zidane 7.1.3 → 7.1.5

package/dist/types.d.ts

@@ -1,4 +1,4 @@
-import { $_ as SkillsConfig, $g as SessionHookContext, Ah as AnthropicParams, B_ as StagedToolState, Bg as PromptDocumentPart, Br as InteractionToolOptions, C as SuccessfulMutationOutcome, C_ as TurnUsage, Cm as StreamOptions, D_ as ToolContext, Dm as ToolSpec, E_ as toolResultToText, Eg as DEFAULT_AGENT_CLOCK, Em as ToolResult, Gg as RepeatGuardConfig, H_ as ToolStateOp, Hg as PromptPart, Ig as OAuthRefreshHookContext, Jg as ResolveContentRefBlock, Ji as AgentHookMap, Kg as RepeatGuardToolMatcher, Lg as ProgressNudgeKind, M_ as ReadStateMap, Mg as McpToolHookContext, O_ as ToolDef, Om as TurnResult, Qg as SessionEndStatus, Rg as ProgressNudgeMessage, S as MutationValidationResult, S_ as TurnFinishReason, Sm as StreamCallbacks, T_ as toolOutputByteLength, Tm as ToolCall, U_ as ToolStateStore, Ug as PromptTextPart, V_ as ToolStateController, Vg as PromptImagePart, W_ as ToolStateView, Wg as PromptVideoPart, Xg as RunHookMap, Xi as AgentOptions, Y_ as SkillConfig, Yg as RetryConfig, Yi as AgentHooks, Z_ as SkillResource, Zg as SessionContentBlock, Zi as AgentToolState, _ as statsByModel, __ as ToolResultImageContent, _g as AgentStats, a_ as StreamHookContext, av as SessionRun, b as MutationValidationHooksOptions, b_ as ToolResultTextContent, bm as ProviderCapabilities, d_ as ToolHookContext, e_ as SessionMessage, ev as CreateSessionOptions, f_ as ToolOutcome, g_ as ToolResultDocumentRefContent, gc as SpawnToolState, gg as AgentRunOptions, gv as RemoteStoreOptions, h as flattenTurns, h_ as ToolResultDocumentContent, hc as SpawnToolOptions, hg as AgentClock, j_ as ReadStateEntry, jg as McpServerConfig, k_ as ToolMap, l_ as ThinkingLevel, lh as OpenAIParams, m_ as ToolResultContent, mg as AgentBehavior, n_ as SpawnHookContext, nv as Session, ov as SessionStore, p as ModelUsage, p_ as ToolResultAudioContent, qg as ResolveContentRef, qi as Agent, rv as SessionData, sy as McpConnection, t as Preset, t_ as SessionTurn, uc as ChildAgent, v as MutationValidationBatch, v_ as ToolResultImageRefContent, vr as ValidationResult, w_ as toolOutputBudgetByteLength, x as MutationValidationMutation, x_ as ToolResultVideoContent, xg as ChildRunStats, xh as CerebrasParams, y as MutationValidationFailure, y_ as ToolResultMetadata, ym as Provider, zg as PromptAudioPart, zm as OpenRouterParams } from "./index-DZhrTn-v.js";
+import { $_ as SkillsConfig, $g as SessionHookContext, Ah as AnthropicParams, B_ as StagedToolState, Bg as PromptDocumentPart, Br as InteractionToolOptions, C as SuccessfulMutationOutcome, C_ as TurnUsage, Cm as StreamOptions, D_ as ToolContext, Dm as ToolSpec, E_ as toolResultToText, Eg as DEFAULT_AGENT_CLOCK, Em as ToolResult, Gg as RepeatGuardConfig, H_ as ToolStateOp, Hg as PromptPart, Ig as OAuthRefreshHookContext, Jg as ResolveContentRefBlock, Ji as AgentHookMap, Kg as RepeatGuardToolMatcher, Lg as ProgressNudgeKind, M_ as ReadStateMap, Mg as McpToolHookContext, O_ as ToolDef, Om as TurnResult, Qg as SessionEndStatus, Rg as ProgressNudgeMessage, S as MutationValidationResult, S_ as TurnFinishReason, Sm as StreamCallbacks, T_ as toolOutputByteLength, Tm as ToolCall, U_ as ToolStateStore, Ug as PromptTextPart, V_ as ToolStateController, Vg as PromptImagePart, W_ as ToolStateView, Wg as PromptVideoPart, Xg as RunHookMap, Xi as AgentOptions, Y_ as SkillConfig, Yg as RetryConfig, Yi as AgentHooks, Z_ as SkillResource, Zg as SessionContentBlock, Zi as AgentToolState, _ as statsByModel, __ as ToolResultImageContent, _g as AgentStats, a_ as StreamHookContext, av as SessionRun, b as MutationValidationHooksOptions, b_ as ToolResultTextContent, bm as ProviderCapabilities, d_ as ToolHookContext, e_ as SessionMessage, ev as CreateSessionOptions, f_ as ToolOutcome, g_ as ToolResultDocumentRefContent, gc as SpawnToolState, gg as AgentRunOptions, gv as RemoteStoreOptions, h as flattenTurns, h_ as ToolResultDocumentContent, hc as SpawnToolOptions, hg as AgentClock, j_ as ReadStateEntry, jg as McpServerConfig, k_ as ToolMap, l_ as ThinkingLevel, lh as OpenAIParams, m_ as ToolResultContent, mg as AgentBehavior, n_ as SpawnHookContext, nv as Session, ov as SessionStore, p as ModelUsage, p_ as ToolResultAudioContent, qg as ResolveContentRef, qi as Agent, rv as SessionData, sy as McpConnection, t as Preset, t_ as SessionTurn, uc as ChildAgent, v as MutationValidationBatch, v_ as ToolResultImageRefContent, vr as ValidationResult, w_ as toolOutputBudgetByteLength, x as MutationValidationMutation, x_ as ToolResultVideoContent, xg as ChildRunStats, xh as CerebrasParams, y as MutationValidationFailure, y_ as ToolResultMetadata, ym as Provider, zg as PromptAudioPart, zm as OpenRouterParams } from "./index-Dw8ruU-j.js";
 import { d as ClassifiedErrorKind, i as AgentContextExceededError, l as CONTEXT_EXCEEDED_MESSAGE_PATTERNS, n as AgentAbortedError, o as AgentProviderError, p as matchesContextExceeded, r as AgentBudgetExceededError, s as AgentToolNotAllowedError, u as ClassifiedError } from "./timeout-DEaqslLO.js";
 import { C as TaskHandle, S as TaskExitInfo, c as ContextCapabilities, d as ContextType, f as DetachedTasksCapability, h as ExecutionHandle, l as ContextHardening, m as ExecutionContext, p as ExecResult, s as BackgroundTaskStatus, w as TaskStallInfo, x as TaskEntry, y as SpawnConfig } from "./isolation-Kfoof0MM.js";
 import { t as SandboxProvider } from "./sandbox-BH0WQkXn.js";

