zidane 6.5.5 → 6.5.7

package/dist/acp-cli.js

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
-import { m as openaiCompat } from "./openai-compat-hmZzpDrB.js";
-import { bt as basic_default } from "./agent-gZjHsUft.js";
+import { m as openaiCompat } from "./openai-compat-BoTi-9fd.js";
+import { bt as basic_default } from "./agent-CcTWL-Z6.js";
 import { r as createProcessContext } from "./contexts-DWVt7MvF.js";
 import { createSandboxContext } from "./contexts/sandbox.js";
 import { p as resolveStorageDirs } from "./plugins-onDvTHEm.js";
-import { n as anthropic } from "./anthropic-D3le2d-s.js";
+import { n as anthropic } from "./anthropic-BomWPIYw.js";
 import { arcee } from "./providers/arcee.js";
 import { baseten } from "./providers/baseten.js";
 import { cerebras } from "./providers/cerebras.js";
 import { openai } from "./providers/openai.js";
 import { openrouter } from "./providers/openrouter.js";
 import { xai } from "./providers/xai.js";
-import { d as StartUsageError, f as buildStartLocalOptions, h as startProviderNames, i as withAcpDefaultTools, m as startLocalArgOptions, p as parseStartArgValues, t as runAcpStdioServer } from "./acp-BPJbXS2J.js";
-import { f as credKeyOf, i as readCredentials, l as BUILTIN_PROVIDERS, r as credentialsPath, t as detectAuth, y as modelsForDescriptor } from "./auth-DCiXCwGa.js";
+import { d as StartUsageError, f as buildStartLocalOptions, h as startProviderNames, i as withAcpDefaultTools, m as startLocalArgOptions, p as parseStartArgValues, t as runAcpStdioServer } from "./acp-Dm95NwNM.js";
+import { d as BUILTIN_PROVIDERS, i as readCredentials, m as credKeyOf, r as credentialsPath, t as detectAuth, x as modelsForDescriptor } from "./auth-C-Zx5zBo.js";
 import { createDaytonaProvider } from "./contexts/daytona.js";
 import { createDockerContext } from "./contexts/docker.js";
 import { createE2BProvider } from "./contexts/e2b.js";

package/dist/acp.d.ts

@@ -1,4 +1,4 @@
-import { Bh as TurnUsage, Cg as SessionStore, Gh as ToolDef, Nm as AgentBehavior, Uf as Provider, Wi as Agent, Xm as McpServerConfig, gh as SessionContentBlock, jh as ToolResultContent, qi as AgentOptions, sh as PromptPart, t as Preset, yg as Session } from "./index-BYKzzYzi.js";
+import { Bh as TurnUsage, Cg as SessionStore, Gh as ToolDef, Nm as AgentBehavior, Uf as Provider, Wi as Agent, Xm as McpServerConfig, gh as SessionContentBlock, jh as ToolResultContent, qi as AgentOptions, sh as PromptPart, t as Preset, yg as Session } from "./index-ZWibV230.js";
 import { c as ExecutionContext } from "./types-M2DauK2D.js";
 import { Readable, Writable } from "node:stream";
 

package/dist/acp.js

@@ -1,2 +1,2 @@
-import { _ as createJsonRpcConnection, a as wrapToolsForAcpClient, c as sessionBlocksToAcp, g as JsonRpcRemoteError, i as withAcpDefaultTools, l as stopReasonFromRun, n as AcpProtocolError, o as acpMcpServersToZidane, r as createAcpServer, s as acpPromptToPromptParts, t as runAcpStdioServer, u as toolResultToAcpContent } from "./acp-BPJbXS2J.js";
+import { _ as createJsonRpcConnection, a as wrapToolsForAcpClient, c as sessionBlocksToAcp, g as JsonRpcRemoteError, i as withAcpDefaultTools, l as stopReasonFromRun, n as AcpProtocolError, o as acpMcpServersToZidane, r as createAcpServer, s as acpPromptToPromptParts, t as runAcpStdioServer, u as toolResultToAcpContent } from "./acp-Dm95NwNM.js";
 export { AcpProtocolError, JsonRpcRemoteError, acpMcpServersToZidane, acpPromptToPromptParts, createAcpServer, createJsonRpcConnection, runAcpStdioServer, sessionBlocksToAcp, stopReasonFromRun, toolResultToAcpContent, withAcpDefaultTools, wrapToolsForAcpClient };

