@alumbwe/anvil 1.0.41 → 1.0.49

package/src/utils/config-dir.ts

@@ -15,7 +15,7 @@ export const getConfigDir = (): string => {
   return path.join(
     os.homedir(),
     '.config',
-    'manicode' +
+    'anvil' +
       // on a development stack?
       (env.NEXT_PUBLIC_CB_ENVIRONMENT !== 'prod'
         ? `-${env.NEXT_PUBLIC_CB_ENVIRONMENT}`

package/vendor/@anvil/common/src/constants/deepseek-direct.ts

@@ -18,7 +18,13 @@
  *    served by DeepSeek at all and falls back to the default DeepSeek model.
  */
 
-export const DEEPSEEK_BASE_URL = 'https://api.deepseek.com'
+export const DEEPSEEK_BASE_URL = 'https://api.deepseek.com'
+
+// The managed gateway is deployed with the CLI's Supabase project. Keep this
+// public endpoint in the client so an installed CLI can run without a local
+// .env file; authentication still comes from the user's stored Supabase JWT.
+export const MANAGED_GATEWAY_URL =
+  'https://tqolntrdmbbaptmxihtq.supabase.co/functions/v1/cli-agent'
 
 /** Model name sent to DeepSeek for ids that are not a DeepSeek lane model. */
 export const DEFAULT_DIRECT_DEEPSEEK_MODEL = 'deepseek-v4-pro'
@@ -31,6 +37,29 @@ export const getDirectDeepSeekApiKey = (): string | undefined =>
 export const isDirectDeepSeekMode = (): boolean =>
   Boolean(getDirectDeepSeekApiKey())
 
+/**
+ * Managed gateway mode ("no direct mode"): the CLI routes every model call
+ * through the Anvil managed gateway (the Supabase `cli-agent` Edge Function)
+ * instead of calling a provider directly. The gateway holds the provider key,
+ * injects the private system prompt server-side, and meters credits — so the
+ * brain and the key never ship in the client.
+ *
+ * Enabled whenever a gateway URL is configured: `ANVIL_GATEWAY_URL` wins,
+ * otherwise it is derived from `SUPABASE_URL` / `NEXT_PUBLIC_SUPABASE_URL`.
+ * When on, it takes precedence over direct mode, and the CLI uses a local run
+ * identity (no external account backend is required).
+ */
+export const getManagedGatewayUrl = (): string | undefined => {
+  // ANVIL_GATEWAY_URL remains an escape hatch for development and tests, but
+  // production installs must not depend on a locally supplied environment.
+  const explicit = process.env.ANVIL_GATEWAY_URL?.trim()
+  return (explicit || MANAGED_GATEWAY_URL).replace(/\/+$/, '')
+}
+
+/** True when the managed gateway is configured (see {@link getManagedGatewayUrl}). */
+export const isManagedGatewayMode = (): boolean =>
+  Boolean(getManagedGatewayUrl())
+
 /** Map a Codebuff model ID to the model name DeepSeek's API accepts. */
 export function remapModelForDirectDeepSeek(model: string): string {
   const override = process.env.DEEPSEEK_MODEL

package/vendor/@anvil/common/src/util/project-ignore.ts

@@ -1,9 +1,10 @@
 import * as ignore from 'ignore'
 
 export const PROJECT_IGNORE_FILES = [
-  '.gitignore',
-  '.anvilignore',
-  '.manicodeignore',
+  '.gitignore',
+  '.anvilignore',
+  // Legacy name retained so existing projects keep their ignore rules.
+  '.manicodeignore',
   // Legacy: respect ignore files created by pre-Anvil installs.
   '.codebuffignore',
 ] as const

