9router-proxy 0.6.4 → 0.6.6

package/cli.js

@@ -94,11 +94,11 @@ if (args[0] === "start" || args[0] === "stop" || args[0] === "status") {
   return;
 }
 
-// `9router-proxy connect <url>` configures local CLI tools against a remote
-// server — no local server, no runtime deps. Usable via
-// `npx 9router-proxy connect …`.
-if (args[0] === "connect") {
-  const { run } = require("./src/cli/commands/connect");
+// `9router-proxy connect <url>` configures local CLI tools against a remote server, and
+// `9router-proxy show` prints what they're currently set to — no local server, no
+// runtime deps. Usable via `npx 9router-proxy …`.
+if (args[0] === "connect" || args[0] === "show") {
+  const { run } = require(args[0] === "show" ? "./src/cli/commands/show" : "./src/cli/commands/connect");
   run(args.slice(1))
     .then((code) => process.exit(code))
     .catch((err) => {
@@ -187,6 +187,8 @@ Commands:
   status              Show background server status
   connect <server-url> Configure Claude Code for a remote 9router server
                       (npx 9router-proxy connect http://host:20128 — no install needed)
+  show [tool…]        Show each CLI tool's current 9router config and models
+                      (e.g. 9router-proxy show claude)
   xai video --prompt "..." --output video.mp4
                       Generate a Grok Imagine video via the running gateway
                       (see: ${APP_NAME} xai video --help)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "9router-proxy",
-  "version": "0.6.4",
+  "version": "0.6.6",
   "description": "9Router CLI - Start and manage 9Router server",
   "bin": {
     "9router-proxy": "./cli.js"
@@ -34,7 +34,7 @@
   "comment_systray": "systray2 is NOT bundled here. It is lazy-installed into ~/.9router/runtime/node_modules by hooks/postinstall.js on macOS/Linux only. Windows uses PowerShell NotifyIcon (zero binary). This avoids shipping unsigned Go binaries that trigger antivirus false positives (Kaspersky). We use the systray2 fork because the legacy systray@1.0.5 ships a 2017 x86_64 binary that fails to load on modern macOS dyld. Neither package ships an arm64 macOS binary, so on Apple Silicon hooks/trayRuntime.js overlays our own arm64 build from the tray-binaries GitHub release; without it the tray requires Rosetta 2.",
   "comment_tray_arm64": "tray_darwin_arm64 is built by scripts/buildTrayArm64.js (npm run build:tray-arm64) from felixhao28/systray-portable — the same source systray2's binary comes from — and uploaded to the pinned 'tray-binaries' GitHub release. Its sha256 is pinned as ARM64_TRAY_SHA256 in hooks/trayRuntime.js and verified after every download; rebuild and update both together. Upstream builds the same artifact in CI (its tray-binaries workflow) but refuses to publish when the sha diverges from the pin. Fork note: this repo intentionally does NOT carry the tray-binaries workflow; the pinned URL points at upstream's release, and while that asset is absent the tray falls back to the Intel binary under Rosetta 2.",
   "engines": {
-    "node": ">=18.0.0"
+    "node": ">=18.17.0"
   },
   "keywords": [
     "9router",

package/src/cli/api/client.js

@@ -355,10 +355,12 @@ async function deleteCombo(id) {
 /**
  * Get CLI tool settings
  * @param {string} tool - Tool name: claude | codex | droid | openclaw
+ * @param {string} [profile] - Hermes profile name (defaults to the default profile)
  * @returns {Promise<Object>} { success, data: { installed, has9Router, ... } }
  */
-async function getCliToolSettings(tool) {
-  return makeRequest("GET", `/api/cli-tools/${tool}-settings`);
+async function getCliToolSettings(tool, profile) {
+  const qs = profile ? `?profile=${encodeURIComponent(profile)}` : "";
+  return makeRequest("GET", `/api/cli-tools/${tool}-settings${qs}`);
 }
 
 /**
@@ -374,10 +376,20 @@ async function applyCliToolSettings(tool, body) {
 /**
  * Reset CLI tool settings (DELETE)
  * @param {string} tool - Tool name: claude | codex | droid | openclaw
+ * @param {string} [profile] - Hermes profile name (defaults to the default profile)
  * @returns {Promise<Object>} { success, data }
  */
-async function resetCliToolSettings(tool) {
-  return makeRequest("DELETE", `/api/cli-tools/${tool}-settings`);
+async function resetCliToolSettings(tool, profile) {
+  const qs = profile ? `?profile=${encodeURIComponent(profile)}` : "";
+  return makeRequest("DELETE", `/api/cli-tools/${tool}-settings${qs}`);
+}
+
+/**
+ * List Hermes profiles (default home + ~/.hermes/profiles/*)
+ * @returns {Promise<Object>} { success, data: { profiles: [...] } }
+ */
+async function listHermesProfiles() {
+  return makeRequest("GET", "/api/cli-tools/hermes-profiles");
 }
 
