squidclaw 3.0.5 → 3.0.6

package/dist/{qr-cli-ycULxbDe.js → qr-cli-Lue0weA0.js}

@@ -2,10 +2,10 @@ import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { p as theme } from "./globals-BrhVUl-N.js";
 import { u as resolveGatewayPort } from "./paths-CHIu6D1E.js";
 import { d as defaultRuntime } from "./subsystem-Bw5n50gj.js";
-import { Et as isRfc1918Ipv4Address, lt as secretRefKey, x as resolveSecretRefValues, yt as isCarrierGradeNatIpv4Address, z as loadConfig } from "./auth-profiles-CvmKVnsR.js";
+import { Et as isRfc1918Ipv4Address, lt as secretRefKey, x as resolveSecretRefValues, yt as isCarrierGradeNatIpv4Address, z as loadConfig } from "./auth-profiles-CwmInMDd.js";
 import { t as runCommandWithTimeout } from "./exec-TSiqsZw1.js";
 import { F as resolveSecretInputRef, N as normalizeSecretInputString } from "./registry-BXcl3IkC.js";
-import { a as getQrRemoteCommandSecretTargetIds, s as resolveCommandSecretRefsViaGateway } from "./command-secret-targets-DjorlW8u.js";
+import { a as getQrRemoteCommandSecretTargetIds, s as resolveCommandSecretRefsViaGateway } from "./command-secret-targets-DN9JuQaB.js";
 import { t as formatDocsLink } from "./links-Dye6HsRG.js";
 import os from "node:os";
 import qrcode from "qrcode-terminal";

package/dist/{query-expansion-DI9INxTg.js → query-expansion-C0HUJbRn.js}

@@ -6,7 +6,7 @@ import { n as redactSensitiveText } from "./redact-DknVdX-O.js";
 import { createRequire } from "node:module";
 import path from "node:path";
 import fs from "node:fs";
-import fs$1 from "node:fs/promises";
+import fsPromises from "node:fs/promises";
 import crypto from "node:crypto";
 