package/dist/{agent-gZjHsUft.js → agent-CcTWL-Z6.js}

@@ -1,4 +1,4 @@
-import { B as rewriteMessagesToWire, H as toWireName, I as augmentMcpDoubleUnderscoreAliases, L as buildAliasMaps, M as buildPromptMessage, N as canonicalizePrompt, R as buildSanitizedWireAliases, V as toCanonicalName, z as rewriteContentToCanonical } from "./openai-compat-hmZzpDrB.js";
+import { B as rewriteMessagesToWire, H as toWireName, I as augmentMcpDoubleUnderscoreAliases, L as buildAliasMaps, M as buildPromptMessage, N as canonicalizePrompt, R as buildSanitizedWireAliases, V as toCanonicalName, z as rewriteContentToCanonical } from "./openai-compat-BoTi-9fd.js";
 import { a as isWireTurn, c as toolOutputByteLength, i as documentBlockMarker, l as toolResultToText, o as sanitizeToolResultMetadata, s as toolOutputBudgetByteLength, t as DEFAULT_AGENT_CLOCK } from "./types-BIarq1qE.js";
 import { a as stripLineNumberPrefixes, i as resolveOldString, n as buildContextBreakdown, o as styleReplacementForVia, r as describeVia, t as buildContextSegments } from "./context-segments-CJCtJ9sU.js";
 import { n as estimateTokens, r as utf8ByteLength } from "./utils-ngQzYzZD.js";
@@ -15,8 +15,8 @@ import { r as createLogger, t as consoleSink } from "./logger-DBX9uYOw.js";
 import { n as reconcileImageMediaType } from "./media-sniff-UKijEaiQ.js";
 import { f as wrapDiscoveredMcpTools, i as deriveMcpToolMeta, n as connectMcpServers, s as nonOwningMcpView } from "./mcp-CVtSQTWg.js";
 import { appendStaticSection, renderSystemForWire } from "./prompt.js";
-import { a as detectTurnInterruption, c as ensureToolResultPairing, l as filterUnresolvedToolUses, m as resolveContentRefsInMessages, n as SYNTHETIC_TOOL_RESULT_PLACEHOLDER, p as remintDuplicateToolCallIds, s as ensureEndsWithUserMessage } from "./messages-CVVg5jUL.js";
-import { a as getExtensionSessionState, c as setExtensionSessionState, l as withExtensionSession, n as currentExtensionSession, r as deleteExtensionSessionState, s as resumeChainRunIds } from "./session-cqN5NbO-.js";
+import { a as detectTurnInterruption, c as ensureToolResultPairing, l as filterUnresolvedToolUses, m as resolveContentRefsInMessages, n as SYNTHETIC_TOOL_RESULT_PLACEHOLDER, p as remintDuplicateToolCallIds, s as ensureEndsWithUserMessage } from "./messages-CZMUuKzo.js";
+import { a as getExtensionSessionState, c as setExtensionSessionState, l as withExtensionSession, n as currentExtensionSession, r as deleteExtensionSessionState, s as resumeChainRunIds } from "./session-CyRLSsVa.js";
 import { n as flattenTurns, r as formatTokenUsage, t as effectiveInputFromTurn } from "./stats-DAKBEKjc.js";
 import { a as settleWithinTimeout, i as resolveTimeoutMs, n as abortableSleep, o as withInactivityTimeout, r as linkAbortSignal, s as withTimeout$1, t as OperationTimeoutError } from "./timeout-CjOG2mea.js";
 import { createRequire } from "node:module";
@@ -2159,6 +2159,55 @@ function registerExtensionHostModules(modules) {
 	});
 }
 //#endregion
+//#region src/chat/cred-keys.ts
+/**
+* Credential-file key arithmetic, split from `./credentials` so the rules can
+* be enforced where credentials themselves must not be pulled in.
+*
+* `./credentials` reaches the provider registry (and through it the pi-ai
+* factories) for `credKeyOf`; the extension loader — an edge entrypoint that
+* validates descriptor keys at registration time — must stay clear of that
+* graph. This module is string arithmetic with no imports.
+*/
+/**
+* Reserved suffix marking a provider's SECOND credential slot.
+*
