@audiofool/moondog 0.2.0-beta.7 → 0.2.0

package/src/runtime/pi/persistent-credential-store.mjs

@@ -21,6 +21,7 @@ const LOCK_TIMEOUT_MS = 30_000;
 // API keys for services other than models, such as Brave Search for web lookups.
 export const serviceApiKeyIds = Object.freeze(["brave"]);
 const apiKeyProviderIds = Object.freeze([...apiKeyPiProviderIds, ...serviceApiKeyIds]);
+// openai-codex is no longer offered, but a store that still holds its sign-in keeps loading.
 const SUPPORTED_CREDENTIAL_PROVIDERS = new Set([
   "openai-codex",
   "spotify",
@@ -105,6 +106,33 @@ function validateOpenAICodexCredential(value) {
   return structuredClone(value);
 }
 
+// Sign in with ChatGPT, through Pi's OpenAI provider: a token for api.openai.com and its refresh.
+function validateOpenAIChatGPTCredential(value) {
+  assertPlainRecord(value, "openai credential");
+  assertExactKeys(
+    value,
+    ["access", "clientId", "expires", "refresh", "type", ...(value.scopes === undefined ? [] : ["scopes"])],
+    "openai credential shape",
+  );
+  assertSecretString(value.access, "OAuth access token");
+  assertSecretString(value.refresh, "OAuth refresh token");
+  assertSecretString(value.clientId, "OAuth client identifier");
+  if (!Number.isFinite(value.expires) || value.expires <= 0) {
+    throw safeError(
+      "credential_store_corrupt",
+      "Moondog credential storage contains an invalid OAuth expiry.",
+    );
+  }
+  if (value.scopes !== undefined && (!Array.isArray(value.scopes) || value.scopes.length > 50 ||
+      value.scopes.some((scope) => typeof scope !== "string" || !/^[\x21-\x7e]{1,200}$/u.test(scope)))) {
+    throw safeError(
+      "credential_store_corrupt",
+      "Moondog credential storage contains invalid OAuth scopes.",
+    );
+  }
+  return structuredClone(value);
+}
+
 function validateSpotifyCredential(value) {
   assertPlainRecord(value, "spotify credential");
   assertExactKeys(
@@ -173,6 +201,9 @@ function validateCredential(providerId, value) {
   if (providerId === "spotify") {
     return validateSpotifyCredential(value);
   }
+  if (providerId === "openai" && value?.type === "oauth") {
+    return validateOpenAIChatGPTCredential(value);
+  }
   if (apiKeyProviderIds.includes(providerId)) {
     assertPlainRecord(value, `${providerId} credential`);
     assertExactKeys(value, ["type", "key"], `${providerId} credential shape`);

package/src/runtime/pi/provider-registry.mjs

@@ -35,12 +35,6 @@ const providerLoaders = {
     );
     return openaiProvider();
   },
-  "openai-codex": async () => {
-    const { openaiCodexProvider } = await import(
-      "@earendil-works/pi-ai/providers/openai-codex"
-    );
-    return openaiCodexProvider();
-  },
   openrouter: async () => {
     const { openrouterProvider } = await import(
       "@earendil-works/pi-ai/providers/openrouter"
@@ -63,9 +57,9 @@ export const supportedPiProviderIds = Object.freeze(
   Object.keys(providerLoaders),
 );
 
-export const apiKeyPiProviderIds = Object.freeze(
-  supportedPiProviderIds.filter((providerId) => providerId !== "openai-codex"),
-);
+// Every provider takes a key; OpenAI also takes Sign in with ChatGPT.
+export const apiKeyPiProviderIds = supportedPiProviderIds;
+export const chatgptProviderId = "openai";
 
 export async function loadPiProvider(providerId) {
   if (!Object.hasOwn(providerLoaders, providerId)) return undefined;

