@assertrx/dino 1.0.0 → 1.0.2

package/README.md

@@ -291,3 +291,155 @@ npx @mablhq/mabl-cli auth clear
 
 - `/mabl-auth` — Check mabl OAuth status, run `mabl auth login --auto` if needed, and start the mabl MCP server so the model can use the mabl tools.
 
+## Dino API Server
+
+Dino ships with a Fastify API server that exposes every prompt workflow as REST endpoints. This lets you trigger Dino prompts from CI pipelines, web UIs, or any HTTP client.
+
+### Quick start (fresh system)
+
+```bash
+# Windows — double-click or run:
+scripts\setup-dino-api.bat
+
+# macOS / Linux — run:
+chmod +x scripts/setup-dino-api.sh
+./scripts/setup-dino-api.sh
+```
+
+This single script:
+1. Checks that Node.js is installed
+2. Installs `pi` globally if missing
+3. Installs `@assertrx/dino` via `pi install` if missing
+4. Starts the API server on port 3000
+
+### Manual setup
+
+```bash
+# 1. Install pi (if not already installed)
+npm install -g @earendil-works/pi-coding-agent
+
+# 2. Install Dino via pi
+pi install npm:@assertrx/dino --approve
+
+# 3. Set an API key (any supported provider works)
+export ANTHROPIC_API_KEY=sk-ant-...
+# e.g. for OpenAI instead: export OPENAI_API_KEY=sk-...
+
+# 4. Start the server
+node ~/.pi/agent/npm/node_modules/@assertrx/dino/scripts/api-server.mjs
+```
+
+### Endpoints
+
+| Method | Path | Description |
+|--------|------|-------------|
+| `GET` | `/api/health` | Health check |
+| `GET` | `/api/providers` | List all providers with auth status and model counts |
+| `GET` | `/api/models` | List models available with current credentials (`?provider=<id>` to filter) |
+| `POST` | `/api/models` | List models for given credentials — body accepts `provider`+`apiKey` or `apiKeys` (validates the key and unlocks that provider's catalog) |
+| `GET` | `/api/prompts` | List all available prompts with parameters |
+| `GET` | `/api/prompts/:name` | Get raw markdown content of a prompt |
+| `POST` | `/api/prompts/:name` | **Execute** a prompt via the pi agent |
+
+### Providers, models & API keys
+
+The server supports every pi provider (Anthropic, OpenAI, Google, DeepSeek, Groq, Mistral, xAI, OpenRouter, and many more). Credentials can come from three places, in this order of precedence:
+
+1. **Per-request keys** — pass `apiKeys` (a map of provider → key) or `apiKey` (+ optional `provider`) in the POST body. These keys are scoped to that single request's session.
+2. **Environment variables** — any provider's standard env var (e.g. `ANTHROPIC_API_KEY`, `OPENAI_API_KEY`, `GEMINI_API_KEY`).
+3. **Stored credentials** — logins created via `pi /login` in `~/.pi/agent/auth.json`.
+
+Use `GET /api/providers` to discover which providers are configured and `GET /api/models` to list models available to the server right now.
+
+**Selecting a model:** pass `model` in the POST body as either `"provider/model-id"` (e.g. `"openai/gpt-5.2"`) or `{ "provider": "openai", "id": "gpt-5.2" }`. Without `model`, the session uses the default model resolution (configured provider defaults). Requesting a model whose provider has no credentials returns a clear error.
+
+### Prompt execution endpoints
+
+All POST bodies accept auth/model options, `cwd` (workspace directory, defaults to current), and `stream` (default: `true` for SSE):
+
+| Body param | Description |
+|------------|-------------|
+| `apiKeys` | Map of provider → API key, e.g. `{"anthropic": "sk-...", "openai": "sk-..."}` |
+| `apiKey` | Single API key. Pair with `provider` to target one explicitly; otherwise applied to the first available provider (anthropic fallback) |
+| `provider` | Provider id (e.g. `"openai"`) to pair with a single `apiKey` |
+| `model` | Model selection: `"provider/model-id"`, `"model-id"`, or `{"provider": ..., "id": ...}` |
+
+| Prompt name | Required params |
+|-------------|---------------|
+| `setup-playwright` | _none_ |
+| `create-pr` | _none_ |
+| `generate-pom-from-url` | `url` |
+| `generate-pom-from-url-cli` | `url` |
+| `generate-bdd-from-url` | `url` |
+| `generate-spec-from-feature` | `url`, `featureFile`, `pomDir` |
+| `heal-playwright-failures` | _none_ (optional: `testPattern`, `maxIterations`) |
+
+### Example requests
+
+```bash
+# List all prompts
+curl http://localhost:3000/api/prompts
+
+# Discover providers and their auth status
+curl http://localhost:3000/api/providers
+
+# List models available to the server (optionally per provider)
+curl http://localhost:3000/api/models
+curl "http://localhost:3000/api/models?provider=anthropic"
+
+# Execute a prompt (SSE streaming, auth from env vars)
+curl -X POST http://localhost:3000/api/prompts/setup-playwright \
+  -H "Content-Type: application/json" \
+  -d '{"cwd": "/path/to/workspace"}'
+
+# Execute with a single provider key + model selection
+# (env: export OPENAI_API_KEY=sk-... then:)
+curl -X POST http://localhost:3000/api/prompts/setup-playwright \
+  -H "Content-Type: application/json" \
+  -d '{"cwd": "/path/to/workspace", "model": "openai/gpt-5.2"}'
+
+# Execute with multiple per-request API keys and an explicit model
+curl -X POST http://localhost:3000/api/prompts/setup-playwright \
+  -H "Content-Type: application/json" \
+  -d '{
+    "cwd": "/path/to/workspace",
+    "apiKeys": {"anthropic": "sk-ant-...", "openai": "sk-ov-..."},
+    "model": "anthropic/claude-sonnet-4-5"
+  }'
+
+# Execute with URL parameter (non-streaming JSON response)
+curl -X POST http://localhost:3000/api/prompts/generate-pom-from-url-cli \
+  -H "Content-Type: application/json" \
+  -d '{"url": "https://example.com", "outputDir": "tests/pom", "stream": false}'
+```
+
+### Response formats
+
+**SSE streaming** (`stream: true`, default):
+```
+event: start      → {"prompt": "..."}
+event: text       → {"delta": "..."}        # response tokens
+event: thinking   → {"delta": "..."}        # thinking output
+event: tool_start → {"tool": "bash"}        # tool execution started
+event: tool_end   → {"tool": "bash", ...}   # tool execution finished
+event: done       → {}                      # session complete
+event: error      → {"message": "..."}      # error
+```
+
+**Non-streaming** (`stream: false`):
+```json
+{
+  "prompt": "setup-playwright",
+  "response": "...full agent response text...",
+  "toolCalls": [{"name": "bash", "status": "success"}]
+}
+```
+
+### Environment variables
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `PORT` | `3000` | Server port |
+| `HOST` | `0.0.0.0` | Server host |
+| Provider env vars | — | Any provider's standard env var (e.g. `ANTHROPIC_API_KEY`, `OPENAI_API_KEY`, `GEMINI_API_KEY`); per-request `apiKeys`/`apiKey` override these |
+