 // ============================================================================
@@ -523,6 +535,7 @@ module.exports = {
   getCliToolSettings,
   applyCliToolSettings,
   resetCliToolSettings,
+  listHermesProfiles,
 
   // Settings
   getSettings,

package/src/cli/commands/connect.js

@@ -7,11 +7,11 @@
  * The password and API key are never printed (key is masked).
  */
 
+const fs = require("fs");
 const os = require("os");
+const path = require("path");
 const { TOOL_IDS, CLAUDE_MODELS, resolveTools } = require("./connectTools");
 
-const DEFAULT_MODEL = "cc/claude-sonnet-5";
-
 const HELP = `
 Usage: 9router-proxy connect <server-url> [options]
 
@@ -27,14 +27,26 @@ Options:
                          ${TOOL_IDS.join(", ")}, all
   --password <pw>        Dashboard password (or env NINE_ROUTER_PASSWORD;
                          prompted if omitted — preferred, keeps it out of shell history)
+  --save                 After a successful login, save the password for this server
+                         to ~/.9router/connect.env (plain text, mode 600) so later
+                         runs skip the prompt. Delete that file to forget it.
   --key-name <name>      API key name to reuse/create (default: cli-<hostname>)
   --api-key <key>        Use this API key, skip login + key lookup
-  --model <model>        Model for non-Claude tools (default: ${DEFAULT_MODEL})
+  --model <model>        Model for all non-Claude tools (default: each tool's own
+                         model on the server, else the server's OpenCode model;
+                         omp needs none — it discovers every server model)
   --fable|--opus|--sonnet|--haiku <model>
-                         Override Claude Code model mapping
+                         Override a Claude Code tier (default: the server's value)
   --print-env            Also print OpenAI-compatible env vars for other CLIs
   --reset                Remove 9router settings from the selected tools and exit
   -h, --help             Show this help
+
+Models come from the server's own CLI-tools config (set on its dashboard).
+Nothing is hardcoded: a Claude tier the server leaves unset is left unset,
+and a non-Claude tool with no model anywhere is skipped. Flags override:
+
+  npx 9router-proxy connect http://<server-host>:20128 --tools claude --sonnet cc/claude-sonnet-5-5
+  npx 9router-proxy connect http://<server-host>:20128 --tools codex,opencode --model ocg/deepseek-flash
 `;
 
 function parseArgs(argv) {
@@ -56,6 +68,7 @@ function parseArgs(argv) {
     else if (a === "--api-key") opts.apiKey = next();
     else if (a === "--tools") opts.tools = next().split(",");
     else if (a === "--model") opts.model = next();
+    else if (a === "--save") opts.save = true;
     else if (a === "--print-env") opts.printEnv = true;
     else if (a === "--reset") opts.reset = true;
     else if (a === "-h" || a === "--help") opts.help = true;
@@ -79,6 +92,39 @@ function maskKey(key) {
   return `${key.slice(0, 6)}…${key.slice(-4)}`;
 }
 
+// Saved login (`--save`): dotenv file in the CLI data dir, bound to one server so a
+// password is never sent to a different host.
+function savedEnvPath() {
+  if (process.env.DATA_DIR) return path.join(process.env.DATA_DIR, "connect.env");
+  const base = process.platform === "win32"
+    ? path.join(process.env.APPDATA || path.join(os.homedir(), "AppData", "Roaming"), "9router")
+    : path.join(os.homedir(), ".9router");
+  return path.join(base, "connect.env");
+}
+
+function loadSavedPassword(server) {
+  let text;
+  try { text = fs.readFileSync(savedEnvPath(), "utf8"); } catch { return null; }
+  const env = {};
+  for (const line of text.split(/\r?\n/)) {
+    const m = /^([A-Z_]+)=(.*)$/.exec(line);
+    if (!m) continue;
+    // Values are written JSON-quoted; accept a hand-edited bare value too
+    // rather than crashing the whole command on JSON.parse.
+    try { env[m[1]] = JSON.parse(m[2]); } catch { env[m[1]] = m[2]; }
+  }
+  return env.NINE_ROUTER_SERVER === server && env.NINE_ROUTER_PASSWORD ? env.NINE_ROUTER_PASSWORD : null;
+}
+
+function savePassword(server, password) {
+  const file = savedEnvPath();
+  fs.mkdirSync(path.dirname(file), { recursive: true });
+  const body = `NINE_ROUTER_SERVER=${JSON.stringify(server)}\nNINE_ROUTER_PASSWORD=${JSON.stringify(password)}\n`;
+  fs.writeFileSync(file, body, { mode: 0o600 });
+  fs.chmodSync(file, 0o600); // mode only applies on create; tighten a pre-existing file too
+  return file;
+}
+
 // Enquirer rejects with an empty value on Ctrl+C / Esc.
 class Cancelled extends Error {}
 const prompt = (p) => p.run().catch((err) => { throw err || new Cancelled("Cancelled"); });
@@ -141,6 +187,54 @@ async function getOrCreateApiKey(server, cookie, keyName) {
   return { key: created.data.key, created: true };
 }
 