package/src/runtime/pi/public-model-catalog.mjs

@@ -2,6 +2,7 @@ import { randomUUID } from "node:crypto";
 import { constants } from "node:fs";
 import { lstat, mkdir, open, rename, unlink } from "node:fs/promises";
 import path from "node:path";
+import { addEndpoints, readEndpoints } from "./custom-endpoints.mjs";
 import { createPiModels, listPiModels, listPiProviders } from "./model-catalog.mjs";
 import { acquirePrivateFileLock, resolveMoondogAuthFile } from "./persistent-credential-store.mjs";
 import { supportedPiProviderIds } from "./provider-registry.mjs";
@@ -159,15 +160,21 @@ async function writeCache(root, file, document, signal) {
 export class PublicPiModelCatalog {
   constructor({ environment = process.env, fetchImpl = globalThis.fetch, now = Date.now, timeoutMs = 4000 } = {}) {
     this.root = path.join(path.dirname(resolveMoondogAuthFile(environment)), "model-catalog");
+    this.environment = environment;
     this.fetch = fetchImpl; this.now = now; this.timeoutMs = timeoutMs;
-    this.baseline = createPiModels(); this.records = new Map(); this.pending = new Set();
+    this.baseline = createPiModels(); this.records = new Map(); this.pending = new Set(); this.endpoints = [];
     this.snapshot = this.baseline;
     this.ready = this.restore();
   }
 
   file(id) { return path.join(this.root, `${id}.json`); }
   publish() { this.snapshot = this.createModels(); }
-  createModels(options) { return createPiModels({ ...options, catalogModels: new Map([...this.records].map(([id, record]) => [id, record.models])) }); }
+  // The listener's own endpoints join Pi's providers; their models are theirs, not from pi.dev.
+  createModels(options) { return addEndpoints(createPiModels({ ...options, catalogModels: new Map([...this.records].map(([id, record]) => [id, record.models])) }), this.endpoints); }
+  async readEndpoints() {
+    try { this.endpoints = await readEndpoints(this.environment); } catch { this.endpoints = []; }
+    this.publish();
+  }
   providers() { return listPiProviders(this.snapshot); }
   models(id) {
     const record = this.records.get(id);
@@ -277,12 +284,13 @@ export async function getPublicPiModelCatalog(environment = process.env) {
   const key = path.dirname(resolveMoondogAuthFile(environment));
   if (!catalogs.has(key)) {
     const catalog = new PublicPiModelCatalog({ environment });
-    catalogs.set(key, catalog); await catalog.ready; return catalog;
+    catalogs.set(key, catalog); await catalog.ready; await catalog.readEndpoints(); return catalog;
   }
   const catalog = catalogs.get(key);
   await catalog.ready;
-  // Another running app can persist a new selection and its catalog entry.
+  // Another running app can persist a new selection, its catalog entry or an endpoint.
   // Reload public cache only; do not fetch or touch the active model object.
   await catalog.restore();
+  await catalog.readEndpoints();
   return catalog;
 }

package/src/runtime/pi/runtime-selection.mjs

@@ -0,0 +1,9 @@
+// Whether an agent built earlier is behind the saved choice: another model or effort, or an agent
+// that could not answer then, which a sign-in since may let answer. Token refreshes rewrite
+// auth.json often, so a working agent on the saved model is kept. Kept apart from the settings
+// file, so the window code the project page runs in the browser can use it.
+export function runtimeBehindSelection(status, selection) {
+  if (status?.state !== "configured") return true;
+  return status.provider !== selection?.provider || status.model !== selection?.model ||
+    (status.effort ?? undefined) !== selection?.effort;
+}

package/src/runtime/pi/runtime-settings.mjs

@@ -1,11 +1,27 @@
+import { unwatchFile, watchFile } from "node:fs";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import path from "node:path";
 
+import { getSupportedThinkingLevels } from "@earendil-works/pi-ai";
+
 import { resolveMoondogAuthFile } from "./persistent-credential-store.mjs";
 
 const SETTINGS_VERSION = 1;
 // Pi's thinking levels. Each model supports a subset; the runtime clamps to it.
 export const EFFORT_LEVELS = Object.freeze(["off", "minimal", "low", "medium", "high", "xhigh", "max"]);
+// The scale the window and /effort offer for every model that thinks.
+export const EFFORT_SCALE = Object.freeze(["off", "low", "medium", "high", "xhigh", "max"]);
+
+// A level the model lacks steps down to the nearest one it has, so a choice never costs more than it
+// said, but never down to no thinking; with nothing below, it takes the lightest level the model has.
+export function clampEffort(model, level) {
+  const supported = getSupportedThinkingLevels(model);
+  if (supported.includes(level)) return level;
+  const at = EFFORT_LEVELS.indexOf(level);
+  for (let index = at - 1; index > 0; index -= 1) if (supported.includes(EFFORT_LEVELS[index])) return EFFORT_LEVELS[index];
+  for (let index = Math.max(at + 1, 1); index < EFFORT_LEVELS.length; index += 1) if (supported.includes(EFFORT_LEVELS[index])) return EFFORT_LEVELS[index];
+  return supported[0] ?? "off";
+}
 
