@botconnector/bccli 0.4.17 → 0.5.0-rc.4

package/cli.mjs

@@ -0,0 +1,120 @@
+#!/usr/bin/env node
+import { readFileSync } from 'node:fs'
+import { DEFAULT_MODEL, assertCandidateRuntimeSupported, discoverModels, launchQwen, parseArgs, resolveQwenEntrypoint, resolveTrustedMcpConfig, selectModel } from './core.mjs'
+import { prepareBrandedQwen } from './branding.mjs'
+import { botConnectorCredentialStatus } from './credentials.mjs'
+import { resolveProvider, selectedProvider, providerDefinition } from './providers.mjs'
+import { runProviderCommand } from './provider-cli.mjs'
+import { startupMenu, autoSelectStartup, PROVIDER_SWITCH_EXIT } from './startup-menu.mjs'
+
+function help() {
+  console.log([
+    'BCCLI | BotConnector Coding Agent',
+    'Usage:',
+    '  bccli models [--json]',
+    '  bccli run --model MODEL "prompt" [--mcp-config OWNER_CONFIG_PATH]',
+    '  bccli -p "prompt" [-m MODEL]  (text-only headless alias)',
+    '  bccli --version',
+    '  bccli chat [--model MODEL] [--mcp-config OWNER_CONFIG_PATH]',
+    '  bccli resume [--model MODEL] [prompt]',
+    '  bccli -c [-m MODEL] [prompt]  (resume latest current-project session)',
+    '  bccli -r [SESSION_UUID] [-m MODEL]  (native Qwen session picker or specific session)',
+    '  bccli auth status  (offline; does not print API key)',
+    '  bccli provider list|add|use|remove [ID]  (manage provider keys)',
+    '  bccli models --provider ID  (list models for provider)',
+    '  bccli chat --provider ID --model MODEL_ID',
+    '  bccli  (open chat directly with active provider and last model)',
+    '  bccli --choose  (open provider/model picker explicitly)',
+    '  During chat: /provider or /auth to reopen provider and key picker.',
+    '',
+    'Credentials: existing BotConnector login or encrypted per-user provider API keys (Windows).',
+    'Provider choices: botconnector, openai, openrouter, deepseek, groq, xai.',
+    'Key entry: bccli provider add openrouter (hidden terminal prompt).',
+    'Model choice: --model; BotConnector defaults to ling-3.0-flash. Other providers need --model.',
+    'Security: allowlisted provider endpoints, ephemeral local token, --bare and default approvals.',
+    'MCP: explicit JSON only, directly under ~/.bccli-preview/ (no project configs).',
+    'Text-only -p alias; public --output-format JSON/stream-json are not yet supported.',
+    'Local new-engine RC; the public npm stable release is unchanged.',
+  ].join('\n'))
+}
+
+async function main() {
+  const argv = process.argv.slice(2)
+  if (argv.length === 0 && !process.stdin.isTTY) { help(); return 2 }
+  if (argv[0] === '--help' || argv[0] === '-h' || argv[0] === 'help') { help(); return 0 }
+  if (argv.length === 1 && (argv[0] === '--version' || argv[0] === '-v')) {
+    // Offline informational command: never inspect credentials or contact Gateway.
+    const pkg = JSON.parse(readFileSync(new URL('./package.json', import.meta.url), 'utf8'))
+    console.log(pkg.version)
+    return 0
+  }
+  const forceChoose = argv.length === 1 && argv[0] === '--choose'
+  const args = forceChoose ? { command: 'chat', prompt: '', model: undefined } : parseArgs(argv)
+  if (args.command === 'provider') return runProviderCommand(args.prompt.trim() ? args.prompt.trim().split(/\s+/) : [])
+  if (args.command === 'auth') {
+    const status = botConnectorCredentialStatus()
+    if (status.configured) {
+      console.log('BotConnector credential configured via ' +
+        (status.source === 'environment' ? 'BOTCONNECTOR_API_KEY environment variable.' : 'existing public BCCLI bc-cloud login.') +
+        ' Not verified online. No AI request was sent.')
+      return 0
+    }
+    console.error('BotConnector credential not configured or unreadable. ' +
+      'Use the existing legacy login via "bccli-legacy login bc-cloud" or set BOTCONNECTOR_API_KEY. ' +
+      'No credential was changed and no AI request was sent.')