package/package.json

@@ -1,12 +1,15 @@
 {
   "name": "@assertrx/dino",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "A friendly purple dinosaur pi package with a custom TUI header, theme, and Playwright skills.",
   "keywords": [
     "pi-package"
   ],
   "license": "MIT",
   "author": "",
+  "bin": {
+    "dino-api": "scripts/api-server.mjs"
+  },
   "files": [
     "extensions",
     "prompts",
@@ -16,15 +19,20 @@
     "scripts"
   ],
   "scripts": {
-    "start:all": "node scripts/start-dino.mjs",
-    "start:api": "node scripts/start-dino.mjs",
+    "start:all": "npm run start:api",
+    "start:api": "node scripts/api-server.mjs",
+    "start:api:dev": "node --watch scripts/api-server.mjs",
     "postinstall": "npx playwright install chromium"
   },
   "dependencies": {
+    "@earendil-works/pi-coding-agent": "*",
+    "@fastify/cors": "^11.3.0",
     "@mablhq/mabl-cli": "^2.127.20",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "@playwright/cli": "^0.1.18",
     "@playwright/mcp": "^0.0.79",
+    "fastify": "^5.2.1",
+    "pino-pretty": "^13.0.0",
     "typebox": "^1.1.38"
   },
   "peerDependencies": {