 //#region src/memory/fs-utils.ts
@@ -16,7 +16,7 @@ function isFileMissingError(err) {
 async function statRegularFile(absPath) {
 	let stat;
 	try {
-		stat = await fs$1.lstat(absPath);
+		stat = await fsPromises.lstat(absPath);
 	} catch (err) {
 		if (isFileMissingError(err)) return { missing: true };
 		throw err;
@@ -51,7 +51,7 @@ function isMemoryPath(relPath) {
 	return normalized.startsWith("memory/");
 }
 async function walkDir(dir, files) {
-	const entries = await fs$1.readdir(dir, { withFileTypes: true });
+	const entries = await fsPromises.readdir(dir, { withFileTypes: true });
 	for (const entry of entries) {
 		const full = path.join(dir, entry.name);
 		if (entry.isSymbolicLink()) continue;
@@ -71,7 +71,7 @@ async function listMemoryFiles(workspaceDir, extraPaths) {
 	const memoryDir = path.join(workspaceDir, "memory");
 	const addMarkdownFile = async (absPath) => {
 		try {
-			const stat = await fs$1.lstat(absPath);
+			const stat = await fsPromises.lstat(absPath);
 			if (stat.isSymbolicLink() || !stat.isFile()) return;
 			if (!absPath.endsWith(".md")) return;
 			result.push(absPath);
@@ -80,12 +80,12 @@ async function listMemoryFiles(workspaceDir, extraPaths) {
 	await addMarkdownFile(memoryFile);
 	await addMarkdownFile(altMemoryFile);
 	try {
-		const dirStat = await fs$1.lstat(memoryDir);
+		const dirStat = await fsPromises.lstat(memoryDir);
 		if (!dirStat.isSymbolicLink() && dirStat.isDirectory()) await walkDir(memoryDir, result);
 	} catch {}
 	const normalizedExtraPaths = normalizeExtraMemoryPaths(workspaceDir, extraPaths);
 	if (normalizedExtraPaths.length > 0) for (const inputPath of normalizedExtraPaths) try {
-		const stat = await fs$1.lstat(inputPath);
+		const stat = await fsPromises.lstat(inputPath);
 		if (stat.isSymbolicLink()) continue;
 		if (stat.isDirectory()) {
 			await walkDir(inputPath, result);
@@ -99,7 +99,7 @@ async function listMemoryFiles(workspaceDir, extraPaths) {
 	for (const entry of result) {
 		let key = entry;
 		try {
-			key = await fs$1.realpath(entry);
+			key = await fsPromises.realpath(entry);
 		} catch {}
 		if (seen.has(key)) continue;
 		seen.add(key);
@@ -113,14 +113,14 @@ function hashText(value) {
 async function buildFileEntry(absPath, workspaceDir) {
 	let stat;
 	try {
-		stat = await fs$1.stat(absPath);
+		stat = await fsPromises.stat(absPath);
 	} catch (err) {
 		if (isFileMissingError(err)) return null;
 		throw err;
 	}
 	let content;
 	try {
-		content = await fs$1.readFile(absPath, "utf-8");
+		content = await fsPromises.readFile(absPath, "utf-8");
 	} catch (err) {
 		if (isFileMissingError(err)) return null;
 		throw err;
@@ -254,7 +254,7 @@ const log = createSubsystemLogger("memory");
 async function listSessionFilesForAgent(agentId) {
 	const dir = resolveSessionTranscriptsDirForAgent(agentId);
 	try {
-		return (await fs$1.readdir(dir, { withFileTypes: true })).filter((entry) => entry.isFile()).map((entry) => entry.name).filter((name) => name.endsWith(".jsonl")).map((name) => path.join(dir, name));
+		return (await fsPromises.readdir(dir, { withFileTypes: true })).filter((entry) => entry.isFile()).map((entry) => entry.name).filter((name) => name.endsWith(".jsonl")).map((name) => path.join(dir, name));
 	} catch {
 		return [];
 	}
@@ -284,8 +284,8 @@ function extractSessionText(content) {
 }
 async function buildSessionEntry(absPath) {
 	try {
-		const stat = await fs$1.stat(absPath);
-		const lines = (await fs$1.readFile(absPath, "utf-8")).split("\n");
+		const stat = await fsPromises.stat(absPath);
+		const lines = (await fsPromises.readFile(absPath, "utf-8")).split("\n");
 		const collected = [];
 		const lineMap = [];
 		for (let jsonlIdx = 0; jsonlIdx < lines.length; jsonlIdx++) {

package/dist/{query-expansion-yY0Xn9Kw.js → query-expansion-Dzxt6kXo.js}

@@ -1,7 +1,7 @@
-import { t as runTasksWithConcurrency } from "./run-with-concurrency-D05zyBvx.js";
-import { t as createSubsystemLogger } from "./subsystem-DwbSi7gL.js";
-import { t as redactSensitiveText } from "./redact-CNCiJdri.js";
-import { o as resolveSessionTranscriptsDirForAgent } from "./paths-DH4hVuGM.js";
+import { t as runTasksWithConcurrency } from "./run-with-concurrency-BFR3ReeF.js";
+import { t as createSubsystemLogger } from "./subsystem-6v7sWnAD.js";
+import { t as redactSensitiveText } from "./redact-DvzicBMu.js";
+import { o as resolveSessionTranscriptsDirForAgent } from "./paths-DSd911Oe.js";
 import { createRequire } from "node:module";
 import fs from "node:fs/promises";
 import path from "node:path";