+    return 1
+  }
+  if (args.command !== 'models') assertCandidateRuntimeSupported()
+  if (args.command === 'models') {
+    const profile = resolveProvider(args.provider ?? selectedProvider())
+    const models = await discoverModels({ key: profile.key, endpoint: profile.endpoint })
+    if (args.json) console.log(JSON.stringify({ data: models }, null, 2))
+    else models.forEach((item) => console.log(item.id))
+    return 0
+  }
+  if (!args.prompt && !process.stdin.isTTY) throw Error('Interactive mode requires a TTY; use -p "prompt".')
+  const mcpConfig = resolveTrustedMcpConfig(args.mcpConfig)
+  let chosen
+  const showPicker = args.command === 'chat' && !args.prompt && !args.model
+  if (showPicker) {
+    chosen = forceChoose ? undefined : await autoSelectStartup({
+      ...(args.provider ? { providerId: args.provider } : {}),
+    })
+    if (!chosen) chosen = await startupMenu({
+      ...(args.provider ? { currentProvider: () => args.provider } : {}),
+    })
+  } else {
+    const providerId = args.provider ?? selectedProvider()
+    const profile = resolveProvider(providerId)
+    const models = await discoverModels({ key: profile.key, endpoint: profile.endpoint })
+    const requested = args.model ??
+      (providerId === 'botconnector' ? (process.env.BOTCONNECTOR_MODEL_ID ?? DEFAULT_MODEL) : undefined)
+    if (!requested) throw Error('Use --model MODEL_ID for ' + providerId + '.')
+    chosen = { providerId, model: selectModel(models, requested), key: profile.key, endpoint: profile.endpoint }
+  }
+  const entrypoint = prepareBrandedQwen(resolveQwenEntrypoint())
+  let continueSession = args.command === 'resume'
+  let resumeSession = args.resumeSession
+  for (;;) {
+    console.log('BCCLI | ' + providerDefinition(chosen.providerId).name + ' | ' + chosen.model)
+    const code = await launchQwen({
+      key: chosen.key, model: chosen.model, prompt: args.prompt,
+      mcpConfig, entrypoint, upstream: chosen.endpoint,
+      providerId: chosen.providerId, continueSession, resumeSession,
+    })
+    if (code !== PROVIDER_SWITCH_EXIT) return code
+    if (args.prompt || !process.stdin.isTTY) throw Error('Provider menu requires an interactive terminal.')
+    // /provider and /auth close the current engine cleanly, then the parent
+    // asks for a key and model. Keys never enter the Qwen agent process.
+    resumeSession = undefined // Native picker is used only on the first launch.
+    const previousProvider = chosen.providerId
+    chosen = await startupMenu()
+    continueSession = previousProvider === chosen.providerId
+  }
+}
+
+main().then((code) => { process.exitCode = code }, (error) => {
+  // Error messages deliberately never contain credentials or raw HTTP response bodies.
+  console.error('BCCLI: ' + (error instanceof Error ? error.message : 'Unexpected error.'))
+  process.exitCode = 1
+})

package/core.mjs

@@ -0,0 +1,260 @@
+// BCCLI candidate adapter. Intentionally outside the Qwen Code engine.
+import { spawn } from 'node:child_process'
+import { createRequire } from 'node:module'
+import { homedir } from 'node:os'
+import { readFileSync, realpathSync, lstatSync } from 'node:fs'
+import { dirname, join, isAbsolute } from 'node:path'
+import { startGatewayProxy } from './proxy.mjs'
+import { GATEWAY } from './gateway.mjs'
+
+export { GATEWAY } from './gateway.mjs'
+export const DEFAULT_MODEL = 'ling-3.0-flash'
+
+// Qwen Code 0.26.3 Windows tool-loop exits cleanly with Node 24.22.1
+// (GitHub Actions), but repeatedly crashes on Windows Node 24.18.0
+// with libuv UV_HANDLE_CLOSING after delivering the tool result.
+// This guard affects ONLY the isolated candidate, not public BCCLI.
+export function assertCandidateRuntimeSupported({ platform = process.platform, nodeVersion = process.versions.node } = {}) {
+  const parts = /^(\d+)\.(\d+)\.(\d+)(?:$|[-+])/.exec(String(nodeVersion))
+  if (!parts) throw Error('Cannot verify the Node.js version for BCCLI candidate.')