+// Non-Claude tools that take a single model id (omp discovers all models itself).
+const needsModel = (t) => t.id !== "claude" && t.needsModel !== false;
+
+/**
+ * Model choices the server operator already made, read from the server's own
+ * cli-tools config. Only model ids are taken — never the server's baseUrl or
+ * apiKey, which belong to that host and must not be copied to this machine.
+ * Best-effort: any failure returns {} and the built-in defaults apply.
+ */
+async function fetchServerModels(server, cookie, tools) {
+  const out = { claude: {}, byTool: {}, shared: null };
+  if (!cookie) return out;
+
+  const get = async (route) => {
+    try {
+      const res = await request(`${server}/api/cli-tools/${route}`, { cookie });
+      return res.status === 200 ? res.data : null;
+    } catch {
+      return null; // unreachable/unreadable — caller keeps defaults
+    }
+  };
+
+  if (tools.some((t) => t.id === "claude")) {
+    const env = (await get("claude-settings"))?.settings?.env;
+    for (const m of CLAUDE_MODELS) {
+      if (typeof env?.[m.envKey] === "string" && env[m.envKey]) out.claude[m.flag] = env[m.envKey];
+    }
+  }
+
+  // Each tool's own server config; OpenCode doubles as the shared fallback, so
+  // fetch it even when opencode itself wasn't selected.
+  const { TOOLS } = require("./connectTools");
+  const opencodeTool = TOOLS.find((t) => t.id === "opencode");
+  const wanted = tools.filter((t) => t.route);
+  if (!wanted.includes(opencodeTool) && tools.some(needsModel)) wanted.push(opencodeTool);
+
+  await Promise.all(wanted.map(async (t) => {
+    const data = await get(t.route);
+    if (!data) return;
+    try {
+      const model = await t.serverModel(data);
+      if (model) out.byTool[t.id] = model;
+    } catch { /* malformed config on the server — skip this tool */ }
+  }));
+  out.shared = out.byTool.opencode || null;
+  return out;
+}
+
 async function listModels(server, apiKey) {
   const res = await request(`${server}/v1/models`, { apiKey });
   if (res.status === 401) throw new Error("API key rejected by server (/v1/models returned 401)");
@@ -212,37 +306,76 @@ async function runConnect(argv) {
   }
 
   let apiKey = opts.apiKey;
+  let cookie = null;
   if (apiKey) {
     console.log("• Using provided API key");
   } else {
-    const password = opts.password ?? (await promptPassword());
+    const saved = opts.password ? null : loadSavedPassword(server);
+    if (saved) console.log(`• Using saved password (${savedEnvPath()})`);
+    const password = opts.password ?? saved ?? (await promptPassword());
     console.log(`• Logging in to ${server}`);
-    const cookie = await login(server, password);
+    try {
+      cookie = await login(server, password);
+    } catch (err) {
+      if (saved) err.message += ` — saved password may be stale; delete ${savedEnvPath()} or pass --password`;
+      throw err;
+    }
+    if (opts.save && password !== saved) {
+      console.log(`• Saved password to ${savePassword(server, password)} (plain text, mode 600)`);
+    }
     const result = await getOrCreateApiKey(server, cookie, opts.keyName);
     apiKey = result.key;
     console.log(`• ${result.created ? "Created" : "Reusing"} API key "${opts.keyName}" (${maskKey(apiKey)})`);
   }
 
