@botconnector/bccli 0.5.0-rc.4 → 0.5.1

package/core.mjs

@@ -1,260 +0,0 @@
-// BCCLI candidate adapter. Intentionally outside the Qwen Code engine.
-import { spawn } from 'node:child_process'
-import { createRequire } from 'node:module'
-import { homedir } from 'node:os'
-import { readFileSync, realpathSync, lstatSync } from 'node:fs'
-import { dirname, join, isAbsolute } from 'node:path'
-import { startGatewayProxy } from './proxy.mjs'
-import { GATEWAY } from './gateway.mjs'
-
-export { GATEWAY } from './gateway.mjs'
-export const DEFAULT_MODEL = 'ling-3.0-flash'
-
-// Qwen Code 0.26.3 Windows tool-loop exits cleanly with Node 24.22.1
-// (GitHub Actions), but repeatedly crashes on Windows Node 24.18.0
-// with libuv UV_HANDLE_CLOSING after delivering the tool result.
-// This guard affects ONLY the isolated candidate, not public BCCLI.
-export function assertCandidateRuntimeSupported({ platform = process.platform, nodeVersion = process.versions.node } = {}) {
-  const parts = /^(\d+)\.(\d+)\.(\d+)(?:$|[-+])/.exec(String(nodeVersion))
-  if (!parts) throw Error('Cannot verify the Node.js version for BCCLI candidate.')
-  const major = Number(parts[1]), minor = Number(parts[2]), patch = Number(parts[3])
-  if (platform === 'win32' && major === 24 && (minor < 22 || (minor === 22 && patch < 1))) {
-    throw Error('Windows Node.js ' + nodeVersion + ' may crash after coding tools. Use Node.js 24.22.1 or newer, or Node.js 22.23.4. Existing public BCCLI is unaffected.')
-  }
-}
-const MODEL_ID = /^[a-zA-Z0-9][a-zA-Z0-9._:/+-]{0,255}$/
-const ALLOWED = new Set(['models', 'run', 'chat', 'resume', 'auth', 'provider'])
-// Public BCCLI commands are not supported by this isolated candidate. Do
-// not accidentally treat them as AI prompts, which could spend user credits.
-const PUBLIC_ONLY_COMMANDS = new Set([
-  'login', 'logout', 'mcp', 'connect', 'disconnect',
-  'integrations', 'update', 'serve', 'acp', 'plugins', 'gh-bot',
-  'completion', 'stats', 'export', 'import', 'pr',
-])
-
-export function parseArgs(argv) {
-  const args = [...argv]
-  // Public BCCLI accepts options before subcommands. This candidate does
-  // not: reject those spellings rather than accidentally charging for a
-  // prompt such as "-m ling login" or "-m ling models".
-  if (!args.includes('-p') && !args.includes('--print') && !args.includes('-c') && !args.includes('--continue') && !ALLOWED.has(args[0])) {
-    let firstWord
-    for (let i = 0; i < args.length; i++) {
-      const flag = args[i]
-      if (flag === '--model' || flag === '-m' || flag === '--mcp-config') { i++; continue }
-      if (flag.startsWith('-')) continue
-      firstWord = flag
-      break
-    }
-    if (firstWord && (PUBLIC_ONLY_COMMANDS.has(firstWord) || ALLOWED.has(firstWord))) {
-      throw Error('Subcommand "' + firstWord + '" must come first in this candidate. No AI request was sent.')
-    }
-  }
-  // Check old public subcommands BEFORE rewriting -p to run: otherwise
-  // "login -p" might accidentally become a billable model prompt.
-  if (args.length && PUBLIC_ONLY_COMMANDS.has(args[0])) {
-    throw Error('Command "' + args[0] + '" is available only in public BCCLI 0.4.17, not this isolated candidate. No AI request was sent.')
-  }
-  // Qwen handles both -c and -r natively. Never combine the two session modes.
-  if (args.some(a => a === '-c' || a === '--continue') && args.some(a => a === '-r' || a === '--resume')) {
-    throw Error('Use either -c or -r, not both. No AI request was sent.')
-  }
-  // The public -c/--continue resumes the last *current-project* session.
-  // Candidate Qwen 'resume' already implements that behavior in isolation.
-  const continueFlags = args.filter(a => a === '-c' || a === '--continue')
-  if (continueFlags.length > 1) throw Error('Specify -c / --continue only once.')
-  if (continueFlags.length) {
-    if (args.some(a => a === '-p' || a === '--print')) throw Error('Combining -c with -p is not yet supported by the candidate.')
-    const otherArgs = args.filter(a => a !== continueFlags[0])
-    if (ALLOWED.has(otherArgs[0])) throw Error('-c / --continue is not compatible with an explicit subcommand; use resume directly.')
-    args.splice(args.indexOf(continueFlags[0]), 1)
-    args.unshift('resume')
-  }
-  // Keep public BCCLI's common noninteractive invocation as a safe alias.