package/scripts/api-server.mjs

@@ -0,0 +1,507 @@
+#!/usr/bin/env node
+import Fastify from "fastify";
+import cors from "@fastify/cors";
+import {
+  createAgentSession,
+  ModelRuntime,
+  SessionManager,
+  DefaultResourceLoader,
+  getAgentDir,
+} from "@earendil-works/pi-coding-agent";
+import { readFile } from "node:fs/promises";
+import { resolve, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { existsSync } from "node:fs";
+
+// ── Resolve paths ──────────────────────────────────────────────────────────
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const PROMPTS_DIR = resolve(__dirname, "..", "prompts");
+const PACKAGE_ROOT = resolve(__dirname, "..");
+
+// ── Prompt registry ────────────────────────────────────────────────────────
+// Each entry maps a prompt name to its markdown file and expected body params.
+const PROMPT_REGISTRY = {
+  "setup-playwright": {
+    file: "setup-playwright.md",
+    params: [],
+    description: "Set up a vanilla Playwright project in the current workspace",
+  },
+  "create-pr": {
+    file: "create-pr.md",
+    params: [],
+    description: "Create a GitHub pull request for changes in the current workspace",
+  },
+  "generate-pom-from-url": {
+    file: "generate-pom-from-url.md",
+    params: [
+      { name: "url", required: true, description: "Target website URL" },
+      { name: "outputDir", required: false, description: "Output directory (default: tests/pom/)" },
+      { name: "authEnvFile", required: false, description: "Auth env file for login credentials" },
+    ],
+    description: "Generate Playwright POMs from a live URL using Playwright MCP bridge (fallback only)",
+  },
+  "generate-pom-from-url-cli": {
+    file: "generate-pom-from-url-cli.md",
+    params: [
+      { name: "url", required: true, description: "Target website URL" },
+      { name: "outputDir", required: false, description: "Output directory (default: tests/pom/)" },
+      { name: "authEnvFile", required: false, description: "Auth env file for login credentials" },
+    ],
+    description: "Generate Playwright POMs from a live URL using playwright-cli (preferred)",
+  },
+  "generate-bdd-from-url": {
+    file: "generate-bdd-from-url.md",
+    params: [
+      { name: "url", required: true, description: "Target website URL" },
+      { name: "outputDir", required: false, description: "Output directory (default: tests/features/)" },
+    ],
+    description: "Generate Gherkin BDD scenarios for a page by inspecting it with playwright-cli",
+  },
+  "generate-spec-from-feature": {
+    file: "generate-spec-from-feature.md",
+    params: [
+      { name: "url", required: true, description: "URL of the page under test" },
+      { name: "featureFile", required: true, description: "Path to the .feature file to implement" },
+      { name: "pomDir", required: true, description: "Directory containing existing POM .ts files" },
+      { name: "outputDir", required: false, description: "Output directory (default: tests/specs/)" },
+    ],
+    description: "Generate a Playwright test spec from a Gherkin feature file",
+  },
+  "heal-playwright-failures": {
+    file: "heal-playwright-failures.md",
+    params: [
+      { name: "testPattern", required: false, description: "Test file pattern to run (e.g., tests/login.spec.ts)" },
+      { name: "maxIterations", required: false, description: "Max auto-heal iterations (default: 3)" },
+    ],
+    description: "Detect, diagnose, and auto-heal failed Playwright tests",
+  },
+};
+
+// ── Helpers ────────────────────────────────────────────────────────────────
+
+/** Load a prompt template and substitute $1..$N positional arguments. */
+async function loadPrompt(name, params = {}) {
+  const entry = PROMPT_REGISTRY[name];
+  if (!entry) throw new Error(`Unknown prompt: ${name}`);
+
+  const filePath = resolve(PROMPTS_DIR, entry.file);
+  if (!existsSync(filePath)) throw new Error(`Prompt file not found: ${entry.file}`);
+
+  let content = await readFile(filePath, "utf-8");
+
+  // Build positional arg array from ordered entry.params
+  const positional = entry.params.map((p) => params[p.name] ?? "");
+  // Substitute $1, $2, $3, $4, ${1:-default}, ${2:-default}, etc.
+  content = content.replace(
+    /\$\{?(\d+)(?:\s*:-\s*([^}]*))?\}?/g,
+    (_, idx, fallback) => positional[parseInt(idx) - 1] || fallback || ""
+  );
+
+  return content;
+}
+
+/**
+ * Create a fresh ModelRuntime.
+ *
+ * Runtime API keys set on this instance are isolated to the current request.
+ */
+async function createModelRuntime() {
+  return ModelRuntime.create({
+    allowModelNetwork: false,
+  });
+}
+
+/**
+ * Resolve runtime API keys from the request body.
+ *
+ * Supports three styles:
+ *   - `apiKeys`: { "anthropic": "...", "openai": "..." }
+ *   - `provider` + `apiKey`: set one key for an explicit provider
+ *   - `apiKey` only (legacy): set key for the first available provider, falling back to anthropic
+ */
+function resolveApiKeys(body, availableModels) {
+  const keys = [];
+
+  if (body.apiKeys && typeof body.apiKeys === "object") {
+    for (const [providerId, key] of Object.entries(body.apiKeys)) {
+      if (typeof key === "string" && key.trim().length > 0) {
+        keys.push({ provider: providerId, key });
+      }
+    }
+    return keys;
+  }
+
+  if (body.apiKey && typeof body.apiKey === "string" && body.apiKey.trim().length > 0) {
+    const provider = body.provider && typeof body.provider === "string"
+      ? body.provider
+      : availableModels.length > 0