+  const major = Number(parts[1]), minor = Number(parts[2]), patch = Number(parts[3])
+  if (platform === 'win32' && major === 24 && (minor < 22 || (minor === 22 && patch < 1))) {
+    throw Error('Windows Node.js ' + nodeVersion + ' may crash after coding tools. Use Node.js 24.22.1 or newer, or Node.js 22.23.4. Existing public BCCLI is unaffected.')
+  }
+}
+const MODEL_ID = /^[a-zA-Z0-9][a-zA-Z0-9._:/+-]{0,255}$/
+const ALLOWED = new Set(['models', 'run', 'chat', 'resume', 'auth', 'provider'])
+// Public BCCLI commands are not supported by this isolated candidate. Do
+// not accidentally treat them as AI prompts, which could spend user credits.
+const PUBLIC_ONLY_COMMANDS = new Set([
+  'login', 'logout', 'mcp', 'connect', 'disconnect',
+  'integrations', 'update', 'serve', 'acp', 'plugins', 'gh-bot',
+  'completion', 'stats', 'export', 'import', 'pr',
+])
+
+export function parseArgs(argv) {
+  const args = [...argv]
+  // Public BCCLI accepts options before subcommands. This candidate does
+  // not: reject those spellings rather than accidentally charging for a
+  // prompt such as "-m ling login" or "-m ling models".
+  if (!args.includes('-p') && !args.includes('--print') && !args.includes('-c') && !args.includes('--continue') && !ALLOWED.has(args[0])) {
+    let firstWord
+    for (let i = 0; i < args.length; i++) {
+      const flag = args[i]
+      if (flag === '--model' || flag === '-m' || flag === '--mcp-config') { i++; continue }
+      if (flag.startsWith('-')) continue
+      firstWord = flag
+      break
+    }
+    if (firstWord && (PUBLIC_ONLY_COMMANDS.has(firstWord) || ALLOWED.has(firstWord))) {
+      throw Error('Subcommand "' + firstWord + '" must come first in this candidate. No AI request was sent.')
+    }
+  }
+  // Check old public subcommands BEFORE rewriting -p to run: otherwise
+  // "login -p" might accidentally become a billable model prompt.
+  if (args.length && PUBLIC_ONLY_COMMANDS.has(args[0])) {
+    throw Error('Command "' + args[0] + '" is available only in public BCCLI 0.4.17, not this isolated candidate. No AI request was sent.')
+  }
+  // Qwen handles both -c and -r natively. Never combine the two session modes.
+  if (args.some(a => a === '-c' || a === '--continue') && args.some(a => a === '-r' || a === '--resume')) {
+    throw Error('Use either -c or -r, not both. No AI request was sent.')
+  }
+  // The public -c/--continue resumes the last *current-project* session.
+  // Candidate Qwen 'resume' already implements that behavior in isolation.
+  const continueFlags = args.filter(a => a === '-c' || a === '--continue')
+  if (continueFlags.length > 1) throw Error('Specify -c / --continue only once.')
+  if (continueFlags.length) {
+    if (args.some(a => a === '-p' || a === '--print')) throw Error('Combining -c with -p is not yet supported by the candidate.')
+    const otherArgs = args.filter(a => a !== continueFlags[0])
+    if (ALLOWED.has(otherArgs[0])) throw Error('-c / --continue is not compatible with an explicit subcommand; use resume directly.')
+    args.splice(args.indexOf(continueFlags[0]), 1)
+    args.unshift('resume')
+  }
+  // Keep public BCCLI's common noninteractive invocation as a safe alias.
+  // Do not imply parity with public JSON/stream-json.
+  const printIndexes = args.flatMap((arg, i) => arg === '-p' || arg === '--print' ? [i] : [])
+  if (printIndexes.length > 1) throw Error('Specify -p / --print only once.')
+  if (printIndexes.length === 1) {
+    args.splice(printIndexes[0], 1)
+    if (ALLOWED.has(args[0]) && args[0] !== 'run') {
+      throw Error('-p / --print only supports a single headless run, not ' + args[0] + '.')
+    }
+    if (args[0] !== 'run') args.unshift('run')
+  }
+  const command = ALLOWED.has(args[0]) ? args.shift() : 'chat'
+  let model, mcpConfig, provider, json = false, resumeSession
+  const prompt = []
+  while (args.length) {
+    const arg = args.shift()
+    if (arg === '-r' || arg === '--resume') {
+      if (command !== 'chat' || resumeSession !== undefined) throw Error('Use -r [SESSION_UUID] only once for interactive chat.')