-  // Do not imply parity with public JSON/stream-json.
-  const printIndexes = args.flatMap((arg, i) => arg === '-p' || arg === '--print' ? [i] : [])
-  if (printIndexes.length > 1) throw Error('Specify -p / --print only once.')
-  if (printIndexes.length === 1) {
-    args.splice(printIndexes[0], 1)
-    if (ALLOWED.has(args[0]) && args[0] !== 'run') {
-      throw Error('-p / --print only supports a single headless run, not ' + args[0] + '.')
-    }
-    if (args[0] !== 'run') args.unshift('run')
-  }
-  const command = ALLOWED.has(args[0]) ? args.shift() : 'chat'
-  let model, mcpConfig, provider, json = false, resumeSession
-  const prompt = []
-  while (args.length) {
-    const arg = args.shift()
-    if (arg === '-r' || arg === '--resume') {
-      if (command !== 'chat' || resumeSession !== undefined) throw Error('Use -r [SESSION_UUID] only once for interactive chat.')
-      const next = args[0]
-      if (next && !next.startsWith('-')) {
-        if (!/^[a-f\d]{8}-(?:[a-f\d]{4}-){3}[a-f\d]{12}$/i.test(next)) {
-          throw Error('Session ID must be a UUID. No AI request was sent.')
-        }
-        resumeSession = args.shift()
-      } else {
-        resumeSession = null // Native Qwen --resume with no ID opens its own session picker.
-      }
-      continue
-    }
-    if (arg === '--model' || arg === '-m') {
-      if (model !== undefined || !args.length) throw Error('Specify --model exactly once with an ID.')
-      model = args.shift()
-      continue
-    }
-    if (arg === '--provider') {
-      if (provider !== undefined || !args.length || args[0].startsWith('-')) throw Error('--provider requires exactly one provider ID.')
-      provider = args.shift()
-      continue
-    }
-    if (arg === '--mcp-config') {
-      if (mcpConfig !== undefined || !args.length || args[0].startsWith('-')) throw Error('--mcp-config requires exactly one absolute path.')
-      mcpConfig = args.shift()
-      continue
-    }
-    if (arg === '--json' && command === 'models') { json = true; continue }
-    if (arg.startsWith('-')) throw Error('Unsupported option. POC intentionally blocks passthrough flags.')
-    prompt.push(arg)
-  }
-  if (command === 'provider' && (model || mcpConfig || provider || json)) throw Error('Use: provider list | add ID | use ID | remove ID.')
-  if (command === 'auth' && (model || mcpConfig || json || prompt.join(' ') !== 'status')) throw Error('Use: auth status (offline and read-only).')
-  if (command === 'models' && (model || mcpConfig || prompt.length)) throw Error('Use: models [--json].')
-  if (resumeSession !== undefined && prompt.length) throw Error('Session picker cannot be combined with a prompt.')
-  if (command === 'run' && !prompt.length) throw Error('Use: run --model MODEL "prompt".')
-  return { command, model, json, prompt: prompt.join(' '), ...(mcpConfig ? { mcpConfig } : {}), ...(provider ? { provider } : {}), ...(resumeSession !== undefined ? { resumeSession } : {}) }
-}
-
-export async function discoverModels({ key, fetchImpl = fetch, endpoint = GATEWAY }) {
-  if (!key || !key.trim()) throw Error('BOTCONNECTOR_API_KEY is required (do not supply it as a CLI argument).')
-  let response
-  try {
-    response = await fetchImpl(endpoint + '/models', {
-      method: 'GET',
-      headers: { authorization: 'Bearer ' + key, accept: 'application/json' },
-      redirect: 'error',
-      signal: AbortSignal.timeout(12000),
-    })
-  } catch {
-    throw Error('Gateway model discovery failed; no fallback provider was used.')
-  }
-  if (!response.ok) throw Error('Gateway model discovery failed (HTTP ' + response.status + ').')
-  let payload
-  try { payload = await response.json() }
-  catch { throw Error('Gateway model discovery returned invalid JSON.') }
-  if (!Array.isArray(payload?.data)) throw Error('Gateway model discovery returned no model list.')
-  const models = new Map()
-  for (const item of payload.data) {
-    if (typeof item?.id === 'string' && MODEL_ID.test(item.id)) {
-      models.set(item.id, { id: item.id, name: typeof item.name === 'string' ? item.name : item.id })
-    }
-  }
-  if (!models.size) throw Error('No valid models available to this key.')
-  return [...models.values()]
-}
-
-export function selectModel(models, value) {
-  if (!value) throw Error('Select a model with --model ID or BOTCONNECTOR_MODEL_ID; run models first.')
-  if (!MODEL_ID.test(value)) throw Error('Invalid model ID.')
-  if (!models.some((item) => item.id === value)) throw Error('Model is not available for this BotConnector API key.')