+        ? availableModels[0].provider
+        : "anthropic";
+    keys.push({ provider, key: body.apiKey });
+  }
+
+  return keys;
+}
+
+/**
+ * Resolve a model object from the request body.
+ *
+ * Accepts:
+ *   - string: "anthropic/claude-opus-4-5" or "claude-opus-4-5"
+ *   - object: { provider: "anthropic", id: "claude-opus-4-5" }
+ *
+ * If no model is requested, returns undefined so the agent picks a default.
+ */
+function resolveModel(modelRuntime, modelSelector, configuredProviders) {
+  if (!modelSelector) return undefined;
+
+  let providerId;
+  let modelId;
+
+  if (typeof modelSelector === "string") {
+    const parts = modelSelector.split("/");
+    if (parts.length === 2) {
+      [providerId, modelId] = parts;
+    } else {
+      modelId = modelSelector;
+      providerId = configuredProviders[0] ?? "anthropic";
+    }
+  } else if (typeof modelSelector === "object") {
+    providerId = modelSelector.provider;
+    modelId = modelSelector.id ?? modelSelector.modelId;
+  }
+
+  if (!providerId || !modelId) {
+    throw new Error(`Invalid model selector: ${JSON.stringify(modelSelector)}`);
+  }
+
+  const model = modelRuntime.getModel(providerId, modelId);
+  if (!model) {
+    throw new Error(`Model not found: ${providerId}/${modelId}`);
+  }
+
+  if (!modelRuntime.hasConfiguredAuth(providerId)) {
+    throw new Error(
+      `Provider "${providerId}" is not configured with an API key. ` +
+        `Provide an apiKey or apiKeys for this provider.`
+    );
+  }
+
+  return model;
+}
+
+/** Create a single-use pi agent session. */
+async function createSession({ cwd, apiKey, apiKeys, provider, model: modelSelector }) {
+  const modelRuntime = await createModelRuntime();
+
+  // Resolve keys before selecting a model so we know which providers are configured.
+  const availableBeforeKeys = modelRuntime.getAvailableSnapshot();
+  const keysToSet = resolveApiKeys({ apiKey, apiKeys, provider }, availableBeforeKeys);
+
+  // Set all runtime API keys in parallel.
+  await Promise.all(
+    keysToSet.map(({ provider: providerId, key }) =>
+      modelRuntime.setRuntimeApiKey(providerId, key).catch((err) => {
+        throw new Error(`Failed to set API key for ${providerId}: ${err.message}`);
+      })
+    )
+  );
+
+  // Refresh availability after keys are set so the model picker sees configured providers.
+  await modelRuntime.getAvailable();
+
+  const configuredProviders = keysToSet.map((entry) => entry.provider);
+  const model = resolveModel(modelRuntime, modelSelector, configuredProviders);
+
+  const agentDir = getAgentDir();
+
+  const loader = new DefaultResourceLoader({
+    cwd,
+    agentDir,
+  });
+  await loader.reload();
+
+  const { session } = await createAgentSession({
+    cwd,
+    agentDir,
+    modelRuntime,
+    resourceLoader: loader,
+    sessionManager: SessionManager.inMemory(),
+    ...(model ? { model } : {}),
+  });
+
+  return session;
+}
+
+// ── Fastify app ────────────────────────────────────────────────────────────
+const app = Fastify({ logger: { level: "info" } });
+
+// Register CORS for browser clients
+await app.register(cors, { origin: true, credentials: true });
+
+// Graceful shutdown
+const shutdown = async () => {
+  app.log.info("Shutting down...");
+  await app.close();
+  process.exit(0);
+};
+process.on("SIGINT", shutdown);
+process.on("SIGTERM", shutdown);
+
+// Health check
+app.get("/api/health", async () => ({ status: "ok", package: "@assertrx/dino" }));
+
+// List all available prompts
+app.get("/api/prompts", async () => {
+  const prompts = Object.entries(PROMPT_REGISTRY).map(([name, entry]) => ({
+    name,
+    description: entry.description,
+    params: entry.params,
+    endpoint: `/api/prompts/${name}`,
+  }));
+  return { prompts };
+});
+
+// Get prompt details (raw content)
+app.get("/api/prompts/:name", async (request, reply) => {
+  const { name } = request.params;
+  const entry = PROMPT_REGISTRY[name];
+  if (!entry) {
+    reply.code(404);
+    return { error: `Prompt not found: ${name}` };
+  }
+
+  const content = await readFile(resolve(PROMPTS_DIR, entry.file), "utf-8");
+  return {
+    name,
+    description: entry.description,
+    params: entry.params,
+    content,
+  };
+});
+
+// List providers and their auth/configuration status
+app.get("/api/providers", async (request, reply) => {
+  try {
+    const modelRuntime = await createModelRuntime();
+    const providers = modelRuntime.getProviders().map((provider) => ({
+      id: provider.id,
+      name: provider.name ?? provider.id,
+      authStatus: modelRuntime.getProviderAuthStatus(provider.id),
+      modelCount: modelRuntime.getModels(provider.id).length,
+    }));
+    return { providers };
+  } catch (err) {
+    reply.code(500);
+    return { error: `Failed to list providers: ${err.message}` };
+  }
+});
+
+// List available models. Optionally filter with ?provider=<id>.
+app.get("/api/models", async (request, reply) => {
+  try {
+    const { provider } = request.query;
+    const modelRuntime = await createModelRuntime();
+    await modelRuntime.getAvailable();
+    const models = modelRuntime.getAvailableSnapshot();
+    const filtered = provider
+      ? models.filter((model) => model.provider === provider)
+      : models;
+    return {
+      models: filtered.map((model) => ({
+        provider: model.provider,
+        id: model.id,
+        name: model.name ?? model.id,
+        thinking: model.thinking,
+      })),
+    };
+  } catch (err) {
+    reply.code(500);
+    return { error: `Failed to list models: ${err.message}` };
