@aisa-one/cli 0.3.0 → 0.5.0

package/dist/constants.d.ts

@@ -1,4 +1,4 @@
-export declare const VERSION = "0.3.0";
+export declare const VERSION = "0.5.0";
 /** Root of the platform. Per-surface bases are derived in api.ts#resolveBases. */
 export declare const BASE_URL = "https://api.aisa.one";
 export declare const ENV_VAR_NAME = "AISA_API_KEY";
@@ -7,15 +7,47 @@ export declare const ENV_VAR_NAME = "AISA_API_KEY";
  * exist and where they live. The CLI deliberately knows no server list of its
  * own: servers ship and retire on the platform side, and reading the manifest
  * at setup time means a new server works without a CLI release (the same
- * philosophy as LLM_ROUTE_PREFIXES below, applied to the fast-moving side).
+ * philosophy as live catalog/MCP discovery, applied to the fast-moving side).
  *
  * History: until v0.2.4 this file hardcoded MCP_URL = "https://docs.aisa.one/mcp",
  * a host that does not resolve — every `aisa mcp setup` wrote a dead entry into
  * users' configs, and nothing noticed because the command had no tests.
  */
 export declare const MCP_MANIFEST_URL = "https://aisa.one/.well-known/mcp.json";
+/**
+ * The live server index, served by the MCP host itself.
+ *
+ * Preferred over the manifest above, which is generated offline and committed
+ * by hand: being a snapshot it drifts. Measured 2026-08-25 it named 11 servers
+ * and 188 tools while mcp.aisa.one was serving 14 and 260 — agentmail (49
+ * tools), seo (21) and creator-discovery (2) missing outright, so every user
+ * of this CLI was offered 72 fewer tools than exist.
+ *
+ * It is also 12 KB against the manifest's 137 KB. Most of that difference is
+ * tool names, of which this CLI uses exactly one thing: `tools.length`, to
+ * print a count. The index carries `toolCount` instead; a client that wants
+ * the names is about to connect anyway, and `tools/list` is authoritative.
+ *
+ * The manifest stays as the fallback — this endpoint is newer than some
+ * deployments — and as the public document for readers who want the roadmap
+ * of planned servers, which a running process cannot honestly report.
+ */
+export declare const MCP_CATALOG_URL = "https://mcp.aisa.one/servers";
 /** Mintlify's docs-search MCP (3 tools: search/read/feedback). Unauthenticated. */
 export declare const DOCS_MCP_URL = "https://aisa.one/docs/mcp";
+/** Where credit is added. Payment always finishes in a browser — Stripe's
+ *  hosted page owns the card details, and 3-D Secure needs one. */
+/** The account surface. Printed where someone can act on it, not linked. */
+export declare const CONSOLE_URL = "https://console.aisa.one";
+export declare const CONSOLE_BILLING_URL = "https://console.aisa.one/billing";
+/** Anthropic-shaped base for Claude Code: it appends /v1/messages itself. */
+export declare const LLM_BASE_URL = "https://api.aisa.one";
+/** Codex speaks the Responses API and appends /responses, so it needs the
+ *  /v1 root rather than the host. */
+export declare const LLM_RESPONSES_BASE_URL = "https://api.aisa.one/v1";
+/** The provider name written into Codex's config.toml. Frozen: renaming it
+ *  orphans the block we would otherwise remove cleanly. */
+export declare const AISA_PROVIDER_ID = "aisa";
 /**
  * Servers configured by default. Eleven entries per client is a lot of config;
  * these five cover the broadest agent needs, and `--all` configures everything
@@ -23,16 +55,15 @@ export declare const DOCS_MCP_URL = "https://aisa.one/docs/mcp";
  */
 export declare const MCP_DEFAULT_SLUGS: readonly string[];
 /**
- * First path segment of every route the LLM gateway serves under /v1 (plus
- * /v1beta for Gemini). Everything else is an integration API under /apis/v1.
+ * Why one and not five.
  *
- * This list is deliberately the whitelist rather than the provider slugs: the
- * gateway routes are hardcoded server-side and change about once a year, while
- * provider slugs are data that operations add and remove continuously. Keeping
- * the whitelist on the slow-moving side means a newly added provider works
- * without a CLI release.