+      const next = args[0]
+      if (next && !next.startsWith('-')) {
+        if (!/^[a-f\d]{8}-(?:[a-f\d]{4}-){3}[a-f\d]{12}$/i.test(next)) {
+          throw Error('Session ID must be a UUID. No AI request was sent.')
+        }
+        resumeSession = args.shift()
+      } else {
+        resumeSession = null // Native Qwen --resume with no ID opens its own session picker.
+      }
+      continue
+    }
+    if (arg === '--model' || arg === '-m') {
+      if (model !== undefined || !args.length) throw Error('Specify --model exactly once with an ID.')
+      model = args.shift()
+      continue
+    }
+    if (arg === '--provider') {
+      if (provider !== undefined || !args.length || args[0].startsWith('-')) throw Error('--provider requires exactly one provider ID.')
+      provider = args.shift()
+      continue
+    }
+    if (arg === '--mcp-config') {
+      if (mcpConfig !== undefined || !args.length || args[0].startsWith('-')) throw Error('--mcp-config requires exactly one absolute path.')
+      mcpConfig = args.shift()
+      continue
+    }
+    if (arg === '--json' && command === 'models') { json = true; continue }
+    if (arg.startsWith('-')) throw Error('Unsupported option. POC intentionally blocks passthrough flags.')
+    prompt.push(arg)
+  }
+  if (command === 'provider' && (model || mcpConfig || provider || json)) throw Error('Use: provider list | add ID | use ID | remove ID.')
+  if (command === 'auth' && (model || mcpConfig || json || prompt.join(' ') !== 'status')) throw Error('Use: auth status (offline and read-only).')
+  if (command === 'models' && (model || mcpConfig || prompt.length)) throw Error('Use: models [--json].')
+  if (resumeSession !== undefined && prompt.length) throw Error('Session picker cannot be combined with a prompt.')
+  if (command === 'run' && !prompt.length) throw Error('Use: run --model MODEL "prompt".')
+  return { command, model, json, prompt: prompt.join(' '), ...(mcpConfig ? { mcpConfig } : {}), ...(provider ? { provider } : {}), ...(resumeSession !== undefined ? { resumeSession } : {}) }
+}
+
+export async function discoverModels({ key, fetchImpl = fetch, endpoint = GATEWAY }) {
+  if (!key || !key.trim()) throw Error('BOTCONNECTOR_API_KEY is required (do not supply it as a CLI argument).')
+  let response
+  try {
+    response = await fetchImpl(endpoint + '/models', {
+      method: 'GET',
+      headers: { authorization: 'Bearer ' + key, accept: 'application/json' },
+      redirect: 'error',
+      signal: AbortSignal.timeout(12000),
+    })
+  } catch {
+    throw Error('Gateway model discovery failed; no fallback provider was used.')
+  }
+  if (!response.ok) throw Error('Gateway model discovery failed (HTTP ' + response.status + ').')
+  let payload
+  try { payload = await response.json() }
+  catch { throw Error('Gateway model discovery returned invalid JSON.') }
+  if (!Array.isArray(payload?.data)) throw Error('Gateway model discovery returned no model list.')
+  const models = new Map()
+  for (const item of payload.data) {
+    if (typeof item?.id === 'string' && MODEL_ID.test(item.id)) {
+      models.set(item.id, { id: item.id, name: typeof item.name === 'string' ? item.name : item.id })
+    }
+  }
+  if (!models.size) throw Error('No valid models available to this key.')
+  return [...models.values()]
+}
+
+export function selectModel(models, value) {
+  if (!value) throw Error('Select a model with --model ID or BOTCONNECTOR_MODEL_ID; run models first.')
+  if (!MODEL_ID.test(value)) throw Error('Invalid model ID.')
+  if (!models.some((item) => item.id === value)) throw Error('Model is not available for this BotConnector API key.')
+  return value
+}
+
+export function qwenArguments(model, prompt, endpoint = GATEWAY, { mcpConfig, continueSession = false, resumeSession } = {}) {
+  if (continueSession && resumeSession !== undefined) throw Error('Cannot combine native Qwen --continue with --resume.')
+  // --bare is security critical: project settings may otherwise override
+  // the provider baseUrl, forwarding an API key to an attacker-controlled endpoint.