package/vendor/@anvil/sdk/dist/index.cjs

@@ -34580,9 +34580,15 @@ var handleGlob = async (params) => {
 
 // ../common/src/constants/deepseek-direct.ts
 var DEEPSEEK_BASE_URL = "https://api.deepseek.com";
+var MANAGED_GATEWAY_URL = "https://tqolntrdmbbaptmxihtq.supabase.co/functions/v1/cli-agent";
 var DEFAULT_DIRECT_DEEPSEEK_MODEL = "deepseek-v4-pro";
 var getDirectDeepSeekApiKey = () => process.env.DEEPSEEK_API_KEY;
 var isDirectDeepSeekMode = () => Boolean(getDirectDeepSeekApiKey());
+var getManagedGatewayUrl = () => {
+  const explicit = process.env.ANVIL_GATEWAY_URL?.trim();
+  return (explicit || MANAGED_GATEWAY_URL).replace(/\/+$/, "");
+};
+var isManagedGatewayMode = () => Boolean(getManagedGatewayUrl());
 function remapModelForDirectDeepSeek(model) {
   const override = process.env.DEEPSEEK_MODEL;
   if (override)
@@ -39820,6 +39826,7 @@ async function loopAgentSteps(params) {
   let totalSteps = 0;
   let llmStepNumber = 0;
   let nResponses = undefined;
+  const isSimpleGreeting = (value) => typeof value === "string" && /^(hi|hey|hello|hiya|good morning|good afternoon|good evening)[!.? ]*$/i.test(value.trim());
   try {
     while (true) {
       totalSteps++;
@@ -39840,7 +39847,7 @@ async function loopAgentSteps(params) {
       const messagesWithStepPrompt = buildArray(...currentAgentState.messageHistory, stepPrompt && userMessage({
         content: stepPrompt
       }));
-      const estimateContextTokensLocally = () => countTokensMessages(messagesWithStepPrompt) + countTokens2(system) + countTokensJson(toolsForTokenCount);
+      const estimateContextTokensLocally = () => countTokensMessages(messagesWithStepPrompt) + countTokens2(system) + countTokensJson(isSimpleGreeting([...currentAgentState.messageHistory].reverse().find((message) => message.role === "user")?.content) ? [] : toolsForTokenCount);
       currentAgentState.contextTokenCount = estimateContextTokensLocally();
       if (agentTemplate.compactContext) {
         const compacted = maybeCompactHistory({
@@ -45416,7 +45423,7 @@ async function fetchWithRetry(url2, options, logger2) {
 }
 async function getUserInfoFromApiKey(params) {
   const { apiKey, fields, logger: logger2 } = params;
-  if (isDirectDeepSeekMode()) {
+  if (isDirectDeepSeekMode() || isManagedGatewayMode()) {
     const localUser = {
       id: "local-deepseek",
       email: "local@deepseek.local"
@@ -45538,7 +45545,7 @@ async function fetchAgentFromDatabase(params) {
 }
 async function startAgentRun(params) {
   const { apiKey, userId, agentId, ancestorRunIds, logger: logger2 } = params;
-  if (isDirectDeepSeekMode()) {
+  if (isDirectDeepSeekMode() || isManagedGatewayMode()) {
     return `local-${crypto.randomUUID()}`;
   }
   const url2 = new URL(`/api/v1/agent-runs`, getWebsiteUrl());
@@ -45598,7 +45605,7 @@ async function finishAgentRun(params) {
   } = params;
   const steps = pendingAgentSteps.get(runId) ?? [];
   pendingAgentSteps.delete(runId);
-  if (isDirectDeepSeekMode()) {
+  if (isDirectDeepSeekMode() || isManagedGatewayMode()) {
     return;
   }
   const url2 = new URL(`/api/v1/agent-runs`, getWebsiteUrl());
@@ -47583,8 +47590,13 @@ function fetchWithRetryableNetworkErrors(...args) {
 function getModelForRequest({
   apiKey,
   model,
-  userId
+  userId,
+  agentId
 }) {
+  const gatewayUrl = getManagedGatewayUrl();
+  if (gatewayUrl) {
+    return getGatewayModel({ apiKey, model, userId, agentId, gatewayUrl });
+  }
   const directDeepSeekApiKey = getDirectDeepSeekApiKey();
   if (directDeepSeekApiKey) {
     return getDeepSeekDirectModel({
@@ -47643,6 +47655,27 @@ function getModelForRequest({
     supportsStructuredOutputs: true
   });
 }
+function getGatewayModel({
+  apiKey,
+  model,
+  userId,
+  agentId,
+  gatewayUrl
+}) {
+  return new OpenAICompatibleChatLanguageModel(model, {
+    provider: "anvil",
+    url: ({ path: endpoint }) => `${gatewayUrl}${endpoint.startsWith("/") ? endpoint : `/${endpoint}`}`,
+    headers: () => ({
+      Authorization: `Bearer ${apiKey}`,
+      "user-agent": `ai-sdk/openai-compatible/${VERSION2}/anvil-cli`,
+      ...agentId ? { "x-anvil-agent": agentId } : {},
+      ...userId ? { [ANVIL_ACTING_USER_HEADER]: userId } : {}
+    }),
+    supportsStructuredOutputs: false,
+    fetch: fetchWithRetryableNetworkErrors,
+    includeUsage: undefined
+  });
+}
 function getDeepSeekDirectModel({
   apiKey,
   model
@@ -47804,7 +47837,8 @@ async function* promptAiSdkStream(params) {
   const aiSDKModel = getModelForRequest({
     apiKey: params.apiKey,
     model: params.model,
-    userId: params.userId
+    userId: params.userId,
+    agentId: params.agentId
   });
   const response = import_ai3.streamText({
     ...streamParams,
@@ -48128,7 +48162,8 @@ async function promptAiSdk(params) {
   const aiSDKModel = getModelForRequest({
     apiKey: params.apiKey,
     model: params.model,
-    userId: params.userId
+    userId: params.userId,
+    agentId: params.agentId
   });
   const response = await import_ai3.generateText({
     ...params,
@@ -48181,7 +48216,8 @@ async function promptAiSdkStructured(params) {
   const aiSDKModel = getModelForRequest({
     apiKey: params.apiKey,
     model: params.model,
-    userId: params.userId
+    userId: params.userId,
+    agentId: params.agentId
   });
   const response = await import_ai3.generateText({
     ...params,
@@ -52127,7 +52163,7 @@ var userFromJson = (json) => {
 };
 var getConfigDir = (clientEnv = env) => {
   const envSuffix = clientEnv.NEXT_PUBLIC_CB_ENVIRONMENT && clientEnv.NEXT_PUBLIC_CB_ENVIRONMENT !== "prod" ? `-${clientEnv.NEXT_PUBLIC_CB_ENVIRONMENT}` : "";
-  return import_node_path2.default.join(import_os5.default.homedir(), ".config", `manicode${envSuffix}`);
+  return import_node_path2.default.join(import_os5.default.homedir(), ".config", `anvil${envSuffix}`);
 };
 var getCredentialsPath = (clientEnv = env) => {
   return import_node_path2.default.join(getConfigDir(clientEnv), "credentials.json");
@@ -52293,5 +52329,5 @@ function setTreeSitterWasmPath2(wasmPath) {
   setTreeSitterWasmPath(wasmPath);
 }
 