+ * Each server is its own OAuth resource — the authorization URL carries
+ * `resource=https://mcp.aisa.one/<slug>/mcp` (RFC 8707) — so a keyless
+ * install authorises once per server. Defaulting to five meant five browser
+ * round trips before anything worked, observed 2026-08-20. Web search is the
+ * one every agent reaches for; the rest are one tick away, and a configured
+ * API key skips authorization for all of them anyway.
  */
-export declare const LLM_ROUTE_PREFIXES: readonly string[];
 export declare const AGENT_DIRS: Record<string, string>;
 /**
  * Per-client config shape. This is the part v0.2.4 got wrong even apart from
@@ -47,37 +78,19 @@ export declare const MCP_CONFIGS: Record<string, {
     shape: "url" | "stdio";
 }>;
 /**
- * Ticker symbol → CoinGecko coin id.
- *
- * CoinGecko keys everything by id ("bitcoin"), not symbol ("BTC"), and dozens
- * of unrelated tokens share popular symbols — resolving by symbol alone would
- * happily return the price of the wrong coin. This table covers the symbols
- * people actually type; anything else falls back to an explicit lookup.
- */
-export declare const COINGECKO_IDS: Record<string, string>;
-/**
- * Models routed to /v1/video/generations, and the request body each one wants.
+ * Windsurf was here until 2026-08-25 and was removed, not because it cannot be
+ * configured but because being listed did harm on a machine without it.
  *
- * The gateway only rewrites the top-level `model` and passes the rest through,
- * so the body shape belongs to whichever vendor owns the model — a Bailian-style
- * `{input, parameters}` sent to Seedance is rejected outright with a 400.
+ * `detectClients()` decides a client is present by whether the parent of its
+ * config path exists. `aisa mcp setup` with no --agent wrote to every entry in
+ * this table regardless of what was installed — so on a machine with no
+ * Windsurf it created ~/.codeium/windsurf/, and the next `aisa connect`
+ * offered a Windsurf card for an editor that was never there. A stale entry in
+ * this table is not inert: it is an input to detection.
  *
- * `requiresMedia` records the `input.media[].type` an image/clip-driven model
- * needs. Without it the upstream accepts the submission and only fails a minute
- * later, after billing, so the CLI refuses up front instead.
+ * The T2 page had already been filtering it out by hand, which was the same
+ * observation reached one layer too late.
  */
-export type VideoFamily = "bailian" | "seedance";
-export interface VideoModelSpec {
-    family: VideoFamily;
-    requiresMedia?: MediaType;
-}
-/** Accepted values for `input.media[].type` (enumerated by the upstream error). */
-export declare const MEDIA_TYPES: readonly ["first_frame", "last_frame", "driving_audio", "first_clip"];
-export type MediaType = (typeof MEDIA_TYPES)[number];
-export declare const VIDEO_MODELS: Record<string, VideoModelSpec>;
-export declare const DEFAULT_VIDEO_MODEL = "wan2.7-t2v";
-/** Model families are matched by prefix so new revisions work without a release. */
-export declare function videoModelSpec(model: string): VideoModelSpec;
 /**
  * Client-side grouping of integration providers.
  *

package/dist/constants.js

@@ -1,4 +1,4 @@
-export const VERSION = "0.3.0";
+export const VERSION = "0.5.0";
 /** Root of the platform. Per-surface bases are derived in api.ts#resolveBases. */
 export const BASE_URL = "https://api.aisa.one";
 export const ENV_VAR_NAME = "AISA_API_KEY";
@@ -7,50 +7,63 @@ export const ENV_VAR_NAME = "AISA_API_KEY";
  * exist and where they live. The CLI deliberately knows no server list of its
  * own: servers ship and retire on the platform side, and reading the manifest
  * at setup time means a new server works without a CLI release (the same
- * philosophy as LLM_ROUTE_PREFIXES below, applied to the fast-moving side).
+ * philosophy as live catalog/MCP discovery, applied to the fast-moving side).
  *
  * History: until v0.2.4 this file hardcoded MCP_URL = "https://docs.aisa.one/mcp",
  * a host that does not resolve — every `aisa mcp setup` wrote a dead entry into
  * users' configs, and nothing noticed because the command had no tests.