+* Not usable as (or as the tail of) a descriptor's credential key: `foo#alt`
+* holds `foo`'s alternate credential, so a provider claiming that name would
+* share storage with it.
+*/
+const ALTERNATE_CRED_KEY_SUFFIX = "#alt";
+/**
+* File key holding a provider's second credential, when it has one of each kind.
+*
+* The canonical key always holds the credential the user prefers; this sibling
+* holds the other. That one invariant is what makes preference selection free:
+* every existing reader (`applyApiKeyEnv`, the harness provider factories)
+* already resolves the canonical key, so "switch priority" is just moving two
+* objects between two keys — no precedence flag to interpret, no resolution
+* order to keep in sync across layers.
+*
+* A sibling key rather than a nested field because the canonical entry gets
+* REPLACED wholesale on token refresh; anything nested inside it would be
+* dropped by the next rotation. And older zidane versions look credentials up
+* by `credKeyOf`, so a suffixed key is simply invisible to them — they read the
+* preferred credential and behave exactly as before, which is why this needs no
+* migration or schema version.
+*/
+function alternateCredKey(fileKey) {
+	return `${fileKey}${ALTERNATE_CRED_KEY_SUFFIX}`;
+}
+/**
+* True when a key claims the reserved alternate namespace.
+*
+* Built-in keys are plain identifiers (`anthropic`, `openai-codex`), but
+* `ProviderDescriptor.key` / `credentialFileKey` are open strings — so the
+* reservation is checked, not assumed.
+*/
+function isReservedCredKey(fileKey) {
+	return fileKey.endsWith(ALTERNATE_CRED_KEY_SUFFIX);
+}
+//#endregion
 //#region src/chat/keybindings.ts
 /**
 * Keybindings — a single source of truth for the app's global shortcuts.
@@ -7520,6 +7569,11 @@ function makeContext(opts) {
 			warnUnsafeKey(logger, "registerProvider", descriptor.key);
 			return;
 		}
+		const credKey = descriptor.credentialFileKey ?? descriptor.key;
+		if (isReservedCredKey(credKey)) {
+			logger.warn(`registerProvider: refused reserved credential key "${credKey}" ("${ALTERNATE_CRED_KEY_SUFFIX}" marks a provider's alternate credential)`);
+			return;
+		}
 		sinks.providers[descriptor.key] = descriptor;
 	};
 	const registerSystemPromptFragment = (text) => {
@@ -16976,6 +17030,6 @@ function createAgent(rawOptions) {
 	};
 }
 //#endregion
-export { installExtensionFromSpec as $, groupBindings as $t, selectFilesFromSession as A, defaultRepeatGuardNormalize as An, createSkillsReadTool as At, buildUpToCompactPrompt as B, matchModelEntries as Bt, resolveLegacySessionDir as C, resolveExtensionConfigValue as Cn, waitTask as Ct, resolveTasksDir as D, OUTPUT_RESERVE_TOKENS as Dn, reserveChildLabel as Dt, resolveSessionDir as E, AUTO_COMPACT_MIN_GROWTH_FRACTION as En, isSpawnTool as Et, TRAILER as F, hashContent as Fn, readFile$1 as Ft, summaryToTurn as G, edit as Gt, anchorPreviewFor as H, createInteractionTool as Ht, buildCompactPrompt as I, hydrateReadStateFromSession as In, looksBinary as It, CompactPromptTooLongError as J, KEYBINDING_DEFS as Jt, truncateHeadForPtlRetry as K, validateToolArgs as Kt, buildFromCompactPrompt as L, hydrateReadStateFromSessionAsync as Ln, multiEdit as Lt, compactConversation as M, normalizeShellCommand as Mn, createShellTool as Mt, BASE_INSTRUCTIONS as N, stableStringify as Nn, shell as Nt, buildPostCompactAttachments as O, effectiveContextWindow as On, createSkillsUseTool as Ot, NO_TOOLS_PREAMBLE as P, getReadState as Pn, tailTruncate as Pt, fetchExtensionSource as