+  }
+});
+
+// List models available for the provided credentials (per-request keys).
+// Accepts provider+apiKey or an apiKeys map; without keys, lists models from
+// env/stored credentials. Used by clients to validate a key and pick a model.
+app.post("/api/models", async (request, reply) => {
+  try {
+    const { provider, apiKey, apiKeys } = request.body || {};
+    const modelRuntime = await createModelRuntime();
+
+    const availableBeforeKeys = modelRuntime.getAvailableSnapshot();
+    const keysToSet = resolveApiKeys({ provider, apiKey, apiKeys }, availableBeforeKeys);
+
+    await Promise.all(
+      keysToSet.map(({ provider: providerId, key }) =>
+        modelRuntime.setRuntimeApiKey(providerId, key).catch((err) => {
+          throw new Error(`Failed to set API key for ${providerId}: ${err.message}`);
+        })
+      )
+    );
+
+    await modelRuntime.getAvailable();
+
+    let models = modelRuntime.getAvailableSnapshot();
+    if (provider) {
+      models = models.filter((model) => model.provider === provider);
+    }
+
+    return {
+      providers: [...new Set(keysToSet.map((entry) => entry.provider))],
+      models: models.map((model) => ({
+        provider: model.provider,
+        id: model.id,
+        name: model.name ?? model.id,
+        thinking: model.thinking,
+      })),
+    };
+  } catch (err) {
+    reply.code(500);
+    return { error: `Failed to list models: ${err.message}` };
+  }
+});
+
+// Execute a prompt (SSE streaming)
+app.post("/api/prompts/:name", async (request, reply) => {
+  const { name } = request.params;
+  const entry = PROMPT_REGISTRY[name];
+  if (!entry) {
+    reply.code(404);
+    return { error: `Prompt not found: ${name}` };
+  }
+
+  const {
+    apiKey,
+    apiKeys,
+    provider,
+    model,
+    cwd = process.cwd(),
+    stream = true,
+    ...params
+  } = request.body || {};
+
+  // Validate required params
+  for (const p of entry.params) {
+    if (p.required && !params[p.name]) {
+      reply.code(400);
+      return { error: `Missing required parameter: ${p.name}` };
+    }
+  }
+
+  // Build the prompt
+  let promptContent;
+  try {
+    promptContent = await loadPrompt(name, params);
+  } catch (err) {
+    reply.code(500);
+    return { error: `Failed to load prompt: ${err.message}` };
+  }
+
+  // Create session
+  let session;
+  try {
+    session = await createSession({
+      cwd: resolve(cwd),
+      apiKey,
+      apiKeys,
+      provider,
+      model,
+    });
+  } catch (err) {
+    reply.code(500);
+    return { error: `Failed to create agent session: ${err.message}` };
+  }
+
+  if (!stream) {
+    // ── Non-streaming: collect full response ──────────────────────────────
+    const messages = [];
+    const toolCalls = [];
+
+    session.subscribe((event) => {
+      if (event.type === "message_update") {
+        if (event.assistantMessageEvent.type === "text_delta") {
+          messages.push(event.assistantMessageEvent.delta);
+        }
+      } else if (event.type === "tool_execution_start") {
+        toolCalls.push({ name: event.toolName, status: "started" });
+      } else if (event.type === "tool_execution_end") {
+        const last = toolCalls[toolCalls.length - 1];
+        if (last) last.status = event.isError ? "error" : "success";
+      }
+    });
+
+    await session.prompt(promptContent);
+
+    return {
+      prompt: name,
+      response: messages.join(""),
+      toolCalls,
+    };
+  }
+
+  // ── Streaming SSE ──────────────────────────────────────────────────────
+  reply.raw.writeHead(200, {
+    "Content-Type": "text/event-stream",
+    "Cache-Control": "no-cache",
+    Connection: "keep-alive",
+    "X-Accel-Buffering": "no",
+  });
+
+  const sendSSE = (event, data) => {
+    reply.raw.write(`event: ${event}\ndata: ${JSON.stringify(data)}\n\n`);
+  };
+
+  sendSSE("start", { prompt: name });
+
+  session.subscribe((event) => {
+    switch (event.type) {
+      case "message_update":
+        if (event.assistantMessageEvent.type === "text_delta") {
+          sendSSE("text", { delta: event.assistantMessageEvent.delta });
+        } else if (event.assistantMessageEvent.type === "thinking_delta") {
+          sendSSE("thinking", { delta: event.assistantMessageEvent.delta });
+        }
+        break;
+
+      case "tool_execution_start":
+        sendSSE("tool_start", { tool: event.toolName });
+        break;
+
+      case "tool_execution_update":
+        sendSSE("tool_output", { tool: event.toolName, output: event.output });
+        break;
+
+      case "tool_execution_end":
+        sendSSE("tool_end", { tool: event.toolName, error: event.isError });
+        break;
+
+      case "agent_end":
+        sendSSE("done", {});
+        reply.raw.end();
+        break;
+    }
+  });
+
+  try {
+    await session.prompt(promptContent);
+  } catch (err) {
+    sendSSE("error", { message: err.message });
+    reply.raw.end();
+  }
+});
+
+// ── Start server ───────────────────────────────────────────────────────────
+const PORT = parseInt(process.env.PORT || "3000", 10);
+const HOST = process.env.HOST || "0.0.0.0";
+
+try {
+  await app.listen({ port: PORT, host: HOST });
+  console.log(`🦕 Dino API server running at http://${HOST}:${PORT}`);
+  console.log(`   Prompts: http://${HOST}:${PORT}/api/prompts`);
+  console.log(`   Providers: http://${HOST}:${PORT}/api/providers`);
+  console.log(`   Models: http://${HOST}:${PORT}/api/models`);
+} catch (err) {
+  app.log.error(err);
+  process.exit(1);
+}