  */
 export const MCP_MANIFEST_URL = "https://aisa.one/.well-known/mcp.json";
+/**
+ * The live server index, served by the MCP host itself.
+ *
+ * Preferred over the manifest above, which is generated offline and committed
+ * by hand: being a snapshot it drifts. Measured 2026-08-25 it named 11 servers
+ * and 188 tools while mcp.aisa.one was serving 14 and 260 — agentmail (49
+ * tools), seo (21) and creator-discovery (2) missing outright, so every user
+ * of this CLI was offered 72 fewer tools than exist.
+ *
+ * It is also 12 KB against the manifest's 137 KB. Most of that difference is
+ * tool names, of which this CLI uses exactly one thing: `tools.length`, to
+ * print a count. The index carries `toolCount` instead; a client that wants
+ * the names is about to connect anyway, and `tools/list` is authoritative.
+ *
+ * The manifest stays as the fallback — this endpoint is newer than some
+ * deployments — and as the public document for readers who want the roadmap
+ * of planned servers, which a running process cannot honestly report.
+ */
+export const MCP_CATALOG_URL = "https://mcp.aisa.one/servers";
 /** Mintlify's docs-search MCP (3 tools: search/read/feedback). Unauthenticated. */
 export const DOCS_MCP_URL = "https://aisa.one/docs/mcp";
+/** Where credit is added. Payment always finishes in a browser — Stripe's
+ *  hosted page owns the card details, and 3-D Secure needs one. */
+/** The account surface. Printed where someone can act on it, not linked. */
+export const CONSOLE_URL = "https://console.aisa.one";
+export const CONSOLE_BILLING_URL = "https://console.aisa.one/billing";
+/** Anthropic-shaped base for Claude Code: it appends /v1/messages itself. */
+export const LLM_BASE_URL = "https://api.aisa.one";
+/** Codex speaks the Responses API and appends /responses, so it needs the
+ *  /v1 root rather than the host. */
+export const LLM_RESPONSES_BASE_URL = "https://api.aisa.one/v1";
+/** The provider name written into Codex's config.toml. Frozen: renaming it
+ *  orphans the block we would otherwise remove cleanly. */
+export const AISA_PROVIDER_ID = "aisa";
 /**
  * Servers configured by default. Eleven entries per client is a lot of config;
  * these five cover the broadest agent needs, and `--all` configures everything
  * the manifest lists as live.
  */
-export const MCP_DEFAULT_SLUGS = [
-    "web-search",
-    "twitter-api",
-    "crypto-market-data",
-    "marketpulse",
-    "stock-pulse",
-];
+export const MCP_DEFAULT_SLUGS = ["web-search"];
 /**
- * First path segment of every route the LLM gateway serves under /v1 (plus
- * /v1beta for Gemini). Everything else is an integration API under /apis/v1.
+ * Why one and not five.
  *
- * This list is deliberately the whitelist rather than the provider slugs: the
- * gateway routes are hardcoded server-side and change about once a year, while
- * provider slugs are data that operations add and remove continuously. Keeping
- * the whitelist on the slow-moving side means a newly added provider works
- * without a CLI release.
+ * Each server is its own OAuth resource — the authorization URL carries
+ * `resource=https://mcp.aisa.one/<slug>/mcp` (RFC 8707) — so a keyless
+ * install authorises once per server. Defaulting to five meant five browser
+ * round trips before anything worked, observed 2026-08-20. Web search is the
+ * one every agent reaches for; the rest are one tick away, and a configured
+ * API key skips authorization for all of them anyway.
  */
-export const LLM_ROUTE_PREFIXES = [
-    "chat",
-    "responses",
-    "embeddings",
-    "messages",
-    "models",
-    "rerank",
-    "classify",
-    "images",
-    "credits",
-    "video",
-    "v1beta",
-];
 export const AGENT_DIRS = {
     claude: "~/.claude/skills/",
     cursor: "~/.cursor/skills/",
@@ -74,90 +87,21 @@ export const MCP_CONFIGS = {
         key: "mcpServers",
         shape: "stdio",
     },
-    windsurf: {
-        path: "~/.codeium/windsurf/mcp_config.json",
-        key: "mcpServers",
-        shape: "stdio",
-    },
 };
 /**
- * Ticker symbol → CoinGecko coin id.