Q, formatBindingForDisplay as Qt, buildFullCompactPrompt as R, readStateKey as Rn, createModelSearchTool as Rt, resolveLegacyPersistDir as S, resolveExtensionConfig as Sn, WAIT_TASK_TIMED_OUT_PREFIX as St, resolvePersistDir as T, toWireConfigSchema as Tn, createSpawnTool as Tt, sliceForCompaction as U, grep as Ut, ANCHOR_PREVIEW_MAX_CHARS as V, listFiles as Vt, stripImagesFromTurns as W, glob as Wt, createExtensionPromptBridge as X, KEYBINDING_KEY_COL_WIDTH as Xt, EMPTY_EXTENSION_REGISTRY as Y, KEYBINDING_DEF_BY_ACTION as Yt, ExtensionInstallError as Z, ensureKeybindingsFile as Zt, buildPersistedStub as _, defineExtension as _n, composePresets as _t, stagedToolState as a, readKeybindingsRaw as an, createExtensionHud as at, migrateSessionArtifactDirs as b, isValidExtensionConfigItem as bn, basic_default as bt, INTERRUPT_MESSAGE_FOR_TOOL_USE as c, registerExtensionHostModules as cn, buildExtensionRegistry as ct, TOOL_USE_SKIPPED_MESSAGE as d, discoverExtensions as dn, filterExtensionRegistry as dt, keybindingsPath as en, listExtensionCandidates as et, applyCompactSummaryCutoff as f, inlineLoadedExtension as fn, filterRegistryPlugins as ft, PERSISTENCE_PREVIEW_BYTES as g, createDebugLog as gn, createWorkspaceSurface as gt, PERSISTED_STUB_PREFIX as h, scanExtensionDirectories as hn, createExtensionHostRuntimeBridge as ht, isToolStateOps as i, readKeybindings as in, updateInstalledExtension as it, selectRecentFiles as j, defaultRepeatGuardTracked as jn, shellKill as jt, selectFilesFromReadState as k, shouldAutoCompact as kn, createSkillsRunScriptTool as kt, SHELL_CASCADE_CANCEL_MESSAGE as l, ENTRY_CANDIDATES as ln, composeExtensionPreset as lt, renderStaleReadNotice as m, parseExtensionScanPathEnv as mn, partitionExtensionCatalog as mt, DEFAULT_MAX_VALUE_BYTES as n, mergeKeybindings as nn, readExtensionInstallProvenance as nt, normalizeProviders as o, resolveExtensionKeybindings as on, discoverAndBuildExtensionRegistry as ot, collectNewlyStaleReadPaths as p, isExtensionDefinition as pn, mergeContributions as pt, CompactInvalidInputError as q, DEFAULT_KEYBINDINGS as qt, createToolStateController as r, parseBindingSpec as rn, removeInstalledExtension as rt, resolveModelTargets as s, stripJsonComments as sn, buildExtensionPreset as st, createAgent as t, matchesBinding as tn, parseExtensionInstallSource as tt, TOOL_USE_CANCELLED_MESSAGE as u, defaultExtensionScanPaths as un, disposeExtensionRegistry as ut, cleanupPersistedSession as v, clampExtensionConfigNumber as vn, definePreset as vt, resolveMcpWarningsDir as w, sanitizeExtensionConfigActionPatch as wn, createToolSearchTool as wt, rehomePersistedStubs as x, isValidExtensionConfigValue as xn, writeFile$1 as xt, maybePersistToolResult as y, coerceExtensionConfigInput as yn, basicTools as yt, buildTailCompactPrompt as z, resolveReadStateMap as zn, formatModelLine as zt };
+export { installExtensionFromSpec as $, groupBindings as $t, selectFilesFromSession as A, OUTPUT_RESERVE_TOKENS as An, createSkillsReadTool as At, buildUpToCompactPrompt as B, hydrateReadStateFromSessionAsync as Bn, matchModelEntries as Bt, resolveLegacySessionDir as C, isValidExtensionConfigItem as Cn, waitTask as Ct, resolveTasksDir as D, sanitizeExtensionConfigActionPatch as Dn, reserveChildLabel as Dt, resolveSessionDir as E, resolveExtensionConfigValue as En, isSpawnTool as Et, TRAILER as F, normalizeShellCommand as Fn, readFile$1 as Ft, summaryToTurn as G, edit as Gt, anchorPreviewFor as H, resolveReadStateMap as Hn, createInteractionTool as Ht, buildCompactPrompt