-  return value
-}
-
-export function qwenArguments(model, prompt, endpoint = GATEWAY, { mcpConfig, continueSession = false, resumeSession } = {}) {
-  if (continueSession && resumeSession !== undefined) throw Error('Cannot combine native Qwen --continue with --resume.')
-  // --bare is security critical: project settings may otherwise override
-  // the provider baseUrl, forwarding an API key to an attacker-controlled endpoint.
-  const args = [
-    '--bare', '--auth-type', 'openai',
-    '--openai-base-url', endpoint,
-    '--model', model, '--approval-mode', 'default',
-    '--telemetry=false',
-  ]
-  // The active AI can change with /model. Do not embed the STARTUP model
-  // here: doing so would falsely identify a later selected model.
-  // The BotConnector local proxy adds the actual request model to each
-  // chat call, without forcing the AI to impersonate BCCLI.
-  args.push('--append-system-prompt',
-    'Client application: BCCLI. The upstream coding engine is Qwen Code, which is software, not the AI model answering the user. Identify the responding AI using active_model_id from current-request runtime metadata (the model can change mid-session). If no current model ID is available, state that it is unknown. Do not call the assistant Qwen Code or BCCLI as if either were the AI model, and do not infer who developed the active model from the application or engine brand.')
-  if (mcpConfig) args.push('--mcp-config', mcpConfig)
-  if (continueSession) args.push('--continue')
-  if (resumeSession !== undefined) args.push('--resume', ...(resumeSession === null ? [] : [resumeSession]))
-  if (prompt) args.push(prompt)
-  return args
-}
-
-export function childEnvironment(base, key, model, { endpoint = GATEWAY, home, providerId = 'botconnector' } = {}) {
-  const env = { ...base }
-  // Prevent inherited cross-provider auth from becoming another route or key.
-  for (const name of [
-    'QWEN_OAUTH', 'BOTCONNECTOR_API_KEY', 'OPENAI_API_KEY', 'OPENAI_BASE_URL', 'OPENAI_MODEL', 'QWEN_MODEL',
-    'ANTHROPIC_API_KEY', 'ANTHROPIC_BASE_URL', 'GEMINI_API_KEY',
-    'GOOGLE_API_KEY', 'OPENROUTER_API_KEY', 'QWENCLOUD_API_KEY',
-    'QWENCLOUD_TOKEN_PLAN_API_KEY', 'DEEPSEEK_API_KEY', 'GROQ_API_KEY', 'XAI_API_KEY',
-  ]) delete env[name]
-  env.OPENAI_API_KEY = key
-  env.OPENAI_BASE_URL = endpoint
-  env.OPENAI_MODEL = model
-  env.QWEN_MODEL = model
-  env.QWEN_HOME = home ?? (providerId === 'botconnector' ? join(homedir(), '.bccli-preview') : join(homedir(), '.bccli-preview', 'sessions-' + providerId))
-  env.BCCLI_ACTIVE_PROVIDER = providerId
-  env.CLI_TITLE = 'BCCLI - ' + process.cwd().split(/[\\/]/).filter(Boolean).at(-1)
-  env.QWEN_CODE_SKIP_UPDATE_CHECK_ONCE = 'true' // Never query or install upstream Qwen releases.
-  return env
-}
-
-// Explicit MCP servers run local commands on startup, so they must originate
-// from a config file the user deliberately placed outside any cloned project.
-// There is no automatic project/user MCP discovery when Qwen runs --bare.
-export function resolveTrustedMcpConfig(input, { home = join(homedir(), '.bccli-preview') } = {}) {
-  if (!input) return undefined
-  if (!isAbsolute(input)) throw Error('MCP config must use an absolute path.')
-  let realHome, file, stats
-  try {
-    realHome = realpathSync(home)
-    file = realpathSync(input)
-    stats = lstatSync(input)
-  } catch {
-    throw Error('MCP config must be a readable file in the owner config directory.')
-  }
-  if (stats.isSymbolicLink() || !stats.isFile() || dirname(file) !== realHome) {
-    throw Error('MCP config must be a regular file directly in the owner config directory.')
-  }
-  let config
-  try { config = JSON.parse(readFileSync(file, 'utf8')) }
-  catch { throw Error('MCP config must contain valid JSON.') }
-  if (!config || typeof config !== 'object' || Array.isArray(config) ||
-    !config.mcpServers || typeof config.mcpServers !== 'object' || Array.isArray(config.mcpServers)) {
-    throw Error('MCP config must contain mcpServers.')
-  }
-  if (Object.keys(config).some((name) => name !== 'mcpServers')) {
-    throw Error('MCP config may contain only mcpServers (no provider or credential overrides).')
-  }
-  if (!Object.keys(config.mcpServers).length) throw Error('MCP config must define at least one server.')