-//# debugId=68626CF23310DED964756E2164756E21
+//# debugId=5C15E7A7E1B3AA1764756E2164756E21
 //# sourceMappingURL=index.cjs.map

package/vendor/@anvil/sdk/dist/index.mjs

@@ -34497,9 +34497,15 @@ var handleGlob = async (params) => {
 
 // ../common/src/constants/deepseek-direct.ts
 var DEEPSEEK_BASE_URL = "https://api.deepseek.com";
+var MANAGED_GATEWAY_URL = "https://tqolntrdmbbaptmxihtq.supabase.co/functions/v1/cli-agent";
 var DEFAULT_DIRECT_DEEPSEEK_MODEL = "deepseek-v4-pro";
 var getDirectDeepSeekApiKey = () => process.env.DEEPSEEK_API_KEY;
 var isDirectDeepSeekMode = () => Boolean(getDirectDeepSeekApiKey());
+var getManagedGatewayUrl = () => {
+  const explicit = process.env.ANVIL_GATEWAY_URL?.trim();
+  return (explicit || MANAGED_GATEWAY_URL).replace(/\/+$/, "");
+};
+var isManagedGatewayMode = () => Boolean(getManagedGatewayUrl());
 function remapModelForDirectDeepSeek(model) {
   const override = process.env.DEEPSEEK_MODEL;
   if (override)
@@ -39737,6 +39743,7 @@ async function loopAgentSteps(params) {
   let totalSteps = 0;
   let llmStepNumber = 0;
   let nResponses = undefined;
+  const isSimpleGreeting = (value) => typeof value === "string" && /^(hi|hey|hello|hiya|good morning|good afternoon|good evening)[!.? ]*$/i.test(value.trim());
   try {
     while (true) {
       totalSteps++;
@@ -39757,7 +39764,7 @@ async function loopAgentSteps(params) {
       const messagesWithStepPrompt = buildArray(...currentAgentState.messageHistory, stepPrompt && userMessage({
         content: stepPrompt
       }));
-      const estimateContextTokensLocally = () => countTokensMessages(messagesWithStepPrompt) + countTokens2(system) + countTokensJson(toolsForTokenCount);
+      const estimateContextTokensLocally = () => countTokensMessages(messagesWithStepPrompt) + countTokens2(system) + countTokensJson(isSimpleGreeting([...currentAgentState.messageHistory].reverse().find((message) => message.role === "user")?.content) ? [] : toolsForTokenCount);
       currentAgentState.contextTokenCount = estimateContextTokensLocally();
       if (agentTemplate.compactContext) {
         const compacted = maybeCompactHistory({
@@ -45333,7 +45340,7 @@ async function fetchWithRetry(url2, options, logger2) {
 }
 async function getUserInfoFromApiKey(params) {
   const { apiKey, fields, logger: logger2 } = params;
-  if (isDirectDeepSeekMode()) {
+  if (isDirectDeepSeekMode() || isManagedGatewayMode()) {
     const localUser = {
       id: "local-deepseek",
       email: "local@deepseek.local"
@@ -45455,7 +45462,7 @@ async function fetchAgentFromDatabase(params) {
 }
 async function startAgentRun(params) {
   const { apiKey, userId, agentId, ancestorRunIds, logger: logger2 } = params;
-  if (isDirectDeepSeekMode()) {
+  if (isDirectDeepSeekMode() || isManagedGatewayMode()) {
     return `local-${crypto.randomUUID()}`;
   }
   const url2 = new URL(`/api/v1/agent-runs`, getWebsiteUrl());
@@ -45515,7 +45522,7 @@ async function finishAgentRun(params) {
   } = params;