package/dist/redact-DvzicBMu.js

@@ -0,0 +1,319 @@
+import { S as resolveNodeRequireFromMeta } from "./subsystem-6v7sWnAD.js";
+
+//#region src/security/safe-regex.ts
+const SAFE_REGEX_CACHE_MAX = 256;
+const SAFE_REGEX_TEST_WINDOW = 2048;
+const safeRegexCache = /* @__PURE__ */ new Map();
+function createParseFrame() {
+	return {
+		lastToken: null,
+		containsRepetition: false,
+		hasAlternation: false,
+		branchMinLength: 0,
+		branchMaxLength: 0,
+		altMinLength: null,
+		altMaxLength: null
+	};
+}
+function addLength(left, right) {
+	if (!Number.isFinite(left) || !Number.isFinite(right)) return Number.POSITIVE_INFINITY;
+	return left + right;
+}
+function multiplyLength(length, factor) {
+	if (!Number.isFinite(length)) return factor === 0 ? 0 : Number.POSITIVE_INFINITY;
+	return length * factor;
+}
+function recordAlternative(frame) {
+	if (frame.altMinLength === null || frame.altMaxLength === null) {
+		frame.altMinLength = frame.branchMinLength;
+		frame.altMaxLength = frame.branchMaxLength;
+		return;
+	}
+	frame.altMinLength = Math.min(frame.altMinLength, frame.branchMinLength);
+	frame.altMaxLength = Math.max(frame.altMaxLength, frame.branchMaxLength);
+}
+function readQuantifier(source, index) {
+	const ch = source[index];
+	const consumed = source[index + 1] === "?" ? 2 : 1;
+	if (ch === "*") return {
+		consumed,
+		minRepeat: 0,
+		maxRepeat: null
+	};
+	if (ch === "+") return {
+		consumed,
+		minRepeat: 1,
+		maxRepeat: null
+	};
+	if (ch === "?") return {
+		consumed,
+		minRepeat: 0,
+		maxRepeat: 1
+	};
+	if (ch !== "{") return null;
+	let i = index + 1;
+	while (i < source.length && /\d/.test(source[i])) i += 1;
+	if (i === index + 1) return null;
+	const minRepeat = Number.parseInt(source.slice(index + 1, i), 10);
+	let maxRepeat = minRepeat;
+	if (source[i] === ",") {
+		i += 1;
+		const maxStart = i;
+		while (i < source.length && /\d/.test(source[i])) i += 1;
+		maxRepeat = i === maxStart ? null : Number.parseInt(source.slice(maxStart, i), 10);
+	}
+	if (source[i] !== "}") return null;
+	i += 1;
+	if (source[i] === "?") i += 1;
+	if (maxRepeat !== null && maxRepeat < minRepeat) return null;
+	return {
+		consumed: i - index,
+		minRepeat,
+		maxRepeat
+	};
+}
+function tokenizePattern(source) {
+	const tokens = [];
+	let inCharClass = false;
+	for (let i = 0; i < source.length; i += 1) {
+		const ch = source[i];
+		if (ch === "\\") {
+			i += 1;
+			tokens.push({ kind: "simple-token" });
+			continue;
+		}
+		if (inCharClass) {
+			if (ch === "]") inCharClass = false;
+			continue;
+		}
+		if (ch === "[") {
+			inCharClass = true;
+			tokens.push({ kind: "simple-token" });
+			continue;
+		}
+		if (ch === "(") {
+			tokens.push({ kind: "group-open" });
+			continue;
+		}
+		if (ch === ")") {
+			tokens.push({ kind: "group-close" });
+			continue;
+		}
+		if (ch === "|") {