-  return file
-}
-
-export function resolveQwenEntrypoint() {
-  const require = createRequire(import.meta.url)
-  return join(dirname(require.resolve('@qwen-code/qwen-code/package.json')), 'cli-entry.js')
-}
-
-export async function launchQwen({ key, model, prompt, mcpConfig, continueSession = false, resumeSession, upstream = GATEWAY, providerId = 'botconnector', env = process.env, entrypoint = resolveQwenEntrypoint(), spawnImpl = spawn, proxyFactory = startGatewayProxy }) {
-  // The real API key never enters Qwen, its tools, or any MCP child process.
-  // Only this launcher retains it while the ephemeral proxy is running.
-  const proxy = await proxyFactory({ key, endpoint: upstream })
-  try {
-    const args = [entrypoint, ...qwenArguments(model, prompt, proxy.baseUrl, { mcpConfig, continueSession, resumeSession })]
-    const child = spawnImpl(process.execPath, args, {
-      cwd: process.cwd(), env: childEnvironment(env, proxy.token, model, { endpoint: proxy.baseUrl, providerId }),
-      stdio: 'inherit', windowsHide: false, shell: false,
-    })
-    return await new Promise((resolve, reject) => {
-      child.once('error', reject)
-      child.once('exit', (code, signal) => resolve(code ?? (signal ? 130 : 1)))
-    })
-  } finally {
-    await proxy.close()
-  }
-}

package/credentials.mjs

@@ -1,52 +0,0 @@
-// Credentials bridge: reuse an owner's existing BCCLI bc-cloud login without
-// another provider account or a second credential store. Never log the key.
-import { homedir } from 'node:os'
-import { join, isAbsolute } from 'node:path'
-import { lstatSync, readFileSync } from 'node:fs'
-
-const MAX_CREDENTIAL_FILE_BYTES = 64 * 1024
-
-export function botConnectorKey({ env = process.env, home = homedir() } = {}) {
-  if (typeof env.BOTCONNECTOR_API_KEY === 'string' && env.BOTCONNECTOR_API_KEY.trim()) {
-    return env.BOTCONNECTOR_API_KEY.trim()
-  }
-  const override = env.BCCLI_HOME
-  const base = override ? override : join(home, '.bccli')
-  if (!isAbsolute(base)) throw Error('BCCLI_HOME must be an absolute directory.')
-  const path = join(base, 'credentials')
-  let info
-  try { info = lstatSync(path) }
-  catch (error) {
-    if (error?.code === 'ENOENT') {
-      throw Error('No BotConnector login. Run bccli login to save your bc-cloud key, or set BOTCONNECTOR_API_KEY.')
-    }
-    throw Error('Cannot inspect the existing BCCLI credentials file.')
-  }
-  if (!info.isFile() || info.isSymbolicLink() || info.size > MAX_CREDENTIAL_FILE_BYTES) {
-    throw Error('Invalid BCCLI credentials file; do not follow symlinks or oversized files.')
-  }
-  let data
-  try { data = JSON.parse(readFileSync(path, 'utf8')) }
-  catch { throw Error('Existing BCCLI credentials are not valid JSON.') }
-  const key = data && typeof data === 'object' && !Array.isArray(data) ? data['bc-cloud'] : null
-  if (typeof key !== 'string' || !key.trim()) {
-    throw Error('No bc-cloud key saved. Run bccli login or set BOTCONNECTOR_API_KEY.')
-  }
-  return key.trim()
-}
-
-/**
- * Offline, read-only status. Reuse the public BCCLI bc-cloud login; never
- * duplicate, rewrite, mask-print, or migrate the long-lived secret.
- * "configured" means a credential exists, not that Gateway accepted it.
- */
-export function botConnectorCredentialStatus({ env = process.env, home = homedir() } = {}) {
-  const viaEnvironment = typeof env.BOTCONNECTOR_API_KEY === 'string' && !!env.BOTCONNECTOR_API_KEY.trim()
-  try {
-    botConnectorKey({ env, home })
-    return { configured: true, source: viaEnvironment ? 'environment' : 'public-bccli' }
-  } catch (error) {
-    // All botConnectorKey errors are intentionally static; do not include keys.
-    return { configured: false, source: 'none', reason: error instanceof Error ? error.message : 'Credential inspection failed.' }
-  }
-}

package/gateway.mjs

@@ -1,2 +0,0 @@
-// Stable, audited BotConnector destination. Never accept this from a project settings file.
-export const GATEWAY = 'https://api.botconnector.id/v1'

package/model-command.mjs

@@ -1,61 +0,0 @@
-// Generated, version-pinned Qwen slash command overlay for /model.
-// Fetches the authenticated model catalog from the existing local BotConnector
-// proxy on each invocation. Selection changes Qwen Config in the current
-// session; it never opens upstream provider settings or writes project config.