as I, stableStringify as In, looksBinary as It, CompactPromptTooLongError as J, KEYBINDING_DEFS as Jt, truncateHeadForPtlRetry as K, validateToolArgs as Kt, buildFromCompactPrompt as L, getReadState as Ln, multiEdit as Lt, compactConversation as M, shouldAutoCompact as Mn, createShellTool as Mt, BASE_INSTRUCTIONS as N, defaultRepeatGuardNormalize as Nn, shell as Nt, buildPostCompactAttachments as O, toWireConfigSchema as On, createSkillsUseTool as Ot, NO_TOOLS_PREAMBLE as P, defaultRepeatGuardTracked as Pn, tailTruncate as Pt, fetchExtensionSource as Q, formatBindingForDisplay as Qt, buildFullCompactPrompt as R, hashContent as Rn, createModelSearchTool as Rt, resolveLegacyPersistDir as S, coerceExtensionConfigInput as Sn, WAIT_TASK_TIMED_OUT_PREFIX as St, resolvePersistDir as T, resolveExtensionConfig as Tn, createSpawnTool as Tt, sliceForCompaction as U, grep as Ut, ANCHOR_PREVIEW_MAX_CHARS as V, readStateKey as Vn, listFiles as Vt, stripImagesFromTurns as W, glob as Wt, createExtensionPromptBridge as X, KEYBINDING_KEY_COL_WIDTH as Xt, EMPTY_EXTENSION_REGISTRY as Y, KEYBINDING_DEF_BY_ACTION as Yt, ExtensionInstallError as Z, ensureKeybindingsFile as Zt, buildPersistedStub as _, parseExtensionScanPathEnv as _n, composePresets as _t, stagedToolState as a, readKeybindingsRaw as an, createExtensionHud as at, migrateSessionArtifactDirs as b, defineExtension as bn, basic_default as bt, INTERRUPT_MESSAGE_FOR_TOOL_USE as c, ALTERNATE_CRED_KEY_SUFFIX as cn, buildExtensionRegistry as ct, TOOL_USE_SKIPPED_MESSAGE as d, registerExtensionHostModules as dn, filterExtensionRegistry as dt, keybindingsPath as en, listExtensionCandidates as et, applyCompactSummaryCutoff as f, ENTRY_CANDIDATES as fn, filterRegistryPlugins as ft, PERSISTENCE_PREVIEW_BYTES as g, isExtensionDefinition as gn, createWorkspaceSurface as gt, PERSISTED_STUB_PREFIX as h, inlineLoadedExtension as hn, createExtensionHostRuntimeBridge as ht, isToolStateOps as i, readKeybindings as in, updateInstalledExtension as it, selectRecentFiles as j, effectiveContextWindow as jn, shellKill as jt, selectFilesFromReadState as k, AUTO_COMPACT_MIN_GROWTH_FRACTION as kn, createSkillsRunScriptTool as kt, SHELL_CASCADE_CANCEL_MESSAGE as l, alternateCredKey as ln, composeExtensionPreset as lt, renderStaleReadNotice as m, discoverExtensions as mn, partitionExtensionCatalog as mt, DEFAULT_MAX_VALUE_BYTES as n, mergeKeybindings as nn, readExtensionInstallProvenance as nt, normalizeProviders as o, resolveExtensionKeybindings as on, discoverAndBuildExtensionRegistry as ot, collectNewlyStaleReadPaths as p, defaultExtensionScanPaths as pn, mergeContributions as pt, CompactInvalidInputError as q, DEFAULT_KEYBINDINGS as qt, createToolStateController as r, parseBindingSpec as rn, removeInstalledExtension as rt, resolveModelTargets as s, stripJsonComments as sn, buildExtensionPreset as st, createAgent as t, matchesBinding as tn, parseExtensionInstallSource as tt, TOOL_USE_CANCELLED_MESSAGE as u, isReservedCredKey as un, disposeExtensionRegistry as ut, cleanupPersistedSession as v, scanExtensionDirectories as vn, definePreset as vt, resolveMcpWarningsDir as w, isValidExtensionConfigValue as wn, createToolSearchTool as wt, rehomePersistedStubs as x, clampExtensionConfigNumber as xn, writeFile$1 as xt, maybePersistToolResult as y, createDebugLog as yn, basicTools as yt, buildTailCompactPrompt as z, hydrateReadStateFromSession as zn, formatModelLine as zt };
 
-//# sourceMappingURL=agent-gZjHsUft.js.map
+//# sourceMappingURL=agent-CcTWL-Z6.js.map