 function settingsError(message, cause) {
   const error = new Error(message, cause ? { cause } : undefined);
@@ -87,3 +103,24 @@ export async function writePiRuntimeSelection(
   );
   return normalized;
 }
+
+// The terminal and the window each build their agent from settings.json and auth.json. A model
+// chosen, or a sign-in made, on one side reaches the other through this watch. onChange hears the
+// saved selection, or undefined when none is saved; the surface decides whether to rebuild, with
+// runtimeBehindSelection.
+// The second argument says which file changed: "settings" (the default), "auth" (a sign-in),
+// "endpoints" (an endpoint added, edited or removed) or "models" (the window's menu list).
+export function watchRuntimeSettings({ environment = process.env, interval = 2000, onChange } = {}) {
+  const directory = path.dirname(resolveMoondogAuthFile(environment));
+  const files = { settings: resolveMoondogSettingsFile(environment), auth: resolveMoondogAuthFile(environment),
+    endpoints: path.join(directory, "endpoints.json"), models: path.join(directory, "models.json") };
+  const listeners = Object.entries(files).map(([changed, file]) => {
+    const listener = (now, before) => {
+      if (now.mtimeMs === before.mtimeMs) return;
+      void readPiRuntimeSelection(environment).then((selection) => onChange?.(selection, changed), () => {});
+    };
+    watchFile(file, { interval, persistent: false }, listener);
+    return [file, listener];
+  });
+  return () => { for (const [file, listener] of listeners) unwatchFile(file, listener); };
+}

package/src/surfaces/cli/auth-command.mjs

@@ -8,22 +8,22 @@ import {
 } from "../../runtime/pi/authentication.mjs";
 import { sanitizeTerminalText } from "./format-output.mjs";
 
-const DEFAULT_AUTH_PROVIDER = "openai-codex";
+const DEFAULT_AUTH_PROVIDER = "openai";
 
 export function authHelpText() {
   return `# Moondog authentication
 
 Commands:
 
-- \`moondog auth login openai-codex\` - start a browser OAuth login
-- \`moondog auth login openai-codex --device-code\` - use headless device login
+- \`moondog auth login openai --chatgpt\` - sign in with your ChatGPT subscription in the browser
 - \`moondog auth login <provider>\` - save an API key using hidden terminal input
 - \`moondog auth status [provider] [--json]\` - inspect saved or environment credentials
 - \`moondog auth logout <provider> [--json]\` - remove that provider's saved credential
 