+ * Windsurf was here until 2026-08-25 and was removed, not because it cannot be
+ * configured but because being listed did harm on a machine without it.
+ *
+ * `detectClients()` decides a client is present by whether the parent of its
+ * config path exists. `aisa mcp setup` with no --agent wrote to every entry in
+ * this table regardless of what was installed — so on a machine with no
+ * Windsurf it created ~/.codeium/windsurf/, and the next `aisa connect`
+ * offered a Windsurf card for an editor that was never there. A stale entry in
+ * this table is not inert: it is an input to detection.
  *
- * CoinGecko keys everything by id ("bitcoin"), not symbol ("BTC"), and dozens
- * of unrelated tokens share popular symbols — resolving by symbol alone would
- * happily return the price of the wrong coin. This table covers the symbols
- * people actually type; anything else falls back to an explicit lookup.
+ * The T2 page had already been filtering it out by hand, which was the same
+ * observation reached one layer too late.
  */
-export const COINGECKO_IDS = {
-    btc: "bitcoin",
-    eth: "ethereum",
-    usdt: "tether",
-    bnb: "binancecoin",
-    sol: "solana",
-    usdc: "usd-coin",
-    xrp: "ripple",
-    doge: "dogecoin",
-    ada: "cardano",
-    trx: "tron",
-    avax: "avalanche-2",
-    shib: "shiba-inu",
-    dot: "polkadot",
-    link: "chainlink",
-    bch: "bitcoin-cash",
-    near: "near",
-    matic: "matic-network",
-    ltc: "litecoin",
-    icp: "internet-computer",
-    uni: "uniswap",
-    leo: "leo-token",
-    dai: "dai",
-    etc: "ethereum-classic",
-    apt: "aptos",
-    render: "render-token",
-    hbar: "hedera-hashgraph",
-    fil: "filecoin",
-    arb: "arbitrum",
-    atom: "cosmos",
-    imx: "immutable-x",
-    op: "optimism",
-    vet: "vechain",
-    inj: "injective-protocol",
-    sui: "sui",
-    ton: "the-open-network",
-    pepe: "pepe",
-    tao: "bittensor",
-    sei: "sei-network",
-    aave: "aave",
-    algo: "algorand",
-    xlm: "stellar",
-    cro: "crypto-com-chain",
-    mnt: "mantle",
-    wld: "worldcoin-wld",
-};
-/** Accepted values for `input.media[].type` (enumerated by the upstream error). */
-export const MEDIA_TYPES = ["first_frame", "last_frame", "driving_audio", "first_clip"];
-export const VIDEO_MODELS = {
-    "wan2.7-t2v": { family: "bailian" },
-    "wan2.7-i2v": { family: "bailian", requiresMedia: "first_frame" },
-    "wan2.7-r2v": { family: "bailian", requiresMedia: "first_clip" },
-    "happyhorse-1.1-t2v": { family: "bailian" },
-    "happyhorse-1.1-i2v": { family: "bailian", requiresMedia: "first_frame" },
-    "happyhorse-1.1-r2v": { family: "bailian", requiresMedia: "first_clip" },
-    "dreamina-seedance-2-0-260128": { family: "seedance" },
-    "dreamina-seedance-2-0-fast-260128": { family: "seedance" },
-};
-export const DEFAULT_VIDEO_MODEL = "wan2.7-t2v";
-/** Model families are matched by prefix so new revisions work without a release. */
-export function videoModelSpec(model) {
-    if (VIDEO_MODELS[model])
-        return VIDEO_MODELS[model];
-    const family = model.startsWith("dreamina-seedance") ? "seedance" : "bailian";
-    if (/-i2v\b|-i2v$/.test(model))
-        return { family, requiresMedia: "first_frame" };
-    if (/-r2v\b|-r2v$/.test(model))
-        return { family, requiresMedia: "first_clip" };
-    return { family };
-}
 /**
  * Client-side grouping of integration providers.
  *