+			tokens.push({ kind: "alternation" });
+			continue;
+		}
+		const quantifier = readQuantifier(source, i);
+		if (quantifier) {
+			tokens.push({
+				kind: "quantifier",
+				quantifier
+			});
+			i += quantifier.consumed - 1;
+			continue;
+		}
+		tokens.push({ kind: "simple-token" });
+	}
+	return tokens;
+}
+function analyzeTokensForNestedRepetition(tokens) {
+	const frames = [createParseFrame()];
+	const emitToken = (token) => {
+		const frame = frames[frames.length - 1];
+		frame.lastToken = token;
+		if (token.containsRepetition) frame.containsRepetition = true;
+		frame.branchMinLength = addLength(frame.branchMinLength, token.minLength);
+		frame.branchMaxLength = addLength(frame.branchMaxLength, token.maxLength);
+	};
+	const emitSimpleToken = () => {
+		emitToken({
+			containsRepetition: false,
+			hasAmbiguousAlternation: false,
+			minLength: 1,
+			maxLength: 1
+		});
+	};
+	for (const token of tokens) {
+		if (token.kind === "simple-token") {
+			emitSimpleToken();
+			continue;
+		}
+		if (token.kind === "group-open") {
+			frames.push(createParseFrame());
+			continue;
+		}
+		if (token.kind === "group-close") {
+			if (frames.length > 1) {
+				const frame = frames.pop();
+				if (frame.hasAlternation) recordAlternative(frame);
+				const groupMinLength = frame.hasAlternation ? frame.altMinLength ?? 0 : frame.branchMinLength;
+				const groupMaxLength = frame.hasAlternation ? frame.altMaxLength ?? 0 : frame.branchMaxLength;
+				emitToken({
+					containsRepetition: frame.containsRepetition,
+					hasAmbiguousAlternation: frame.hasAlternation && frame.altMinLength !== null && frame.altMaxLength !== null && frame.altMinLength !== frame.altMaxLength,
+					minLength: groupMinLength,
+					maxLength: groupMaxLength
+				});
+			}
+			continue;
+		}
+		if (token.kind === "alternation") {
+			const frame = frames[frames.length - 1];
+			frame.hasAlternation = true;
+			recordAlternative(frame);
+			frame.branchMinLength = 0;
+			frame.branchMaxLength = 0;
+			frame.lastToken = null;
+			continue;
+		}
+		const frame = frames[frames.length - 1];
+		const previousToken = frame.lastToken;
+		if (!previousToken) continue;
+		if (previousToken.containsRepetition) return true;
+		if (previousToken.hasAmbiguousAlternation && token.quantifier.maxRepeat === null) return true;
+		const previousMinLength = previousToken.minLength;
+		const previousMaxLength = previousToken.maxLength;
+		previousToken.minLength = multiplyLength(previousToken.minLength, token.quantifier.minRepeat);
+		previousToken.maxLength = token.quantifier.maxRepeat === null ? Number.POSITIVE_INFINITY : multiplyLength(previousToken.maxLength, token.quantifier.maxRepeat);
+		previousToken.containsRepetition = true;
+		frame.containsRepetition = true;
+		frame.branchMinLength = frame.branchMinLength - previousMinLength + previousToken.minLength;