package/scripts/setup-dino-api.bat

@@ -0,0 +1,101 @@
+@echo off
+setlocal enabledelayedexpansion
+
+echo ============================================
+echo      Dino API Server - Setup ^& Start
+echo ============================================
+echo.
+
+:: ── 1. Check Node.js ──────────────────────────────────────────────────
+echo [1/4] Checking Node.js...
+where node >nul 2>&1
+if !ERRORLEVEL! NEQ 0 (
+    echo ERROR: Node.js is not installed.
+    echo Please install Node.js from https://nodejs.org/ and re-run this script.
+    pause
+    exit /b 1
+)
+for /f "tokens=*" %%v in ('node -v') do echo           Found Node.js %%v
+
+:: ── 2. Install pi (if missing) ────────────────────────────────────────
+echo [2/4] Checking pi CLI...
+where pi >nul 2>&1
+if !ERRORLEVEL! EQU 0 (
+    for /f "tokens=*" %%v in ('pi --version 2^>^&1') do echo           Found pi %%v
+) else (
+    echo           Installing pi...
+    call npm install -g @earendil-works/pi-coding-agent
+    if !ERRORLEVEL! NEQ 0 (
+        echo ERROR: Failed to install pi.
+        pause
+        exit /b 1
+    )
+    echo           pi installed successfully.
+)
+
+:: ── 3. Install Dino via pi (if missing) ───────────────────────────────
+echo [3/4] Checking Dino package...
+set "DINO_DIR=%USERPROFILE%\.pi\agent\npm\node_modules\@assertrx\dino"
+if not exist "%DINO_DIR%" (
+    echo           Installing @assertrx/dino via pi...
+    call pi install npm:@assertrx/dino --approve
+    if !ERRORLEVEL! NEQ 0 (
+        echo ERROR: Failed to install Dino package.
+        pause
+        exit /b 1
+    )
+    echo           Dino package installed.
+) else (
+    echo           Dino already installed at %DINO_DIR%
+)
+
+:: ── 4. Start server ───────────────────────────────────────────────────
+echo [4/4] Starting Dino API server...
+echo.
+
+:: Defaults — override via env vars
+if "%PORT%"=="" set PORT=3000
+if "%HOST%"=="" set HOST=0.0.0.0
+
+echo           Port: %PORT%
+echo           Host: %HOST%
+echo.
+
+:: Use ANTHROPIC_API_KEY from env if set
+if defined ANTHROPIC_API_KEY (
+    echo           API key: loaded from ANTHROPIC_API_KEY
+) else (
+    echo           WARNING: No ANTHROPIC_API_KEY set. Set it or pass apiKey in request body.
+)
+
+echo.
+echo           Endpoints:
+echo             GET  http://%HOST%:%PORT%/api/health
+echo             GET  http://%HOST%:%PORT%/api/prompts
+echo             POST http://%HOST%:%PORT%/api/prompts/:name
+echo.
+echo ============================================
+echo.
+
+:: The published npm package may not include api-server.mjs, so fall back
+:: to the local source copy when this script is run from the Dino repo.
+set "LOCAL_API=%~dp0..\scripts\api-server.mjs"
+set "INSTALLED_API=%DINO_DIR%\scripts\api-server.mjs"
+
+if exist "%INSTALLED_API%" (
+    echo           Using installed api-server.mjs
+    node "%INSTALLED_API%"
+) else if exist "%LOCAL_API%" (
+    echo           Installed api-server.mjs not found.
+    echo           Falling back to local source: %LOCAL_API%
+    node "%LOCAL_API%"
+) else (
+    echo ERROR: api-server.mjs not found at either of the following locations:
+    echo   %INSTALLED_API%
+    echo   %LOCAL_API%
+    echo.
+    echo The published @assertrx/dino package appears to be missing api-server.mjs.
+    echo Run this script from the Dino source repository, or republish the package.
+    pause
+    exit /b 1
+)

package/scripts/setup-dino-api.sh

@@ -0,0 +1,64 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+echo "============================================"
+echo "   Dino API Server - Setup & Start"
+echo "============================================"
+echo ""
+
+# ── 1. Check Node.js ──────────────────────────────────────────────────
+echo "[1/4] Checking Node.js..."
+if ! command -v node &>/dev/null; then
+    echo "ERROR: Node.js is not installed."
+    echo "Please install Node.js from https://nodejs.org/ and re-run this script."
+    exit 1
+fi
+echo "       Found Node.js $(node -v)"
+
+# ── 2. Install pi (if missing) ────────────────────────────────────────
+echo "[2/4] Checking pi CLI..."
+if command -v pi &>/dev/null; then
+    echo "       Found pi $(pi --version 2>&1 || echo '(unknown version)')"
+else
+    echo "       Installing pi..."
+    npm install -g @earendil-works/pi-coding-agent
+    echo "       pi installed successfully."
+fi
+
+# ── 3. Install Dino via pi (if missing) ───────────────────────────────
+echo "[3/4] Checking Dino package..."
+DINO_DIR="${HOME}/.pi/agent/npm/node_modules/@assertrx/dino"
+if [ ! -d "${DINO_DIR}" ]; then
+    echo "       Installing @assertrx/dino via pi..."
+    pi install "npm:@assertrx/dino" --approve
+    echo "       Dino package installed."
+else
+    echo "       Dino already installed at ${DINO_DIR}"
+fi
+
+# ── 4. Start server ───────────────────────────────────────────────────
+echo "[4/4] Starting Dino API server..."
+echo ""
+
+PORT="${PORT:-3000}"
+HOST="${HOST:-0.0.0.0}"
+
+echo "       Port: ${PORT}"
+echo "       Host: ${HOST}"
+
+if [ -n "${ANTHROPIC_API_KEY:-}" ]; then
+    echo "       API key: loaded from ANTHROPIC_API_KEY"
+else
+    echo "       WARNING: No ANTHROPIC_API_KEY set. Set it or pass apiKey in request body."
+fi
+
+echo ""
+echo "       Endpoints:"
+echo "         GET  http://${HOST}:${PORT}/api/health"
+echo "         GET  http://${HOST}:${PORT}/api/prompts"
+echo "         POST http://${HOST}:${PORT}/api/prompts/:name"
+echo ""
+echo "============================================"
+echo ""
+
+exec node "${DINO_DIR}/scripts/api-server.mjs"