-export const BCCLI_MODEL_COMMAND = String.raw`var bccliModelLastList=[];var modelCommand={name:"model",get description(){return "Choose an AI model from the active provider"},argumentHint:"[number|model-id|search WORD|page N]",kind:"built-in",supportedModes:["interactive","non_interactive","acp"],action:__name(async(context,argumentText)=>{
-  var response=(type,content)=>({type:"message",messageType:type,content});
-  try{
-    var base=process.env.OPENAI_BASE_URL||"";
-    var key=process.env.OPENAI_API_KEY||"";
-    if(!/^http:\/\/127\.0\.0\.1:[0-9]{1,5}\/v1$/.test(base)||!key){
-      return response("error","BCCLI requires an authenticated local provider session.");
-    }
-    var result=await fetch(base+"/models",{method:"GET",headers:{Authorization:"Bearer "+key,Accept:"application/json"},redirect:"error",signal:AbortSignal.timeout(10000)});
-    if(!result.ok)return response("error","Provider model catalog is unavailable (HTTP "+result.status+"). No provider fallback.");
-    var payload=await result.json();
-    if(!Array.isArray(payload?.data))return response("error","Invalid provider model catalog.");
-    var catalog=new Map();
-    for(var entry of payload.data){
-      if(typeof entry?.id==="string" && /^[a-zA-Z0-9][a-zA-Z0-9._:/+-]{0,255}$/.test(entry.id) && !catalog.has(entry.id)){
-        catalog.set(entry.id,{id:entry.id,name:typeof entry.name==="string"?entry.name.slice(0,90):entry.id});
-      }
-    }
-    var all=[...catalog.values()].sort((a,b)=>a.id.localeCompare(b.id));
-    if(!all.length)return response("error","No provider models available for this API key.");
-    var text=String(context.invocation?.args||argumentText||"").trim();
-    var config=context.services?.config;
-    if(!config||typeof config.setModel!=="function")return response("error","BCCLI model switch is unavailable in this session.");
-    var current=config.getModel?.()||process.env.OPENAI_MODEL||"(unknown)";
-    var list=(entries,page=1)=>{
-      bccliModelLastList=entries.map(x=>x.id);
-      var size=12;
-      var pages=Math.max(1,Math.ceil(entries.length/size));
-      if(!Number.isSafeInteger(page)||page<1||page>pages)return response("error","Invalid page. Use /model page 1 ... "+pages);
-      var start=(page-1)*size;
-      var rows=entries.slice(start,start+size).map((x,i)=>(start+i+1)+". "+x.id+(x.id===current?"  [ACTIVE]":""));
-      return response("info","Provider AI models ("+entries.length+" available; page "+page+"/"+pages+")\nActive: "+current+"\n\n"+rows.join("\n")+"\n\nUse /model NUMBER or /model MODEL_ID to switch now; /model page N; /model search KEYWORD. To change providers, use bccli provider use PROVIDER before a new chat.");
-    };
-    if(!text)return list(all);
-    var page=text.match(/^page\s+([0-9]+)$/i);
-    if(page)return list(all,Number(page[1]));
-    var search=text.match(/^search\s+(.{1,80})$/i);
-    if(search)return list(all.filter(x=>x.id.toLowerCase().includes(search[1].toLowerCase())||x.name.toLowerCase().includes(search[1].toLowerCase())));
-    var item;
-    if(/^[0-9]+$/.test(text)){
-      var index=Number(text);
-      item=Number.isSafeInteger(index)&&index>=1?catalog.get(bccliModelLastList[index-1]||all[index-1]?.id):undefined;
-    }else if(/^[a-zA-Z0-9][a-zA-Z0-9._:/+-]{0,255}$/.test(text)){
-      item=catalog.get(text);
-    }
-    if(!item)return response("error","That model is not available in your active provider catalog. Run /model to view allowed models.");
-    if(item.id===current)return response("info","Already using "+item.id+" via the active provider.");
-    // Raw model IDs are supported by Config.setModel; this preserves OpenAI
-    // auth/loopback proxy instead of switching providers. It refreshes the
-    // live content generator, so the next message uses the new model.
-    await config.setModel(item.id,{reason:"bccli-gateway-model-picker"});
-    if(config.getModel?.()!==item.id)return response("error","Model switch did not take effect; previous model preserved.");
-    return response("info","Switched to "+item.id+" in the current session. Routing and billing remain with the active provider.");
-  }catch{
-    return response("error","Provider model selection failed; no upstream provider fallback was used.");
-  }
-},"action")};`

package/provider-cli.mjs

@@ -1,77 +0,0 @@
-// Provider management is an explicitly invoked CLI operation, not a model prompt.
-import { PROVIDERS, isConfigured, providerDefinition, removeProvider, saveProviderKey, selectedProvider, useProvider } from './providers.mjs'
-
-export async function hiddenApiKey({ input = process.stdin, output = process.stdout } = {}) {
-  if (!input.isTTY || typeof input.setRawMode !== 'function') throw Error('Provider add requires an interactive terminal to enter a hidden API key.')