+  const args = [
+    '--bare', '--auth-type', 'openai',
+    '--openai-base-url', endpoint,
+    '--model', model, '--approval-mode', 'default',
+    '--telemetry=false',
+  ]
+  // The active AI can change with /model. Do not embed the STARTUP model
+  // here: doing so would falsely identify a later selected model.
+  // The BotConnector local proxy adds the actual request model to each
+  // chat call, without forcing the AI to impersonate BCCLI.
+  args.push('--append-system-prompt',
+    'Client application: BCCLI. The upstream coding engine is Qwen Code, which is software, not the AI model answering the user. Identify the responding AI using active_model_id from current-request runtime metadata (the model can change mid-session). If no current model ID is available, state that it is unknown. Do not call the assistant Qwen Code or BCCLI as if either were the AI model, and do not infer who developed the active model from the application or engine brand.')
+  if (mcpConfig) args.push('--mcp-config', mcpConfig)
+  if (continueSession) args.push('--continue')
+  if (resumeSession !== undefined) args.push('--resume', ...(resumeSession === null ? [] : [resumeSession]))
+  if (prompt) args.push(prompt)
+  return args
+}
+
+export function childEnvironment(base, key, model, { endpoint = GATEWAY, home, providerId = 'botconnector' } = {}) {
+  const env = { ...base }
+  // Prevent inherited cross-provider auth from becoming another route or key.
+  for (const name of [
+    'QWEN_OAUTH', 'BOTCONNECTOR_API_KEY', 'OPENAI_API_KEY', 'OPENAI_BASE_URL', 'OPENAI_MODEL', 'QWEN_MODEL',
+    'ANTHROPIC_API_KEY', 'ANTHROPIC_BASE_URL', 'GEMINI_API_KEY',
+    'GOOGLE_API_KEY', 'OPENROUTER_API_KEY', 'QWENCLOUD_API_KEY',
+    'QWENCLOUD_TOKEN_PLAN_API_KEY', 'DEEPSEEK_API_KEY', 'GROQ_API_KEY', 'XAI_API_KEY',
+  ]) delete env[name]
+  env.OPENAI_API_KEY = key
+  env.OPENAI_BASE_URL = endpoint
+  env.OPENAI_MODEL = model
+  env.QWEN_MODEL = model
+  env.QWEN_HOME = home ?? (providerId === 'botconnector' ? join(homedir(), '.bccli-preview') : join(homedir(), '.bccli-preview', 'sessions-' + providerId))
+  env.BCCLI_ACTIVE_PROVIDER = providerId
+  env.CLI_TITLE = 'BCCLI - ' + process.cwd().split(/[\\/]/).filter(Boolean).at(-1)
+  env.QWEN_CODE_SKIP_UPDATE_CHECK_ONCE = 'true' // Never query or install upstream Qwen releases.
+  return env
+}
+
+// Explicit MCP servers run local commands on startup, so they must originate
+// from a config file the user deliberately placed outside any cloned project.
+// There is no automatic project/user MCP discovery when Qwen runs --bare.
+export function resolveTrustedMcpConfig(input, { home = join(homedir(), '.bccli-preview') } = {}) {
+  if (!input) return undefined
+  if (!isAbsolute(input)) throw Error('MCP config must use an absolute path.')
+  let realHome, file, stats
+  try {
+    realHome = realpathSync(home)
+    file = realpathSync(input)
+    stats = lstatSync(input)
+  } catch {
+    throw Error('MCP config must be a readable file in the owner config directory.')
+  }
+  if (stats.isSymbolicLink() || !stats.isFile() || dirname(file) !== realHome) {
+    throw Error('MCP config must be a regular file directly in the owner config directory.')
+  }
+  let config
+  try { config = JSON.parse(readFileSync(file, 'utf8')) }
+  catch { throw Error('MCP config must contain valid JSON.') }
+  if (!config || typeof config !== 'object' || Array.isArray(config) ||
+    !config.mcpServers || typeof config.mcpServers !== 'object' || Array.isArray(config.mcpServers)) {
+    throw Error('MCP config must contain mcpServers.')
+  }
+  if (Object.keys(config).some((name) => name !== 'mcpServers')) {
+    throw Error('MCP config may contain only mcpServers (no provider or credential overrides).')
+  }
+  if (!Object.keys(config.mcpServers).length) throw Error('MCP config must define at least one server.')