-API key providers: ${supportedAuthProviderIds.filter((id) => id !== DEFAULT_AUTH_PROVIDER && !serviceKeyProviders.some((service) => service.id === id)).join(", ")}.
+API key providers: ${supportedAuthProviderIds.filter((id) => !serviceKeyProviders.some((service) => service.id === id)).join(", ")}.
 Web search keys: ${serviceKeyProviders.map((service) => `${service.id} for ${service.name} (or ${service.variable})`).join(", ")}; a deepseek key also searches and reads pages.
-Use zai for GLM, moonshotai or moonshotai-cn for Kimi, xai for Grok, openai for GPT, and anthropic for Claude.
+Use openai for GPT, anthropic for Claude, google for Gemini, xai for Grok, zai for GLM, and moonshotai or moonshotai-cn for Kimi.
+OpenAI takes either a ChatGPT sign-in or an API key; the newer one replaces the other.
 Moondog keeps credentials in its own private local store.
 API keys are entered interactively, never as command arguments.
 It does not read, modify, or log out the Codex CLI or ChatGPT desktop session.`;
@@ -39,19 +39,11 @@ function parseAuthArguments(args) {
       action: "help",
       provider: undefined,
       extra: [],
-      loginMethod: "browser",
+      chatgpt: false,
     };
   }
-  const deviceCodeIndex = values.indexOf("--device-code");
-  const browserIndex = values.indexOf("--browser");
-  const deviceCode = deviceCodeIndex !== -1;
-  const browser = browserIndex !== -1;
-  if (deviceCode) values.splice(deviceCodeIndex, 1);
-  const adjustedBrowserIndex = values.indexOf("--browser");
-  if (adjustedBrowserIndex !== -1) values.splice(adjustedBrowserIndex, 1);
-  if (deviceCode && browser) {
-    throw new Error("Choose either --browser or --device-code, not both.");
-  }
+  const chatgptIndex = values.indexOf("--chatgpt");
+  if (chatgptIndex !== -1) values.splice(chatgptIndex, 1);
   const unknownOption = values.find((value) => value.startsWith("-"));
   if (unknownOption) {
     throw new Error(
@@ -62,7 +54,7 @@ function parseAuthArguments(args) {
     action: values[0],
     provider: values[1],
     extra: values.slice(2),
-    loginMethod: deviceCode ? "device_code" : "browser",
+    chatgpt: chatgptIndex !== -1,
   };
 }
 
@@ -80,7 +72,8 @@ function formatStatus(value) {
   return `${value.provider}: not configured`;
 }
 
-function createReadlineOutput(output) {
+// A readline output that can go quiet, so a key typed into it is never echoed.
+export function createReadlineOutput(output) {
   let muted = false;
   const stream = new Writable({
     write(chunk, encoding, callback) {
@@ -105,7 +98,6 @@ function createReadlineOutput(output) {
 function createAuthInteraction({
   input,
   output,
-  loginMethod,
   signal,
   interactive,
   apiKeyLogin,
@@ -126,15 +118,9 @@ function createAuthInteraction({
       signal,
       async prompt(prompt) {
         if (prompt.type === "select") {
-          const selected = prompt.options.find(
-            (option) => option.id === loginMethod,
+          throw new Error(
+            "The installed Pi provider asked for a login choice Moondog doesn't offer.",
           );
-          if (!selected) {
-            throw new Error(
-              "The installed Pi provider does not support the requested login method.",
-            );
-          }
-          return selected.id;
         }
         if (prompt.type === "secret" && !interactive) {
           throw new Error(
@@ -175,12 +161,6 @@ function createAuthInteraction({
             writeLine(output, event.url);
             if (event.instructions) writeLine(output, event.instructions);
             break;
-          case "device_code":
-            writeLine(output);
-            writeLine(output, "Open this URL to sign in with ChatGPT:");
-            writeLine(output, event.verificationUri);
-            writeLine(output, `Device code: ${event.userCode}`);
-            break;
           case "info":
             writeLine(output, event.message);
             for (const link of event.links ?? []) {
@@ -202,7 +182,7 @@ function createAuthInteraction({
 // Pi's login errors can carry provider response bodies. Every surface that signs
 // in shows only these fixed messages and codes.
 export function wrapLoginError(error, provider) {
-  const name = provider === DEFAULT_AUTH_PROVIDER ? "OpenAI Codex" : provider;
+  const name = provider === DEFAULT_AUTH_PROVIDER ? "OpenAI" : provider;
   if (error?.name === "AbortError" || error?.code === "ABORT_ERR") {
     const cancelled = new Error(`${name} login was cancelled.`);
     cancelled.code = "auth_login_cancelled";
@@ -248,11 +228,8 @@ export async function runAuthCommand({
   if (!["login", "status", "logout"].includes(options.action)) {
     throw new Error("Unknown auth command. Use login, status, logout, or help.");
   }
-  if (
-    options.action !== "login" &&
-    (options.loginMethod !== "browser" || args.includes("--browser"))
-  ) {
-    throw new Error("Login method options are valid only for auth login.");
+  if (options.action !== "login" && options.chatgpt) {
+    throw new Error("--chatgpt is valid only for auth login.");
   }
 