-  output.write('Paste API key (hidden; Enter to save, Ctrl+C to cancel): ')
-  return new Promise((resolve, reject) => {
-    let value = ''
-    const finish = (error) => {
-      input.off('data', onData)
-      input.off('end', onEnd)
-      input.setRawMode(false)
-      input.pause()
-      output.write('\n')
-      error ? reject(error) : resolve(value)
-    }
-    const onEnd = () => finish(Error('API key input ended before confirmation.'))
-    const onData = buffer => {
-      for (const ch of buffer.toString('utf8')) {
-        if (ch === '\u0003') return finish(Error('Cancelled.'))
-        if (ch === '\r' || ch === '\n') return finish(value ? null : Error('Empty API key; nothing saved.'))
-        if (ch === '\u007f' || ch === '\b') { value = value.slice(0, -1); continue }
-        if (ch.charCodeAt(0) < 32) continue
-        value += ch
-        if (value.length > 8192) return finish(Error('API key is too long; nothing saved.'))
-      }
-    }
-    input.on('data', onData)
-    input.on('end', onEnd)
-    input.setRawMode(true)
-    input.resume()
-  })
-}
-
-export async function runProviderCommand(words, {
-  env = process.env,
-  getKey = hiddenApiKey,
-  out = text => console.log(text),
-  save = saveProviderKey,
-  select = useProvider,
-  remove = removeProvider,
-  configured = isConfigured,
-  active = selectedProvider,
-} = {}) {
-  const [action = 'list', id, ...extra] = words
-  if (!['list', 'add', 'use', 'remove'].includes(action) || (action === 'list' ? words.length > 1 : !id || extra.length)) {
-    throw Error('Use: provider list | add PROVIDER | use PROVIDER | remove PROVIDER.')
-  }
-  if (action === 'list') {
-    const current = active({env})
-    for (const [name, info] of Object.entries(PROVIDERS)) {
-      out(name + ' - ' + info.name + ' [' + (configured(name,{env}) ? 'configured' : 'no key') + ']' + (name === current ? ' [ACTIVE]' : ''))
-    }
-    out('Add: bccli provider add openrouter; select: bccli provider use openrouter')
-    out('Provider keys are stored encrypted for your Windows user. Other systems: use the provider environment variable.')
-    return 0
-  }
-  providerDefinition(id)
-  if (action === 'add') {
-    if (id === 'botconnector') throw Error('For BotConnector, use the existing "bccli-legacy login bc-cloud".')
-    out('Provider: ' + PROVIDERS[id].name + ' (direct API; provider billing and terms apply).')
-    const key = await getKey()
-    save(id, key)
-    select(id,{env})
-    out('API key securely saved and provider selected: ' + id + '. Key was not printed. No AI request sent.')
-    out('Run: bccli models, then bccli chat --model MODEL_ID')
-    return 0
-  }
-  if (action === 'use') {
-    select(id,{env})
-    out('Active provider: ' + id + '. New sessions only; existing chats are unchanged.')
-    return 0
-  }
-  remove(id,{env})
-  out('Saved provider key removed for ' + id + '. Environment variables, if set, are not changed.')
-  return 0
-}

package/providers.mjs

@@ -1,166 +0,0 @@
-// BCCLI Preview provider keys: explicit OpenAI-compatible presets only.
-// Windows stores provider API keys as per-user DPAPI encrypted blobs. The
-// upstream Qwen process receives only an ephemeral loopback proxy token.
-import { randomBytes } from 'node:crypto'
-import { spawnSync } from 'node:child_process'
-import { existsSync, lstatSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs'
-import { homedir } from 'node:os'
-import { isAbsolute, join } from 'node:path'
-import { botConnectorCredentialStatus, botConnectorKey } from './credentials.mjs'
-import { GATEWAY } from './gateway.mjs'
-
-export const PROVIDERS = Object.freeze({
-  botconnector: Object.freeze({ name: 'BotConnector Cloud', endpoint: GATEWAY }),
-  openai: Object.freeze({ name: 'OpenAI API', endpoint: 'https://api.openai.com/v1', env: 'OPENAI_API_KEY' }),
-  openrouter: Object.freeze({ name: 'OpenRouter', endpoint: 'https://openrouter.ai/api/v1', env: 'OPENROUTER_API_KEY' }),
-  deepseek: Object.freeze({ name: 'DeepSeek', endpoint: 'https://api.deepseek.com/v1', env: 'DEEPSEEK_API_KEY' }),
-  groq: Object.freeze({ name: 'Groq', endpoint: 'https://api.groq.com/openai/v1', env: 'GROQ_API_KEY' }),
-  xai: Object.freeze({ name: 'xAI', endpoint: 'https://api.x.ai/v1', env: 'XAI_API_KEY' }),
-})
-export const ALLOWED_PROVIDER_ENDPOINTS = Object.freeze(Object.values(PROVIDERS).map(p => p.endpoint))
-const ID = /^[a-z][a-z0-9-]{0,31}$/
-const MAX_BLOB_BYTES = 64 * 1024
-const ENC_SCRIPT = '$ErrorActionPreference="Stop"; $plain=[Console]::In.ReadToEnd().Trim(); if(-not $plain){exit 1}; $sec=ConvertTo-SecureString -String $plain -AsPlainText -Force; [Console]::Out.Write((ConvertFrom-SecureString -SecureString $sec))'
-const DEC_SCRIPT = '$ErrorActionPreference="Stop"; $encoded=[Console]::In.ReadToEnd().Trim(); $sec=ConvertTo-SecureString -String $encoded; $ptr=[Runtime.InteropServices.Marshal]::SecureStringToBSTR($sec); try{[Console]::Out.Write([Runtime.InteropServices.Marshal]::PtrToStringBSTR($ptr))}finally{[Runtime.InteropServices.Marshal]::ZeroFreeBSTR($ptr)}'
-
-export function providerRoot({ home = homedir(), env = process.env } = {}) {
-  const path = env.BCCLI_PREVIEW_HOME || join(home, '.bccli-preview')
-  if (!isAbsolute(path)) throw Error('BCCLI_PREVIEW_HOME must be absolute.')