package/scripts/start-dino-server.bat

@@ -0,0 +1,31 @@
+@echo off
+:: Quick start for Dino API server (assumes pi + Dino already installed)
+:: Usage: start-dino-server.bat
+
+set "DINO_DIR=%USERPROFILE%\.pi\agent\npm\node_modules\@assertrx\dino"
+
+if not exist "%DINO_DIR%" (
+    echo Dino package not found at %DINO_DIR%
+    echo Run setup-dino-api.bat first to install.
+    exit /b 1
+)
+
+echo Starting Dino API server on port %PORT% (default: 3000)...
+
+:: The published npm package may not include api-server.mjs, so fall back
+:: to the local source copy when this script is run from the Dino repo.
+set "LOCAL_API=%~dp0..\scripts\api-server.mjs"
+set "INSTALLED_API=%DINO_DIR%\scripts\api-server.mjs"
+
+if exist "%INSTALLED_API%" (
+    node "%INSTALLED_API%"
+) else if exist "%LOCAL_API%" (
+    echo Installed api-server.mjs not found. Using local source: %LOCAL_API%
+    node "%LOCAL_API%"
+) else (
+    echo ERROR: api-server.mjs not found at either of the following locations:
+    echo   %INSTALLED_API%
+    echo   %LOCAL_API%
+    pause
+    exit /b 1
+)

package/scripts/start-dino-server.sh

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+# Quick start for Dino API server (assumes pi + Dino already installed)
+# Usage: ./start-dino-server.sh
+
+set -euo pipefail
+
+DINO_DIR="${HOME}/.pi/agent/npm/node_modules/@assertrx/dino"
+
+if [ ! -d "${DINO_DIR}" ]; then
+    echo "Dino package not found at ${DINO_DIR}"
+    echo "Run setup-dino-api.sh first to install."
+    exit 1
+fi
+
+echo "Starting Dino API server on port ${PORT:-3000}..."
+exec node "${DINO_DIR}/scripts/api-server.mjs"

package/scripts/start-dino.cmd

@@ -1,8 +0,0 @@
-@echo off
-REM Convenience wrapper for Windows Command Prompt.
-REM Runs scripts\start-dino.mjs from the repository root.
-setlocal
-set "SCRIPT_DIR=%~dp0"
-set "REPO_DIR=%SCRIPT_DIR%.."
-cd /d "%REPO_DIR%"
-node scripts\start-dino.mjs %*