+		frame.branchMaxLength = addLength(Number.isFinite(frame.branchMaxLength) && Number.isFinite(previousMaxLength) ? frame.branchMaxLength - previousMaxLength : Number.POSITIVE_INFINITY, previousToken.maxLength);
+	}
+	return false;
+}
+function testRegexFromStart(regex, value) {
+	regex.lastIndex = 0;
+	return regex.test(value);
+}
+function testRegexWithBoundedInput(regex, input, maxWindow = SAFE_REGEX_TEST_WINDOW) {
+	if (maxWindow <= 0) return false;
+	if (input.length <= maxWindow) return testRegexFromStart(regex, input);
+	if (testRegexFromStart(regex, input.slice(0, maxWindow))) return true;
+	return testRegexFromStart(regex, input.slice(-maxWindow));
+}
+function hasNestedRepetition(source) {
+	return analyzeTokensForNestedRepetition(tokenizePattern(source));
+}
+function compileSafeRegex(source, flags = "") {
+	const trimmed = source.trim();
+	if (!trimmed) return null;
+	const cacheKey = `${flags}::${trimmed}`;
+	if (safeRegexCache.has(cacheKey)) return safeRegexCache.get(cacheKey) ?? null;
+	let compiled = null;
+	if (!hasNestedRepetition(trimmed)) try {
+		compiled = new RegExp(trimmed, flags);
+	} catch {
+		compiled = null;
+	}
+	safeRegexCache.set(cacheKey, compiled);
+	if (safeRegexCache.size > SAFE_REGEX_CACHE_MAX) {
+		const oldestKey = safeRegexCache.keys().next().value;
+		if (oldestKey) safeRegexCache.delete(oldestKey);
+	}
+	return compiled;
+}
+
+//#endregion
+//#region src/logging/redact-bounded.ts
+const REDACT_REGEX_CHUNK_THRESHOLD = 32768;
+const REDACT_REGEX_CHUNK_SIZE = 16384;
+function replacePatternBounded(text, pattern, replacer, options) {
+	const chunkThreshold = options?.chunkThreshold ?? REDACT_REGEX_CHUNK_THRESHOLD;
+	const chunkSize = options?.chunkSize ?? REDACT_REGEX_CHUNK_SIZE;
+	if (chunkThreshold <= 0 || chunkSize <= 0 || text.length <= chunkThreshold) return text.replace(pattern, replacer);
+	let output = "";
+	for (let index = 0; index < text.length; index += chunkSize) output += text.slice(index, index + chunkSize).replace(pattern, replacer);
+	return output;
+}
+
+//#endregion
+//#region src/logging/redact.ts
+const requireConfig = resolveNodeRequireFromMeta(import.meta.url);
+const DEFAULT_REDACT_MODE = "tools";
+const DEFAULT_REDACT_MIN_LENGTH = 18;
+const DEFAULT_REDACT_KEEP_START = 6;
+const DEFAULT_REDACT_KEEP_END = 4;
+const DEFAULT_REDACT_PATTERNS = [
+	String.raw`\b[A-Z0-9_]*(?:KEY|TOKEN|SECRET|PASSWORD|PASSWD)\b\s*[=:]\s*(["']?)([^\s"'\\]+)\1`,
+	String.raw`"(?:apiKey|token|secret|password|passwd|accessToken|refreshToken)"\s*:\s*"([^"]+)"`,
+	String.raw`--(?:api[-_]?key|token|secret|password|passwd)\s+(["']?)([^\s"']+)\1`,
+	String.raw`Authorization\s*[:=]\s*Bearer\s+([A-Za-z0-9._\-+=]+)`,
+	String.raw`\bBearer\s+([A-Za-z0-9._\-+=]{18,})\b`,
+	String.raw`-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]+?-----END [A-Z ]*PRIVATE KEY-----`,