-  return path
-}
-export function providerDefinition(id) {
-  if (!Object.hasOwn(PROVIDERS, id)) throw Error('Unknown provider. Choose from: ' + Object.keys(PROVIDERS).join(', '))
-  return PROVIDERS[id]
-}
-function ownerDirectory(root, { create = false } = {}) {
-  if (create) mkdirSync(root, { recursive: true, mode: 0o700 })
-  if (!existsSync(root)) return false
-  const info = lstatSync(root)
-  if (!info.isDirectory() || info.isSymbolicLink()) throw Error('Preview credential directory is not a safe regular directory.')
-  return true
-}
-function keyPath(root, id) {
-  if (!ID.test(id) || id === 'botconnector') throw Error('Provider key storage requires a supported non-BotConnector provider.')
-  return join(root, 'provider-' + id + '.dpapi')
-}
-function dpapi(script, input, { platform = process.platform, runner = spawnSync } = {}) {
-  if (platform !== 'win32') throw Error('Persisting provider API keys currently requires Windows DPAPI. Use the provider environment variable on other systems.')
-  const result = runner('powershell.exe', ['-NoProfile', '-NonInteractive', '-Command', script], {
-    input, encoding: 'utf8', timeout: 15000, maxBuffer: MAX_BLOB_BYTES, windowsHide: true,
-    env: { ...process.env, PSModulePath: process.env.PSModulePath },
-  })
-  if (result.error || result.status !== 0 || !result.stdout?.trim()) throw Error('Windows protected credential operation failed; no key was printed.')
-  return result.stdout.trim()
-}
-export function saveProviderKey(id, key, { root = providerRoot(), platform = process.platform, runner = spawnSync } = {}) {
-  providerDefinition(id)
-  if (id === 'botconnector') throw Error('Use bccli-legacy login bc-cloud or BOTCONNECTOR_API_KEY for BotConnector credentials.')
-  if (typeof key !== 'string' || !key.trim() || key.length > 8192 || /[\r\n]/.test(key)) throw Error('API key cannot be empty, multiline, or oversized.')
-  if (platform !== 'win32') throw Error('On non-Windows systems, use the provider API key environment variable.')
-  ownerDirectory(root, { create: true })
-  const ciphertext = dpapi(ENC_SCRIPT, key.trim(), { platform, runner })
-  if (ciphertext.length > MAX_BLOB_BYTES || !/^[0-9a-f]+$/i.test(ciphertext)) throw Error('Windows credential encryption returned an invalid format.')
-  const path = keyPath(root, id)
-  if (existsSync(path) && (!lstatSync(path).isFile() || lstatSync(path).isSymbolicLink())) throw Error('Unsafe provider credentials path.')
-  const temporary = path + '.' + randomBytes(8).toString('hex') + '.tmp'
-  try {
-    writeFileSync(temporary, ciphertext + '\n', { encoding: 'utf8', flag: 'wx', mode: 0o600 })
-    renameSync(temporary, path)
-  } finally { rmSync(temporary, { force: true }) }
-}
-export function storedProviderKey(id, { root = providerRoot(), platform = process.platform, runner = spawnSync } = {}) {
-  providerDefinition(id)
-  if (id === 'botconnector') throw Error('BotConnector credentials are managed by public BCCLI.')
-  if (!ownerDirectory(root)) throw Error('Provider not configured. Run provider add.')
-  const path = keyPath(root, id)
-  let info
-  try { info = lstatSync(path) }
-  catch { throw Error('Provider not configured. Run provider add.') }
-  if (!info.isFile() || info.isSymbolicLink() || info.size > MAX_BLOB_BYTES) throw Error('Unsafe provider credentials file.')
-  const cipher = readFileSync(path, 'utf8')
-  if (!/^[0-9a-f]+\s*$/i.test(cipher)) throw Error('Provider credentials are invalid.')