   const provider = options.provider ??
@@ -265,15 +242,10 @@ export async function runAuthCommand({
       `Unsupported auth provider. Choose ${supportedAuthProviderIds.join(", ")}.`,
     );
   }
-  const apiKeyLogin = provider !== DEFAULT_AUTH_PROVIDER;
-  if (
-    apiKeyLogin &&
-    (args.includes("--device-code") || args.includes("--browser"))
-  ) {
-    throw new Error(
-      "Browser and device-code options apply only to openai-codex OAuth login.",
-    );
+  if (options.chatgpt && provider !== DEFAULT_AUTH_PROVIDER) {
+    throw new Error("Only openai signs in with ChatGPT; other providers take an API key.");
   }
+  const apiKeyLogin = !options.chatgpt;
 
   if (options.action === "status") {
     const authentication = await createAuthentication({ environment });
@@ -299,9 +271,7 @@ export async function runAuthCommand({
       writeLine(output, formatStatus(status));
       writeLine(
         output,
-        apiKeyLogin
-          ? "Moondog's saved API key was removed. Environment credentials remain available until unset."
-          : "Moondog's local credential was removed. Codex CLI and ChatGPT desktop login were not changed.",
+        "Moondog's saved credential was removed. Environment credentials remain available until unset; the Codex CLI and ChatGPT desktop sign-ins were not changed.",
       );
     }
     return;
@@ -315,9 +285,9 @@ export async function runAuthCommand({
       "API key login requires an interactive terminal with hidden input. For headless use, set the provider's API key environment variable.",
     );
   }
-  if (!apiKeyLogin && options.loginMethod === "browser" && !interactive) {
+  if (!apiKeyLogin && !interactive) {
     throw new Error(
-      "Browser OAuth login requires an interactive terminal. Use --device-code for a headless session.",
+      "ChatGPT sign-in requires an interactive terminal. For headless use, set OPENAI_API_KEY instead.",
     );
   }
 
@@ -328,7 +298,6 @@ export async function runAuthCommand({
   const login = createAuthInteraction({
     input,
     output: progressOutput,
-    loginMethod: options.loginMethod,
     signal: controller.signal,
     interactive,
     apiKeyLogin,
@@ -336,7 +305,7 @@ export async function runAuthCommand({
   try {
     let status;
     try {
-      status = await authentication.login(provider, login.interaction);
+      status = await authentication.login(provider, login.interaction, { method: apiKeyLogin ? "api_key" : "oauth" });
     } catch (error) {
       throw wrapLoginError(error, provider);
     }
@@ -352,8 +321,8 @@ export async function runAuthCommand({
       : "Next, return to Moondog and run /model.");
     if (!apiKeyLogin) {
       writeLine(output, "For a non-interactive launch, use environment overrides:");
-      writeLine(output, "  export MOONDOG_PROVIDER=openai-codex");
-      writeLine(output, "  export MOONDOG_MODEL=gpt-5.6-terra");
+      writeLine(output, "  export MOONDOG_PROVIDER=openai");
+      writeLine(output, "  export MOONDOG_MODEL=gpt-6.1-sol");
       writeLine(output, "  moondog");
     }
   } finally {