+	String.raw`\b(sk-[A-Za-z0-9_-]{8,})\b`,
+	String.raw`\b(ghp_[A-Za-z0-9]{20,})\b`,
+	String.raw`\b(github_pat_[A-Za-z0-9_]{20,})\b`,
+	String.raw`\b(xox[baprs]-[A-Za-z0-9-]{10,})\b`,
+	String.raw`\b(xapp-[A-Za-z0-9-]{10,})\b`,
+	String.raw`\b(gsk_[A-Za-z0-9_-]{10,})\b`,
+	String.raw`\b(AIza[0-9A-Za-z\-_]{20,})\b`,
+	String.raw`\b(pplx-[A-Za-z0-9_-]{10,})\b`,
+	String.raw`\b(npm_[A-Za-z0-9]{10,})\b`,
+	String.raw`\bbot(\d{6,}:[A-Za-z0-9_-]{20,})\b`,
+	String.raw`\b(\d{6,}:[A-Za-z0-9_-]{20,})\b`
+];
+function normalizeMode(value) {
+	return value === "off" ? "off" : DEFAULT_REDACT_MODE;
+}
+function parsePattern(raw) {
+	if (!raw.trim()) return null;
+	const match = raw.match(/^\/(.+)\/([gimsuy]*)$/);
+	if (match) {
+		const flags = match[2].includes("g") ? match[2] : `${match[2]}g`;
+		return compileSafeRegex(match[1], flags);
+	}
+	return compileSafeRegex(raw, "gi");
+}
+function resolvePatterns(value) {
+	return (value?.length ? value : DEFAULT_REDACT_PATTERNS).map(parsePattern).filter((re) => Boolean(re));
+}
+function maskToken(token) {
+	if (token.length < DEFAULT_REDACT_MIN_LENGTH) return "***";
+	return `${token.slice(0, DEFAULT_REDACT_KEEP_START)}…${token.slice(-DEFAULT_REDACT_KEEP_END)}`;
+}
+function redactPemBlock(block) {
+	const lines = block.split(/\r?\n/).filter(Boolean);
+	if (lines.length < 2) return "***";
+	return `${lines[0]}\n…redacted…\n${lines[lines.length - 1]}`;
+}
+function redactMatch(match, groups) {
+	if (match.includes("PRIVATE KEY-----")) return redactPemBlock(match);
+	const token = groups.filter((value) => typeof value === "string" && value.length > 0).at(-1) ?? match;
+	const masked = maskToken(token);
+	if (token === match) return masked;
+	return match.replace(token, masked);
+}
+function redactText(text, patterns) {
+	let next = text;
+	for (const pattern of patterns) next = replacePatternBounded(next, pattern, (...args) => redactMatch(args[0], args.slice(1, args.length - 2)));
+	return next;
+}
+function resolveConfigRedaction() {
+	let cfg;
+	try {
+		cfg = (requireConfig?.("../config/config.js"))?.loadConfig?.().logging;
+	} catch {
+		cfg = void 0;
+	}
+	return {
+		mode: normalizeMode(cfg?.redactSensitive),
+		patterns: cfg?.redactPatterns
+	};
+}
+function redactSensitiveText(text, options) {
+	if (!text) return text;
+	const resolved = options ?? resolveConfigRedaction();
+	if (normalizeMode(resolved.mode) === "off") return text;
+	const patterns = resolvePatterns(resolved.patterns);
+	if (!patterns.length) return text;
+	return redactText(text, patterns);
+}
+function redactToolDetail(detail) {
+	const resolved = resolveConfigRedaction();
+	if (normalizeMode(resolved.mode) !== "tools") return detail;
+	return redactSensitiveText(detail, resolved);
+}
+
+//#endregion
+export { testRegexWithBoundedInput as i, redactToolDetail as n, compileSafeRegex as r, redactSensitiveText as t };