+  return file
+}
+
+export function resolveQwenEntrypoint() {
+  const require = createRequire(import.meta.url)
+  return join(dirname(require.resolve('@qwen-code/qwen-code/package.json')), 'cli-entry.js')
+}
+
+export async function launchQwen({ key, model, prompt, mcpConfig, continueSession = false, resumeSession, upstream = GATEWAY, providerId = 'botconnector', env = process.env, entrypoint = resolveQwenEntrypoint(), spawnImpl = spawn, proxyFactory = startGatewayProxy }) {
+  // The real API key never enters Qwen, its tools, or any MCP child process.
+  // Only this launcher retains it while the ephemeral proxy is running.
+  const proxy = await proxyFactory({ key, endpoint: upstream })
+  try {
+    const args = [entrypoint, ...qwenArguments(model, prompt, proxy.baseUrl, { mcpConfig, continueSession, resumeSession })]
+    const child = spawnImpl(process.execPath, args, {
+      cwd: process.cwd(), env: childEnvironment(env, proxy.token, model, { endpoint: proxy.baseUrl, providerId }),
+      stdio: 'inherit', windowsHide: false, shell: false,
+    })
+    return await new Promise((resolve, reject) => {
+      child.once('error', reject)
+      child.once('exit', (code, signal) => resolve(code ?? (signal ? 130 : 1)))
+    })
+  } finally {
+    await proxy.close()
+  }
+}

package/credentials.mjs

@@ -0,0 +1,52 @@
+// Credentials bridge: reuse an owner's existing BCCLI bc-cloud login without
+// another provider account or a second credential store. Never log the key.
+import { homedir } from 'node:os'
+import { join, isAbsolute } from 'node:path'
+import { lstatSync, readFileSync } from 'node:fs'
+
+const MAX_CREDENTIAL_FILE_BYTES = 64 * 1024
+
+export function botConnectorKey({ env = process.env, home = homedir() } = {}) {
+  if (typeof env.BOTCONNECTOR_API_KEY === 'string' && env.BOTCONNECTOR_API_KEY.trim()) {
+    return env.BOTCONNECTOR_API_KEY.trim()
+  }
+  const override = env.BCCLI_HOME
+  const base = override ? override : join(home, '.bccli')
+  if (!isAbsolute(base)) throw Error('BCCLI_HOME must be an absolute directory.')
+  const path = join(base, 'credentials')
+  let info
+  try { info = lstatSync(path) }
+  catch (error) {
+    if (error?.code === 'ENOENT') {
+      throw Error('No BotConnector login. Run bccli login to save your bc-cloud key, or set BOTCONNECTOR_API_KEY.')
+    }
+    throw Error('Cannot inspect the existing BCCLI credentials file.')
+  }
+  if (!info.isFile() || info.isSymbolicLink() || info.size > MAX_CREDENTIAL_FILE_BYTES) {
+    throw Error('Invalid BCCLI credentials file; do not follow symlinks or oversized files.')
+  }
+  let data
+  try { data = JSON.parse(readFileSync(path, 'utf8')) }
+  catch { throw Error('Existing BCCLI credentials are not valid JSON.') }
+  const key = data && typeof data === 'object' && !Array.isArray(data) ? data['bc-cloud'] : null
+  if (typeof key !== 'string' || !key.trim()) {
+    throw Error('No bc-cloud key saved. Run bccli login or set BOTCONNECTOR_API_KEY.')
+  }
+  return key.trim()
+}
+
+/**
+ * Offline, read-only status. Reuse the public BCCLI bc-cloud login; never
+ * duplicate, rewrite, mask-print, or migrate the long-lived secret.
+ * "configured" means a credential exists, not that Gateway accepted it.
+ */
+export function botConnectorCredentialStatus({ env = process.env, home = homedir() } = {}) {
+  const viaEnvironment = typeof env.BOTCONNECTOR_API_KEY === 'string' && !!env.BOTCONNECTOR_API_KEY.trim()
+  try {
+    botConnectorKey({ env, home })
+    return { configured: true, source: viaEnvironment ? 'environment' : 'public-bccli' }
+  } catch (error) {
+    // All botConnectorKey errors are intentionally static; do not include keys.
+    return { configured: false, source: 'none', reason: error instanceof Error ? error.message : 'Credential inspection failed.' }
+  }
+}

package/gateway.mjs

@@ -0,0 +1,2 @@
+// Stable, audited BotConnector destination. Never accept this from a project settings file.
+export const GATEWAY = 'https://api.botconnector.id/v1'

package/model-command.mjs

@@ -0,0 +1,61 @@
+// Generated, version-pinned Qwen slash command overlay for /model.