package/scripts/start-dino.mjs

@@ -1,226 +0,0 @@
-#!/usr/bin/env node
-/**
- * One-shot bootstrapper for the Dino pi package + dino-api Fastify server.
- *
- * What it does:
- *   1. Verifies the `pi` CLI is installed.
- *   2. Installs the local Dino pi package (`pi install ./ --approve`).
- *   3. Installs dependencies and builds `dino-api`.
- *   4. Starts the Fastify API and polls `/health` until it is ready.
- *
- * Usage:
- *   node scripts/start-dino.mjs
- *
- * Optional env vars:
- *   DINO_API_DIR    Path to dino-api (default: sibling ../dino-api)
- *   PORT              Port the API will listen on (default: 3000)
- *
- * Optional flags:
- *   --skip-pi-install    Skip `pi install ./`
- *   --skip-install       Skip `npm install` in dino-api
- *   --skip-build         Skip `npm run build` in dino-api
- */
-import { spawn, spawnSync } from "node:child_process";
-import { fileURLToPath } from "node:url";
-import http from "node:http";
-import path from "node:path";
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-const DINO_DIR = path.resolve(__dirname, "..");
-const API_DIR =
-  process.env.DINO_API_DIR ?? path.resolve(DINO_DIR, "..", "dino-api");
-const PORT = Number(process.env.PORT ?? "3000");
-const HOST = process.env.HOST ?? "localhost";
-
-const FLAGS = {
-  skipPiInstall: process.argv.includes("--skip-pi-install"),
-  skipInstall: process.argv.includes("--skip-install"),
-  skipBuild: process.argv.includes("--skip-build"),
-};
-
-function run(command, args, options = {}) {
-  // On Windows, .cmd files (npm, pi) need a shell. On Unix they don't, and
-  // passing args with shell: true triggers a Node deprecation warning.
-  const shell = process.platform === "win32";
-  const fullCommand = shell ? [command, ...args].join(" ") : command;
-  const spawnArgs = shell ? [] : args;
-
-  return new Promise((resolve, reject) => {
-    const child = spawn(fullCommand, spawnArgs, {
-      cwd: options.cwd,
-      shell,
-      stdio: options.stdio ?? "inherit",
-      env: { ...process.env, ...options.env },
-    });
-    child.on("error", reject);
-    child.on("close", (code) => {
-      if (code === 0) {
-        resolve();
-      } else {
-        reject(
-          new Error(`"${command} ${args.join(" ")}" exited with ${code}`)
-        );
-      }
-    });
-  });
-}
-
-async function checkPiInstalled() {
-  // Run through a shell so this works on both Windows (pi.cmd) and Unix.
-  const result = spawnSync("pi --version", [], {
-    shell: true,
-    encoding: "utf-8",
-  });
-  if (result.error || result.status !== 0) {
-    throw new Error(
-      "pi CLI not found. Install it first:\n" +
-        "  npm install -g @earendil-works/pi-coding-agent\n" +
-        "Then re-run this script."
-    );
-  }
-  const version = result.stdout?.trim() || "unknown";
-  console.log(`✓ pi CLI detected (${version})`);
-}
-
-function assertPortFree(port, host = "0.0.0.0") {
-  return new Promise((resolve, reject) => {
-    const server = http.createServer();
-    server.once("error", (err) => {
-      if (err.code === "EADDRINUSE") {
-        reject(
-          new Error(
-            `Port ${port} is already in use on ${host}. ` +
-              `Stop the other process or set a different PORT (e.g. PORT=3001).`
-          )
-        );
-      } else {
-        reject(err);
-      }
-    });
-    server.once("listening", () => {
-      server.close(() => resolve());
-    });
-    server.listen({ port, host });
-  });
-}
-
-async function installDinoPackage() {
-  if (FLAGS.skipPiInstall) {
-    console.log("⏭ Skipping pi install (--skip-pi-install)");
-    return;
-  }
-  console.log("📦 Installing Dino pi package...");
-  await run("pi", ["install", "./", "--approve"], { cwd: DINO_DIR });
-  console.log("✓ Dino pi package installed");
-}
-
-async function buildDinoApi() {
-  console.log(`🔨 Building dino-api at ${API_DIR} ...`);
-  if (!FLAGS.skipInstall) {
-    console.log("  → npm install");
-    await run("npm", ["install"], { cwd: API_DIR });
-  } else {
-    console.log("  ⏭ Skipping npm install (--skip-install)");
-  }
-
-  if (!FLAGS.skipBuild) {
-    console.log("  → npm run build");
-    await run("npm", ["run", "build"], { cwd: API_DIR });
-  } else {
-    console.log("  ⏭ Skipping npm run build (--skip-build)");
-  }
-  console.log("✓ dino-api built");
-}
-
-function waitForApi(retries = 120, intervalMs = 500) {
-  const url = new URL("/health", `http://${HOST}:${PORT}`);
-  return new Promise((resolve, reject) => {
-    let attempt = 0;
-    const tryOnce = () => {
-      attempt += 1;
-      const req = http.get(
-        url,
-        { timeout: 2000 },
-        (res) => {
-          if (res.statusCode >= 200 && res.statusCode < 300) {
-            resolve();
-          } else {
-            retry();
-          }
-        }
-      );
-      req.on("error", retry);
-      req.on("timeout", () => req.destroy());
-    };
-    const retry = () => {
-      if (attempt >= retries) {
-        reject(
-          new Error(
-            `API did not become ready on ${url} after ${retries * intervalMs}ms`
-          )
-        );
-        return;
-      }
-      process.stdout.write(
-        `\r  ⏳ Waiting for API at ${url} ... (${attempt}/${retries})`
-      );
-      setTimeout(tryOnce, intervalMs);
-    };
-    tryOnce();
-  });
-}
-
-async function startDinoApi() {
-  console.log("🚀 Starting dino-api...");
-  await assertPortFree(PORT);
-
-  const shell = process.platform === "win32";
-  const command = shell ? "npm start" : "npm";
-  const args = shell ? [] : ["start"];
-  const child = spawn(command, args, {
-    cwd: API_DIR,
-    shell,
-    stdio: "inherit",
-  });
-
-  const cleanup = (signal) => {
-    console.log(`\n⚙ Received ${signal}, shutting down dino-api...`);
-    child.kill(signal === "SIGINT" ? "SIGINT" : "SIGTERM");
-  };
-  process.on("SIGINT", cleanup);
-  process.on("SIGTERM", cleanup);
-
-  try {
-    await waitForApi();
-    process.stdout.write("\r"); // clear progress line
-    console.log(`✅ dino-api is ready at http://${HOST}:${PORT}`);
-    console.log(`   Health check: http://${HOST}:${PORT}/health`);
-    console.log(`   Chat endpoint: POST http://${HOST}:${PORT}/chat`);
-  } catch (err) {
-    console.error("\n" + err.message);
-    child.kill("SIGTERM");
-    throw err;
-  }
-
-  return new Promise((resolve) => {
-    child.on("close", (code) => {
-      console.log(`\ndino-api exited with code ${code ?? 0}`);
-      resolve(code ?? 0);
-    });
-  });
-}
-
-async function main() {
-  console.log("🦖 Dino bootstrapper\n");
-  try {
-    await checkPiInstalled();
-    await installDinoPackage();
-    await buildDinoApi();
-    await startDinoApi();
-  } catch (err) {
-    console.error("\n❌", err.message);
-    process.exit(1);
-  }
-}
-
-main();

package/scripts/start-dino.ps1

@@ -1,9 +0,0 @@
-# Convenience wrapper for PowerShell (run with -ExecutionPolicy Bypass if needed).
-# Runs scripts/start-dino.mjs from the repository root.
-$ErrorActionPreference = 'Stop'
-
-$scriptDir = Split-Path -Parent $MyInvocation.MyCommand.Path
-$repoDir = Split-Path -Parent $scriptDir
-
-Set-Location $repoDir
-& node scripts/start-dino.mjs @args

package/scripts/start-dino.sh

@@ -1,10 +0,0 @@
-#!/usr/bin/env bash
-# Convenience wrapper for Unix-like shells (Git Bash, WSL, macOS, Linux).
-# Runs scripts/start-dino.mjs from the repository root.
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-REPO_DIR="$(cd "${SCRIPT_DIR}/.." && pwd)"
-
-cd "${REPO_DIR}"
-node scripts/start-dino.mjs "$@"