+  // Models always come from the server's own cli-tools config; flags override.
+  const serverModels = await fetchServerModels(server, cookie, tools);
+  if (!cookie) {
+    console.log("• --api-key given: can't read the server's models (needs a dashboard login) — pass model flags");
+  }
+
   const available = await listModels(server, apiKey);
   const warnMissing = (label, model, flag) => {
-    if (available && !available.has(model)) {
+    // Claude Code's "[1m]" context marker is part of the env value, not the model id.
+    if (available && !available.has(model.replace(/\[1m\]$/, ""))) {
       console.log(`\x1b[33m⚠ ${label}: "${model}" not listed by server — override with ${flag} <model>\x1b[0m`);
     }
   };
 
+  // Claude tier: flag > server value > unset (Claude Code then uses its own default).
   const claudeModels = {};
+  const claudeUnset = [];
   if (tools.some((t) => t.id === "claude")) {
     for (const m of CLAUDE_MODELS) {
-      claudeModels[m.envKey] = opts.models[m.flag] || m.defaultValue;
-      warnMissing(`claude ${m.flag}`, claudeModels[m.envKey], `--${m.flag}`);
+      const model = opts.models[m.flag] || serverModels.claude[m.flag] || null;
+      claudeModels[m.envKey] = model;
+      if (model) warnMissing(`claude ${m.flag}`, model, `--${m.flag}`);
+      else claudeUnset.push(m.flag);
     }
   }
-  const model = opts.model || DEFAULT_MODEL;
-  if (tools.some((t) => t.id !== "claude")) warnMissing("model", model, "--model");
+  // Other tools: --model > that tool's own server model > server's OpenCode model.
+  // No hardcoded fallback — a tool with no model anywhere is skipped.
+  const toolModels = {};
+  const fromOpencode = [];
+  for (const t of tools) {
+    if (!needsModel(t)) continue;
+    toolModels[t.id] = opts.model || serverModels.byTool[t.id] || serverModels.shared || null;
+    if (!opts.model && !serverModels.byTool[t.id] && serverModels.shared) fromOpencode.push(t.id);
+  }
+  for (const m of new Set(Object.values(toolModels).filter(Boolean))) warnMissing("model", m, "--model");
+  if (fromOpencode.length) {
+    console.log(`• ${fromOpencode.join(", ")}: no own model on the server — using its OpenCode model`);
+  }
 
-  const ctx = { baseUrl: server, apiKey, model, claudeModels };
   let failed = 0;
+  let skipped = 0;
   for (const t of tools) {
+    if (needsModel(t) && !toolModels[t.id]) {
+      skipped++;
+      console.log(`⏭  ${t.name}: no model configured on the server — skipped (pass --model <model>)`);
+      continue;
+    }
+    const ctx = { baseUrl: server, apiKey, model: toolModels[t.id], claudeModels };
     try {
       const files = await t.apply(ctx);
       console.log(`✅ ${t.name} → ${files.join(", ")}`);
@@ -253,9 +386,15 @@ async function runConnect(argv) {
   }
   console.log(`   Base URL: ${server}/v1`);
   if (tools.some((t) => t.id === "claude")) {
-    for (const m of CLAUDE_MODELS) console.log(`   ${m.envKey}=${claudeModels[m.envKey]}`);
+    for (const m of CLAUDE_MODELS) {
+      if (claudeModels[m.envKey]) console.log(`   ${m.envKey}=${claudeModels[m.envKey]}`);
+    }
+    if (claudeUnset.length) {
+      console.log(`   Claude ${claudeUnset.join(", ")}: not set on the server — Claude Code's own default applies (or pass --${claudeUnset[0]} <model>)`);
+    }
   }
-  if (tools.some((t) => t.id !== "claude")) console.log(`   Model (other tools): ${model}`);
+  for (const [id, m] of Object.entries(toolModels)) if (m) console.log(`   ${id} model: ${m}`);
+  if (tools.some((t) => t.id === "omp")) console.log("   omp models: every server model, listed under 9router in /model");
   console.log(`   Restart the tools to apply. Undo: npx 9router-proxy connect --reset --tools ${tools.map((t) => t.id).join(",")}`);
 
   if (opts.printEnv) {
@@ -263,7 +402,8 @@ async function runConnect(argv) {
     console.log(`   OPENAI_BASE_URL=${server}/v1`);
     console.log(`   OPENAI_API_KEY=${apiKey}`);
   }
-  return failed ? 1 : 0;
+  // A skipped tool was not configured, so the run did not do what was asked.
+  return failed || skipped ? 1 : 0;
 }
 
-module.exports = { run, __test__: { parseArgs, normalizeServerUrl, extractAuthCookie, maskKey, Cancelled } };
+module.exports = { run, __test__: { parseArgs, normalizeServerUrl, extractAuthCookie, maskKey, Cancelled, loadSavedPassword, savedEnvPath } };