package/src/surfaces/cli/brand-components.mjs

@@ -564,5 +564,5 @@ function wrapDescription(text, width) {
 }
 
 export function listeningHelp() {
-  return tr("# Your listening room\n\n## 01 / Listen and discover\n\nJust type to talk about music, ask for a playlist, or go exploring.\nTo talk, Moondog needs a model: `/auth` signs you in, then `/model` picks one.\nWhile an answer is coming, each step shows in the conversation, and the footer names the one in progress.\n\n- `/taste` - your profile: open any song or artist to see why it's there\n- `/taste report` - the whole picture on one page\n- `/import` - bring in your history, your library, or a playlist\n- `/lyrics` - the lyrics on the sleeve; `/lyrics sync` finds more\n- `/spotify` - play, queue, and make playlists in Spotify\n- Ask to move playback onto your iPhone, computer, or another Spotify device by name\n- `/web search <query>` or `/web read <url>` - look things up on public music sites\n\n## 02 / Make it yours\n\n- `/profile` - the same profile as `/taste`\n- `/profile corrections` - everything you've told me\n- `/profile retract <id>` - undo one of those\n- `/profile help` - the full set of profile commands\n- `/remember <text>`, `/memory`, `/forget <id>` - what I remember between conversations\n\n## 03 / Around the room\n\n- `/home` - back to the record sleeve; the conversation stays\n- `/theme paper|charcoal|terminal|auto` - change the look\n- `/art braille|ascii|off` - change the artwork\n- `/motion on|off` - turn the animation on or off\n- `/commands` or Ctrl+P - search every command; your message stays put\n- Page Up and Page Down scroll the conversation. The header and your draft stay put\n- Up and Down in the draft recall what you typed in this conversation\n- `/resume` - pick up a saved conversation (type to filter, Enter opens)\n- `/new` - start fresh; this conversation stays saved\n- `/status`, `/sources`, `/tools`, `/doctor` - see what's connected and working\n- `/reload` - reload model settings and sign-ins\n- `/update [--check] [--channel latest|beta]` - check for a release, or close this room and install it\n- `/help all` - every command, including the ones for the shell\n- `/language` - choose the language Moondog uses\n- `/quit` - leave\n\nTab moves to the menu on the home screen. Esc goes back to typing.\nEnter sends, and Shift+Enter starts a new line.\nTab or Enter accepts a suggestion.\nCtrl+C stops a model or web request, or leaves when nothing is running.\nIn the profile, type to filter, Tab switches lists, and Enter shows what you can do.\nCtrl+R refreshes it and Ctrl+O opens the full report.\nYour profile works without a model.\nPut quotes around paths, titles, and names that have spaces.");
+  return tr("# Your listening room\n\n## 01 / Listen and discover\n\nJust type to talk about music, ask for a playlist, or go exploring.\nTo talk, Moondog needs a model: `/auth` signs you in, then `/model` picks one.\nWhile an answer is coming, each step shows in the conversation, and the footer names the one in progress.\n\n- `/taste` - your profile: open any song or artist to see why it's there\n- `/taste report` - the whole picture on one page\n- `/import` - bring in your history, your library, or a playlist\n- `/lyrics` - the lyrics on the sleeve; `/lyrics sync` finds more\n- `/service` - choose where I play music: Spotify, Apple Music, or NetEase\n- `/spotify` - play, queue, and make playlists in Spotify\n- Ask to move playback onto your iPhone, computer, or another Spotify device by name\n- `/web search <query>` or `/web read <url>` - look things up on public music sites\n\n## 02 / Make it yours\n\n- `/profile` - the same profile as `/taste`\n- `/profile corrections` - everything you've told me\n- `/profile retract <id>` - undo one of those\n- `/profile help` - the full set of profile commands\n- `/remember <text>`, `/memory`, `/forget <id>` - what I remember between conversations\n\n## 03 / Around the room\n\n- `/home` - back to the record sleeve; the conversation stays\n- `/theme paper|charcoal|terminal|auto` - change the look\n- `/art braille|ascii|off` - change the artwork\n- `/motion on|off` - turn the animation on or off\n- `/commands` or Ctrl+P - search every command; your message stays put\n- Page Up and Page Down scroll the conversation. The header and your draft stay put\n- Up and Down in the draft recall what you typed in this conversation\n- `/resume` - pick up a saved conversation (type to filter, Enter opens)\n- `/new` - start fresh; this conversation stays saved\n- `/status`, `/sources`, `/tools`, `/doctor` - see what's connected and working\n- `/reload` - reload model settings and sign-ins\n- `/update [--check] [--channel latest|beta]` - check for a release, or close this room and install it\n- `/help all` - every command, including the ones for the shell\n- `/language` - choose the language Moondog uses\n- `/quit` - leave\n\nTab moves to the menu on the home screen. Esc goes back to typing.\nEnter sends, and Shift+Enter starts a new line.\nTab or Enter accepts a suggestion.\nCtrl+C stops a model or web request, or leaves when nothing is running.\nIn the profile, type to filter, Tab switches lists, and Enter shows what you can do.\nCtrl+R refreshes it and Ctrl+O opens the full report.\nYour profile works without a model.\nPut quotes around paths, titles, and names that have spaces.");
 }