+// Fetches the authenticated model catalog from the existing local BotConnector
+// proxy on each invocation. Selection changes Qwen Config in the current
+// session; it never opens upstream provider settings or writes project config.
+export const BCCLI_MODEL_COMMAND = String.raw`var bccliModelLastList=[];var modelCommand={name:"model",get description(){return "Choose an AI model from the active provider"},argumentHint:"[number|model-id|search WORD|page N]",kind:"built-in",supportedModes:["interactive","non_interactive","acp"],action:__name(async(context,argumentText)=>{
+  var response=(type,content)=>({type:"message",messageType:type,content});
+  try{
+    var base=process.env.OPENAI_BASE_URL||"";
+    var key=process.env.OPENAI_API_KEY||"";
+    if(!/^http:\/\/127\.0\.0\.1:[0-9]{1,5}\/v1$/.test(base)||!key){
+      return response("error","BCCLI requires an authenticated local provider session.");
+    }
+    var result=await fetch(base+"/models",{method:"GET",headers:{Authorization:"Bearer "+key,Accept:"application/json"},redirect:"error",signal:AbortSignal.timeout(10000)});
+    if(!result.ok)return response("error","Provider model catalog is unavailable (HTTP "+result.status+"). No provider fallback.");
+    var payload=await result.json();
+    if(!Array.isArray(payload?.data))return response("error","Invalid provider model catalog.");
+    var catalog=new Map();
+    for(var entry of payload.data){
+      if(typeof entry?.id==="string" && /^[a-zA-Z0-9][a-zA-Z0-9._:/+-]{0,255}$/.test(entry.id) && !catalog.has(entry.id)){
+        catalog.set(entry.id,{id:entry.id,name:typeof entry.name==="string"?entry.name.slice(0,90):entry.id});
+      }
+    }
+    var all=[...catalog.values()].sort((a,b)=>a.id.localeCompare(b.id));
+    if(!all.length)return response("error","No provider models available for this API key.");
+    var text=String(context.invocation?.args||argumentText||"").trim();
+    var config=context.services?.config;
+    if(!config||typeof config.setModel!=="function")return response("error","BCCLI model switch is unavailable in this session.");
+    var current=config.getModel?.()||process.env.OPENAI_MODEL||"(unknown)";
+    var list=(entries,page=1)=>{
+      bccliModelLastList=entries.map(x=>x.id);
+      var size=12;
+      var pages=Math.max(1,Math.ceil(entries.length/size));
+      if(!Number.isSafeInteger(page)||page<1||page>pages)return response("error","Invalid page. Use /model page 1 ... "+pages);
+      var start=(page-1)*size;
+      var rows=entries.slice(start,start+size).map((x,i)=>(start+i+1)+". "+x.id+(x.id===current?"  [ACTIVE]":""));
+      return response("info","Provider AI models ("+entries.length+" available; page "+page+"/"+pages+")\nActive: "+current+"\n\n"+rows.join("\n")+"\n\nUse /model NUMBER or /model MODEL_ID to switch now; /model page N; /model search KEYWORD. To change providers, use bccli provider use PROVIDER before a new chat.");
+    };
+    if(!text)return list(all);
+    var page=text.match(/^page\s+([0-9]+)$/i);
+    if(page)return list(all,Number(page[1]));
+    var search=text.match(/^search\s+(.{1,80})$/i);
+    if(search)return list(all.filter(x=>x.id.toLowerCase().includes(search[1].toLowerCase())||x.name.toLowerCase().includes(search[1].toLowerCase())));
+    var item;
+    if(/^[0-9]+$/.test(text)){
+      var index=Number(text);
+      item=Number.isSafeInteger(index)&&index>=1?catalog.get(bccliModelLastList[index-1]||all[index-1]?.id):undefined;
+    }else if(/^[a-zA-Z0-9][a-zA-Z0-9._:/+-]{0,255}$/.test(text)){
+      item=catalog.get(text);
+    }
+    if(!item)return response("error","That model is not available in your active provider catalog. Run /model to view allowed models.");
+    if(item.id===current)return response("info","Already using "+item.id+" via the active provider.");
+    // Raw model IDs are supported by Config.setModel; this preserves OpenAI
+    // auth/loopback proxy instead of switching providers. It refreshes the
+    // live content generator, so the next message uses the new model.