-  return dpapi(DEC_SCRIPT, cipher, { platform, runner })
-}
-export function isConfigured(id, { env = process.env, root = providerRoot({env}) } = {}) {
-  providerDefinition(id)
-  if (id === 'botconnector') return botConnectorCredentialStatus({ env }).configured
-  if (env[PROVIDERS[id].env]?.trim()) return true
-  try { return ownerDirectory(root) && lstatSync(keyPath(root, id)).isFile() && !lstatSync(keyPath(root, id)).isSymbolicLink() }
-  catch { return false }
-}
-export function selectedProvider({ env = process.env, root = providerRoot({env}) } = {}) {
-  if (!ownerDirectory(root)) return 'botconnector'
-  const path = join(root, 'active-provider')
-  if (!existsSync(path)) return 'botconnector'
-  const info = lstatSync(path)
-  if (!info.isFile() || info.isSymbolicLink() || info.size > 128) throw Error('Unsafe provider selection file.')
-  const id = readFileSync(path, 'utf8').trim()
-  providerDefinition(id)
-  return id
-}
-// Model IDs are public selections, never credentials. Keep one per provider
-// so a returning user goes directly to chat without repeating the model picker.
-const MODEL_ID = /^[a-zA-Z0-9][a-zA-Z0-9._:/+-]{0,255}$/
-export function selectedModel(id, { env = process.env, root = providerRoot({ env }) } = {}) {
-  providerDefinition(id)
-  if (!ownerDirectory(root)) return undefined
-  const path = join(root, 'active-model-' + id)
-  if (!existsSync(path)) return undefined
-  const info = lstatSync(path)
-  if (!info.isFile() || info.isSymbolicLink() || info.size > 300) throw Error('Unsafe model selection file.')
-  const value = readFileSync(path, 'utf8').trim()
-  if (!MODEL_ID.test(value)) throw Error('Invalid saved model selection.')
-  return value
-}
-
-export function saveSelectedModel(id, model, { env = process.env, root = providerRoot({ env }) } = {}) {
-  providerDefinition(id)
-  if (!MODEL_ID.test(model)) throw Error('Invalid model ID.')
-  ownerDirectory(root, { create: true })
-  const path = join(root, 'active-model-' + id)
-  if (existsSync(path) && (!lstatSync(path).isFile() || lstatSync(path).isSymbolicLink())) {
-    throw Error('Unsafe model selection path.')
-  }
-  const tmp = path + '.' + randomBytes(8).toString('hex') + '.tmp'
-  try { writeFileSync(tmp, model + '\n', { flag: 'wx', encoding: 'utf8', mode: 0o600 }); renameSync(tmp, path) }
-  finally { rmSync(tmp, { force: true }) }
-}
-
-export function useProvider(id, { env = process.env, root = providerRoot({env}) } = {}) {
-  providerDefinition(id)
-  if (!isConfigured(id, { env, root })) throw Error('Provider is not configured. Use: provider add ' + id + ' (or its API key environment variable).')
-  ownerDirectory(root, { create: true })
-  const path = join(root, 'active-provider')
-  if (existsSync(path) && (!lstatSync(path).isFile() || lstatSync(path).isSymbolicLink())) throw Error('Unsafe provider selection path.')
-  const tmp = path + '.' + randomBytes(8).toString('hex') + '.tmp'
-  try { writeFileSync(tmp, id + '\n', { flag: 'wx', encoding: 'utf8', mode: 0o600 }); renameSync(tmp, path) }
-  finally { rmSync(tmp, { force: true }) }
-}
-export function removeProvider(id, { env = process.env, root = providerRoot({env}) } = {}) {
-  providerDefinition(id)
-  if (id === 'botconnector') throw Error('BotConnector credentials are managed by bccli-legacy or BOTCONNECTOR_API_KEY.')
-  if (!ownerDirectory(root)) return
-  const path = keyPath(root, id)
-  if (existsSync(path)) {
-    if (!lstatSync(path).isFile() || lstatSync(path).isSymbolicLink()) throw Error('Unsafe provider credential path.')
-    rmSync(path)
-  }
-  if (selectedProvider({env,root}) === id) {
-    const active = join(root, 'active-provider')
-    rmSync(active, {force:true})
-  }
-}
-export function resolveProvider(id, { env = process.env, root = providerRoot({env}) } = {}) {
-  const info = providerDefinition(id)
-  if (id === 'botconnector') return { id, ...info, key: botConnectorKey({env}) }
-  // An explicit key saved through "provider add" must win over stale environment
-  // variables. Never silently fall back if the encrypted file is corrupted.
-  let key
-  try { key = storedProviderKey(id, {root}) }
-  catch (error) {
-    if (error?.message !== 'Provider not configured. Run provider add.') throw error
-    key = env[info.env]?.trim()
-  }
-  if (!key) throw Error('Provider not configured. Run provider add ' + id + ' or set ' + info.env + '.')
-  return { id, ...info, key }
-}