   const steps = pendingAgentSteps.get(runId) ?? [];
   pendingAgentSteps.delete(runId);
-  if (isDirectDeepSeekMode()) {
+  if (isDirectDeepSeekMode() || isManagedGatewayMode()) {
     return;
   }
   const url2 = new URL(`/api/v1/agent-runs`, getWebsiteUrl());
@@ -47511,8 +47518,13 @@ function fetchWithRetryableNetworkErrors(...args) {
 function getModelForRequest({
   apiKey,
   model,
-  userId
+  userId,
+  agentId
 }) {
+  const gatewayUrl = getManagedGatewayUrl();
+  if (gatewayUrl) {
+    return getGatewayModel({ apiKey, model, userId, agentId, gatewayUrl });
+  }
   const directDeepSeekApiKey = getDirectDeepSeekApiKey();
   if (directDeepSeekApiKey) {
     return getDeepSeekDirectModel({
@@ -47571,6 +47583,27 @@ function getModelForRequest({
     supportsStructuredOutputs: true
   });
 }
+function getGatewayModel({
+  apiKey,
+  model,
+  userId,
+  agentId,
+  gatewayUrl
+}) {
+  return new OpenAICompatibleChatLanguageModel(model, {
+    provider: "anvil",
+    url: ({ path: endpoint }) => `${gatewayUrl}${endpoint.startsWith("/") ? endpoint : `/${endpoint}`}`,
+    headers: () => ({
+      Authorization: `Bearer ${apiKey}`,
+      "user-agent": `ai-sdk/openai-compatible/${VERSION2}/anvil-cli`,
+      ...agentId ? { "x-anvil-agent": agentId } : {},
+      ...userId ? { [ANVIL_ACTING_USER_HEADER]: userId } : {}
+    }),
+    supportsStructuredOutputs: false,
+    fetch: fetchWithRetryableNetworkErrors,
+    includeUsage: undefined
+  });
+}
 function getDeepSeekDirectModel({
   apiKey,
   model
@@ -47732,7 +47765,8 @@ async function* promptAiSdkStream(params) {
   const aiSDKModel = getModelForRequest({
     apiKey: params.apiKey,
     model: params.model,
-    userId: params.userId
+    userId: params.userId,
+    agentId: params.agentId
   });
   const response = streamText({
     ...streamParams,
@@ -48056,7 +48090,8 @@ async function promptAiSdk(params) {
   const aiSDKModel = getModelForRequest({
     apiKey: params.apiKey,
     model: params.model,
-    userId: params.userId
+    userId: params.userId,
+    agentId: params.agentId
   });
   const response = await generateText({
     ...params,
@@ -48109,7 +48144,8 @@ async function promptAiSdkStructured(params) {
   const aiSDKModel = getModelForRequest({
     apiKey: params.apiKey,
     model: params.model,
-    userId: params.userId
+    userId: params.userId,
+    agentId: params.agentId
   });
   const response = await generateText({
     ...params,
@@ -52055,7 +52091,7 @@ var userFromJson = (json) => {
 };
 var getConfigDir = (clientEnv = env) => {
   const envSuffix = clientEnv.NEXT_PUBLIC_CB_ENVIRONMENT && clientEnv.NEXT_PUBLIC_CB_ENVIRONMENT !== "prod" ? `-${clientEnv.NEXT_PUBLIC_CB_ENVIRONMENT}` : "";
-  return path22.join(os8.homedir(), ".config", `manicode${envSuffix}`);
+  return path22.join(os8.homedir(), ".config", `anvil${envSuffix}`);
 };
 var getCredentialsPath = (clientEnv = env) => {
   return path22.join(getConfigDir(clientEnv), "credentials.json");
@@ -52286,5 +52322,5 @@ export {
   ANVIL_BINARY
 };
 