package/dist/{redact-snapshot-COZ-I-Tx.js → redact-snapshot-j2UcqIGl.js}

@@ -1,5 +1,5 @@
 import { t as createSubsystemLogger } from "./subsystem-Bw5n50gj.js";
-import { at as sensitive } from "./auth-profiles-CvmKVnsR.js";
+import { at as sensitive } from "./auth-profiles-CwmInMDd.js";
 import JSON5 from "json5";
 import { isDeepStrictEqual } from "node:util";
 import { z } from "zod";

package/dist/{register.agent-CqJmJqZY.js → register.agent-BcHDGbDj.js}

@@ -2,7 +2,7 @@ import "./paths-mdt1HFK2.js";
 import { p as theme, s as setVerbose } from "./globals-xfUIfxbE.js";
 import { S as shortenHomePath, y as resolveUserPath } from "./utils-DMGXr25O.js";
 import "./thinking-44rmAw5o.js";
-import { Nt as resolveSessionKeyForRequest, in as parseIdentityMarkdown, jt as agentCommand, nn as identityHasValues, zt as createDefaultDeps } from "./reply-lnANjYYy.js";
+import { Nt as resolveSessionKeyForRequest, in as parseIdentityMarkdown, jt as agentCommand, nn as identityHasValues, zt as createDefaultDeps } from "./reply-LaODRY80.js";
 import { a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, d as resolveDefaultAgentId, n as listAgentEntries, r as listAgentIds, u as resolveAgentWorkspaceDir } from "./agent-scope-C1XMay0T.js";
 import { d as defaultRuntime } from "./subsystem-DC87CPVS.js";
 import { c as normalizeAgentId, g as DEFAULT_ACCOUNT_ID, t as DEFAULT_AGENT_ID } from "./session-key-CIXZm7v4.js";
@@ -99,7 +99,7 @@ import "./workspace-dirs-B2dNahfe.js";
 import "./runtime-config-collectors-CuQEWwhf.js";
 import "./command-secret-targets-HkRLTNEi.js";
 import "./session-cost-usage-B4DbYmaL.js";
-import { a as ensureWorkspaceAndSessions, l as moveToTrash } from "./onboard-helpers-R4b3Kr01.js";
+import { a as ensureWorkspaceAndSessions, l as moveToTrash } from "./onboard-helpers-DKMtUE3F.js";
 import "./prompt-style-BoYH_ODs.js";
 import "./pairing-labels-Bh4U5HqY.js";
 import "./memory-cli-DWJBdHsC.js";
@@ -111,7 +111,7 @@ import { t as formatHelpExamples } from "./help-format-BMkyP_P-.js";
 import { n as withProgress } from "./progress-BHN121Ps.js";
 import "./server-lifecycle-DfGhxo90.js";
 import "./stagger-DL-XRpny.js";
-import "./channel-web-BDBaYap6.js";
+import "./channel-web-BTKQul7k.js";
 import "./outbound-C_7caLcK.js";
 import "./session-CZJ5Ux6-.js";
 import "./login-Cf9OQOFu.js";
@@ -122,24 +122,24 @@ import { t as WizardCancelledError } from "./prompts-knTF_LVq.js";
 import { t as createClackPrompter } from "./clack-prompter-Bx0vssUh.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-CvsgDup6.js";
 import { a as parseBindingSpecs, i as describeBinding, n as applyAgentBindings, o as removeAgentBindings, r as buildChannelBindings, t as requireValidConfigSnapshot } from "./config-validation-B2WgInWp.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, n as buildAgentSummaries, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-DF51cWyU.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, n as buildAgentSummaries, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-DFuCqhIm.js";
 import "./enable-BrwIR0lz.js";
 import "./install-safe-path-iCmVuopp.js";
 import "./npm-pack-install-s-mP9K0z.js";
 import "./skill-scanner-rdr9cQew.js";
 import "./installs-CyjlehlR.js";
-import { r as setupChannels } from "./onboard-channels-HPa4NzTv.js";
+import { r as setupChannels } from "./onboard-channels-BB39kGye.js";
 import "./auth-choice.apply-helpers-IpMiSyTJ.js";
 import "./issue-format-CJF4zrPW.js";
 import "./shared-DVCd_nv2.js";
 import "./auth-token-Rzhjv-mo.js";
 import { n as logConfigUpdated } from "./logging-AGpu_2Pc.js";
-import "./provider-auth-helpers-DVomEnsq.js";
+import "./provider-auth-helpers-BdoxZkJ5.js";
 import "./auth-choice-options-DEvk4ApB.js";
 import { n as promptAuthChoiceGrouped } from "./auth-choice-prompt-D8RKb8oM.js";
-import { i as applyAuthChoice, r as warnIfModelConfigLooksOff } from "./auth-choice-Da4gjROu.js";
+import { i as applyAuthChoice, r as warnIfModelConfigLooksOff } from "./auth-choice-8xkQwsCU.js";
 import "./openai-model-default-BJvl-wjq.js";
-import "./model-picker-fn9-5czQ.js";
+import "./model-picker-42DaAd5Q.js";
 import "./oauth-tls-preflight-CqqomOFQ.js";
 import path from "node:path";
 import fs from "node:fs/promises";