-var default_provider_exports = {};
-__export(default_provider_exports, {
-  CLAUDE_CLI_PROVIDER: () => CLAUDE_CLI_PROVIDER,
-  LEGACY_DEFAULT_PROVIDER: () => LEGACY_DEFAULT_PROVIDER,
-  _resetDefaultProviderCacheForTesting: () => _resetDefaultProviderCacheForTesting,
-  hasExplicitBedrockConfig: () => hasExplicitBedrockConfig,
-  mainProviderIsImplicit: () => mainProviderIsImplicit,
-  resolveMainProviderName: () => resolveMainProviderName
-});
-function claudeCliInstalledCached() {
-  const now = Date.now();
-  if (!cliProbe || now - cliProbe.at > CLI_PROBE_TTL_MS) {
-    cliProbe = { at: now, installed: isClaudeCliInstalled() };
-  }
-  return cliProbe.installed;
-}
-function _resetDefaultProviderCacheForTesting() {
-  cliProbe = void 0;
-}
-function hasExplicitBedrockConfig(config) {
-  const b8 = config.providers?.bedrock;
-  if (b8 && (b8.bearer_token || b8.aws_access_key_id || b8.aws_profile || b8.aws_credential_export)) return true;
-  return !!config.provider?.bedrock_bearer_token;
-}
-function resolveMainProviderName(config, claudeInstalled = claudeCliInstalledCached()) {
-  if (config.agent?.main_provider) return config.agent.main_provider;
-  if (claudeInstalled) return CLAUDE_CLI_PROVIDER;
-  return LEGACY_DEFAULT_PROVIDER;
-}
-function mainProviderIsImplicit(config) {
-  return !config.agent?.main_provider;
-}
-var LEGACY_DEFAULT_PROVIDER, CLAUDE_CLI_PROVIDER, CLI_PROBE_TTL_MS, cliProbe;
-var init_default_provider = __esm({
-  "src/agent/providers/default-provider.ts"() {
-    "use strict";
-    init_claude_cli_detect();
-    LEGACY_DEFAULT_PROVIDER = "bedrock";
-    CLAUDE_CLI_PROVIDER = "claude_cli";
-    CLI_PROBE_TTL_MS = 6e4;
-  }
-});
-
 // src/agent/model.ts
 var model_exports = {};
 __export(model_exports, {