-//# debugId=E0C66561A06A653864756E2164756E21
+//# debugId=B50622D584101C2364756E2164756E21
 //# sourceMappingURL=index.mjs.map

package/src/commands/__tests__/anvil-command-aliases.test.ts

@@ -1,56 +0,0 @@
-import { describe, expect, test } from 'bun:test'
-
-describe('anvil command aliases', () => {
-  test('/model aliases /end-session in anvil', () => {
-    const slashCommandsUrl = new URL(
-      '../../data/slash-commands.ts',
-      import.meta.url,
-    ).href
-    const commandRegistryUrl = new URL(
-      '../command-registry.ts',
-      import.meta.url,
-    ).href
-
-    const result = Bun.spawnSync({
-      cmd: [
-        'bun',
-        '--eval',
-        `
-          import { SLASH_COMMANDS } from ${JSON.stringify(slashCommandsUrl)}
-          import { findCommand } from ${JSON.stringify(commandRegistryUrl)}
-
-          const endSession = SLASH_COMMANDS.find((cmd) => cmd.id === 'end-session')
-          if (!endSession) throw new Error('end-session slash command missing')
-          if (!endSession.aliases?.includes('model')) {
-            throw new Error('end-session slash command is missing model alias')
-          }
-
-          const modelCommand = findCommand('model')
-          if (!modelCommand) throw new Error('model command alias missing')
-          if (modelCommand.name !== 'end-session') {
-            throw new Error('model alias did not resolve to end-session')
-          }
-        `,
-      ],
-      cwd: process.cwd(),
-      env: {
-        ...process.env,
-        ANVIL_MODE: 'true',
-        NODE_ENV: 'test',
-        NEXT_PUBLIC_CB_ENVIRONMENT: 'test',
-        NEXT_PUBLIC_ANVIL_APP_URL: 'https://app.codebuff.test',
-        NEXT_PUBLIC_SUPPORT_EMAIL: 'support@codebuff.test',
-        NEXT_PUBLIC_POSTHOG_API_KEY: 'phc_test_key',
-        NEXT_PUBLIC_POSTHOG_HOST_URL: 'https://posthog.codebuff.test',
-        NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY: 'pk_test_123',
-        NEXT_PUBLIC_STRIPE_CUSTOMER_PORTAL: 'https://stripe.codebuff.test',
-        NEXT_PUBLIC_WEB_PORT: '3000',
-      },
-      stderr: 'pipe',
-      stdout: 'pipe',
-    })
-
-    const stderr = new TextDecoder().decode(result.stderr)
-    expect(result.exitCode, stderr).toBe(0)
-  }, 15_000)
-})