package/docs/CHAT.md

@@ -669,6 +669,16 @@ if (supportsOAuth(descriptor)) {
 }
 ```
 
+#### Multiple accounts
+
+A provider stores at most one API key and any number of OAuth accounts. The active credential (what every reader resolves) sits at the canonical file key; the others live at sibling slots — `<key>#alt` for the API key, `<key>#account:N` for OAuth accounts — so older builds, which only read the canonical key, keep working.
+
+- `setProviderCredential(dir, descriptor, { kind: 'oauth', label: 'work', ...credentials })` adds a new **active** account and parks the previous one; pass `{ replaceKey }` (an `AuthMethod.key`) to re-authenticate a stored account in place instead.
+- Every account has a name. The first login is stored as `DEFAULT_OAUTH_ACCOUNT_LABEL` (`"Default"`); `oauthAccountLabel(credential)` (also exported from `zidane/chat/pure`) applies the same fallback to unnamed grants from older files.
+- `readProviderCredentials(dir, descriptor)` lists every slot as `{ key, credential, active }`; `detectAuth` surfaces each as an `AuthMethod` carrying `key` and, for OAuth, `label`.
+- `setPreferredCredential(dir, descriptor, { key })` swaps an account in; the kind form (`'apikey' | 'oauth'`) still works and picks the first stored credential of that kind.
+- `removeStoredCredential(dir, descriptor, key)` drops one account (removing the active one promotes a survivor); `removeProviderCredential` drops everything. `setCredentialLabel(dir, descriptor, key, label)` renames (empty reverts to the default name).
+
 `runOAuthLogin` calls `tryOpenBrowser(url)` automatically. `oauthUsesManualCodePaste(descriptor)` flags providers with `usesCallbackServer: false` so a UI can swap its copy to "paste the code" up front. **SSH paste-back:** when the loopback callback is unreachable (SSH, firewalled), `fetchOAuthRedirect(pastedUrl)` fires the callback GET from inside the agent process instead. `normalizeRedirectPaste(pasted, authUrl)` completes a bare code or partial paste against the `redirect_uri` minted for the request; an absolute non-loopback paste passes through untouched into the SSRF guard rather than being rewritten.
 
 #### Credential refresh

package/docs/TUI.md

@@ -278,7 +278,7 @@ Discovered servers (`mcps.json` + `mcp.json` under `.{prefix}/` or `.agents/`, p
 
 ## Auth wizard (AI providers)
 
-`AuthScreen`/`SetupWizard`: pick provider → pick method (API key or OAuth, gated on `supportsOAuth`) → enter key (`setProviderCredential`) or run OAuth (`runOAuthLogin`, surfaced via `<OAuthAuthBlock>` with browser-open, copy, and paste-back). A pre-existing user picker (when ≥1 provider is authed) lists current credentials plus `+ add or re-configure`. Esc bails to the picker, or exits the TUI on true first launch.
+`AuthScreen`/`SetupWizard`: pick provider → pick method (API key or OAuth, gated on `supportsOAuth`) → enter key (`setProviderCredential`) or run OAuth (`runOAuthLogin`, surfaced via `<OAuthAuthBlock>` with browser-open, copy, and paste-back). A first OAuth login is stored as the `Default` account; when the provider already holds OAuth accounts, picking OAuth first asks whether to re-authenticate one of them or add another, then for the new account's name (required). Settings → Authentication lists every stored account under its provider; `↵` on one makes it active, `ctrl+e` renames it (footer editor, empty = `Default`), `ctrl+x` (twice) removes it. A pre-existing user picker (when ≥1 provider is authed) lists current credentials plus `+ add or re-configure`. Esc bails to the picker, or exits the TUI on true first launch.
 
 ## Execution runtimes (in-process vs daemon)
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zidane",
-  "version": "7.1.3",
+  "version": "7.1.5",
   "description": "an agent that goes straight to the goal",
   "type": "module",
   "private": false,