package/src/surfaces/cli/command-completions.mjs

@@ -19,6 +19,11 @@ const artChoices = choices([
   ["auto", N_("Choose artwork for this terminal")],
 ]);
 const motionChoices = choices([["on", N_("Animate the character artwork")], ["off", N_("Keep the artwork still")]]);
+const serviceChoices = choices([
+  ["spotify", N_("Whole songs on your Spotify devices")],
+  ["apple_music", N_("30-second previews, played here")],
+  ["netease", N_("Whole songs through ncm-cli")],
+]);
 const webChoices = choices([
   ["search", N_("Search public music sites")],
   ["read", N_("Read a public page")],
@@ -87,6 +92,7 @@ export function withCommandCompletions(commands, {
     theme: { argumentHint: "[paper|charcoal|terminal|auto]", choices: firstArgument(themeChoices) },
     art: { argumentHint: "[braille|ascii|off|auto]", choices: firstArgument(artChoices) },
     motion: { argumentHint: "[on|off]", choices: firstArgument(motionChoices) },
+    service: { argumentHint: "[spotify|apple_music|netease]", choices: firstArgument(serviceChoices) },
     lyrics: { argumentHint: "[sync]", choices: firstArgument(choices([["sync", N_("Check profile songs for lyrics")]])) },
     web: { argumentHint: "search <query> | read <url> | status", choices: firstArgument(webChoices) },
     spotify: {
@@ -94,6 +100,14 @@ export function withCommandCompletions(commands, {
       choices: (previous) => previous.length === 0 ? spotifyChoices
         : previous.length === 1 ? spotifyArguments.get(previous[0]) ?? [] : [],
     },
+    endpoint: {
+      argumentHint: "[add | remove <id>]",
+      choices: (previous) => previous.length === 0
+        ? choices([["add", N_("Add an endpoint by its address")], ["remove", N_("Remove an endpoint and its key")]])
+        : previous.length === 1 && previous[0] === "remove"
+          ? providers().filter((provider) => provider.id.startsWith("endpoint-")).map((provider) => ({ value: provider.id, label: provider.id, description: provider.name }))
+          : [],
+    },
     auth: {
       argumentHint: "[provider]",
       choices: (previous) => previous.length === 0 ? providers()