+    await config.setModel(item.id,{reason:"bccli-gateway-model-picker"});
+    if(config.getModel?.()!==item.id)return response("error","Model switch did not take effect; previous model preserved.");
+    return response("info","Switched to "+item.id+" in the current session. Routing and billing remain with the active provider.");
+  }catch{
+    return response("error","Provider model selection failed; no upstream provider fallback was used.");
+  }
+},"action")};`

package/package.json

@@ -1,77 +1,53 @@
 {
   "name": "@botconnector/bccli",
-  "version": "0.4.17",
-  "description": "BCCLI — BotConnector AI coding agent for the terminal",
+  "version": "0.5.0-rc.4",
+  "description": "BCCLI | BotConnector coding agent powered by Qwen Code",
   "type": "module",
   "bin": {
-    "bccli": "dist/cli.js"
+    "bccli": "./cli.mjs"
   },
-  "files": [
-    "dist"
-  ],
   "engines": {
     "node": ">=22"
   },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/farijarifriyanto-debug/bccli.git"
-  },
-  "license": "MIT",
-  "scripts": {
-    "build": "tsup && tsc -p tsconfig.build.json",
-    "typecheck": "tsc --noEmit",
-    "lint": "biome lint --error-on-warnings src test",
-    "test": "vitest run",
-    "coverage": "vitest run --coverage"
-  },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.32.1",
-    "diff": "^9.0.0",
-    "ink": "^8.0.0",
-    "openai": "^7.27.0",
-    "react": "^19.3.0",
-    "undici": "^8.12.1",
-    "ws": "^8.22.0",
-    "yaml": "^2.9.1",
-    "zod": "^4.6.5"
+    "@qwen-code/qwen-code": "0.26.3"
   },
-  "devDependencies": {
-    "@biomejs/biome": "^2.5.14",
-    "@types/node": "^26.6.3",
-    "@types/react": "^19.3.0",
-    "@types/ws": "^8.18.2",
-    "@vitest/coverage-v8": "^5.0.5",
-    "ink-testing-library": "^4.0.0",
-    "tsup": "^9.0.0",
-    "typescript": "^7.0.2",
-    "vitest": "^5.0.2"
+  "scripts": {
+    "test": "node --test test/*.test.mjs",
+    "test:security": "node --test test/security-e2e.test.mjs test/proxy-mcp-e2e.test.mjs test/trusted-mcp.test.mjs test/proxy.test.mjs",
+    "test:integration": "node --test test-integration/*.test.mjs",
+    "build": "node --check cli.mjs && node --check core.mjs && node --check proxy.mjs && node --check gateway.mjs && node --check branding.mjs && node --check credentials.mjs && node --check model-command.mjs && node --check providers.mjs && node --check provider-cli.mjs && node --check startup-menu.mjs",
+    "rebuild": "npm run build && npm test && npm pack --ignore-scripts"
   },
+  "license": "Apache-2.0",
   "overrides": {
-    "esbuild": "0.28.2"
-  },
-  "main": "dist/sdk.js",
-  "types": "dist/sdk.d.ts",
-  "exports": {
-    ".": {
-      "types": "./dist/sdk.d.ts",
-      "default": "./dist/sdk.js"
-    }
+    "sharp": "0.35.5"
   },
-  "keywords": [
-    "bccli",
-    "ai",
-    "coding-agent",
-    "agent",
-    "cli",
-    "tui",
-    "terminal",
-    "mcp",
-    "openai",
-    "indonesia"
+  "files": [
+    "LICENSE",
+    "THIRD_PARTY_NOTICES.md",
+    "cli.mjs",
+    "core.mjs",
+    "proxy.mjs",
+    "gateway.mjs",
+    "branding.mjs",
+    "credentials.mjs",
+    "model-command.mjs",
+    "providers.mjs",
+    "provider-cli.mjs",
+    "startup-menu.mjs"
   ],
-  "author": "BotConnector (https://botconnector.id)",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/farijarifriyanto-debug/bccli-qwen-engine.git"
+  },
+  "homepage": "https://github.com/farijarifriyanto-debug/bccli#readme",
   "bugs": {
     "url": "https://github.com/farijarifriyanto-debug/bccli/issues"
   },
-  "homepage": "https://github.com/farijarifriyanto-debug/bccli#readme"
+  "author": "BICO Inovasi Digital / BotConnector",
+  "publishConfig": {
+    "access": "public",
+    "tag": "next"
+  }
 }