package/src/surfaces/cli/endpoint-command.mjs

@@ -0,0 +1,106 @@
+import { createInterface } from "node:readline/promises";
+
+import { ENDPOINT_FORMATS, readEndpoints } from "../../runtime/pi/custom-endpoints.mjs";
+import { createModelSettings } from "../../runtime/pi/model-settings.mjs";
+import { createReadlineOutput } from "./auth-command.mjs";
+import { sanitizeTerminalText } from "./format-output.mjs";
+
+// Endpoints from the terminal, as Settings › Model adds them in the window: any service that speaks
+// OpenAI's Chat Completions or Anthropic's Messages, by its address, an optional key and its model IDs.
+export function endpointHelpText() {
+  return `# Moondog endpoints
+
+- \`moondog endpoint\` - list the endpoints you added
+- \`moondog endpoint add\` - add one; Moondog asks for its name, address, format, key and model IDs
+- \`moondog endpoint remove <id>\` - remove one with its key
+
+The key is typed out of sight and kept in Moondog's private endpoints.json, never in a command.
+Leave the model IDs empty and Moondog asks the endpoint for its list.
+Then pick a model with /model <id>.`;
+}
+
+const line = (stream, value = "") => stream.write(`${sanitizeTerminalText(value)}\n`);
+const host = (address) => { try { return new URL(address).host; } catch { return address; } };
+
+export function describeEndpoints(endpoints) {
+  if (!endpoints.length) return "No endpoints yet. Add one with moondog endpoint add, or /endpoint add in Moondog.";
+  return endpoints.map((endpoint) => `${endpoint.id} - ${endpoint.name}, ${endpoint.format === "anthropic" ? "Anthropic" : "OpenAI"} format at ${host(endpoint.baseUrl)}, ` +
+    `${endpoint.models.length} model${endpoint.models.length === 1 ? "" : "s"}${endpoint.key ? ", key saved" : ""}`).join("\n");
+}
+
+// The questions an endpoint needs, one by one, on a paused terminal. The key is asked with the output
+// muted; an empty answer keeps the endpoint keyless, as a server on this Mac often is.
+async function askEndpoint({ input, output, signal }) {
+  const quiet = createReadlineOutput(output);
+  const readline = createInterface({ input, output: quiet.stream, terminal: Boolean(input.isTTY) });
+  const ask = (question) => readline.question(`${sanitizeTerminalText(question)} `, { signal });
+  try {
+    line(output);
+    line(output, "Add an endpoint. Press Ctrl+C to stop.");
+    const name = (await ask("Name (for example DeepSeek):")).trim();
+    const baseUrl = (await ask("Address (for example https://api.deepseek.com):")).trim();
+    const said = (await ask("Format, openai or anthropic [openai]:")).trim().toLowerCase();
+    const format = said.startsWith("a") ? "anthropic" : "openai";
+    if (said && !ENDPOINT_FORMATS.some((value) => value.startsWith(said[0]))) throw Object.assign(new Error("Answer openai or anthropic."), { code: "endpoint_format_invalid" });
+    line(output, "Key (hidden; leave empty for none):");
+    quiet.setMuted(true);
+    let key;
+    try { key = (await readline.question("", { signal })).trim(); } finally { quiet.setMuted(false); line(output); }
+    const models = (await ask("Model IDs, separated by commas (leave empty to ask the endpoint):")).trim();
+    return { name, baseUrl, format, key, models };
+  } finally {
+    readline.close();
+  }
+}
+
+export async function runEndpointCommand({
+  args = [],
+  json = false,
+  environment = process.env,
+  input = process.stdin,
+  output = process.stdout,
+  progressOutput = process.stderr,
+  signalTarget = process,
+  interactive = Boolean(input.isTTY && progressOutput.isTTY),
+  settings = createModelSettings({ environment }),
+} = {}) {
+  const [action = "list", ...rest] = args;
+  if (action === "help" || action === "--help" || action === "-h") {
+    line(output, endpointHelpText());
+    return null;
+  }
+  if (action === "list") {
+    if (rest.length) throw new Error("moondog endpoint list takes nothing after it.");
+    const endpoints = await readEndpoints(environment);
+    line(output, json ? JSON.stringify(endpoints.map(({ key, ...shown }) => ({ ...shown, keySaved: Boolean(key) })), null, 2) : describeEndpoints(endpoints));
+    return endpoints;
+  }
+  if (action === "remove") {
+    const wanted = rest.join(" ").trim().toLowerCase();
+    if (!wanted) throw new Error("Name the endpoint to remove: moondog endpoint remove <id>.");
+    const endpoint = (await readEndpoints(environment)).find((entry) => entry.id === wanted || entry.id === `endpoint-${wanted}` || entry.name.toLowerCase() === wanted);
+    if (!endpoint) throw new Error("No endpoint has that id or name. moondog endpoint lists them.");
+    await settings.removeEndpoint(endpoint.id);
+    line(output, `Removed ${endpoint.name} and its key.`);
+    return { id: endpoint.id, name: endpoint.name, removed: true };
+  }
+  if (action !== "add") throw new Error("Unknown endpoint command. Use add, remove, list, or help.");
+  if (rest.length) throw new Error("moondog endpoint add asks for everything it needs; type the key only at its hidden prompt.");
+  if (!interactive) throw new Error("Adding an endpoint asks for its key out of sight, so it needs an interactive terminal.");
+  const controller = new AbortController();
+  const stop = () => controller.abort();
+  signalTarget.once("SIGINT", stop);
+  try {
+    const answers = await askEndpoint({ input, output: progressOutput, signal: controller.signal });
+    if (answers.models === "") line(progressOutput, "Asking the endpoint for its models...");
+    const saved = await settings.saveEndpoint(answers);
+    line(output, `Saved ${saved.name} as ${saved.id}, with ${saved.models.length} model${saved.models.length === 1 ? "" : "s"}${saved.keySaved ? " and its key" : ""}.`);
+    line(output, `Next, pick one with /model ${saved.id}.`);
+    return saved;
+  } catch (error) {
+    if (controller.signal.aborted) throw Object.assign(new Error("Adding the endpoint was cancelled."), { code: "endpoint_cancelled" });
+    throw error;
+  } finally {
+    signalTarget.removeListener("SIGINT", stop);
+  }
+}