@botconnector/bccli 0.5.0 → 0.5.1

package/core.mjs

@@ -1,260 +0,0 @@
-// BCCLI candidate adapter. Intentionally outside the Qwen Code engine.
-import { spawn } from 'node:child_process'
-import { createRequire } from 'node:module'
-import { homedir } from 'node:os'
-import { readFileSync, realpathSync, lstatSync } from 'node:fs'
-import { dirname, join, isAbsolute } from 'node:path'
-import { startGatewayProxy } from './proxy.mjs'
-import { GATEWAY } from './gateway.mjs'
-
-export { GATEWAY } from './gateway.mjs'
-export const DEFAULT_MODEL = 'ling-3.0-flash'
-
-// Qwen Code 0.26.3 Windows tool-loop exits cleanly with Node 24.22.1
-// (GitHub Actions), but repeatedly crashes on Windows Node 24.18.0
-// with libuv UV_HANDLE_CLOSING after delivering the tool result.
-// This guard affects ONLY the isolated candidate, not public BCCLI.
-export function assertCandidateRuntimeSupported({ platform = process.platform, nodeVersion = process.versions.node } = {}) {
-  const parts = /^(\d+)\.(\d+)\.(\d+)(?:$|[-+])/.exec(String(nodeVersion))
-  if (!parts) throw Error('Cannot verify the Node.js version for BCCLI candidate.')
-  const major = Number(parts[1]), minor = Number(parts[2]), patch = Number(parts[3])
-  if (platform === 'win32' && major === 24 && (minor < 22 || (minor === 22 && patch < 1))) {
-    throw Error('Windows Node.js ' + nodeVersion + ' may crash after coding tools. Use Node.js 24.22.1 or newer, or Node.js 22.23.4. Existing public BCCLI is unaffected.')
-  }
-}
-const MODEL_ID = /^[a-zA-Z0-9][a-zA-Z0-9._:/+-]{0,255}$/
-const ALLOWED = new Set(['models', 'run', 'chat', 'resume', 'auth', 'provider'])
-// Public BCCLI commands are not supported by this isolated candidate. Do
-// not accidentally treat them as AI prompts, which could spend user credits.
-const PUBLIC_ONLY_COMMANDS = new Set([
-  'login', 'logout', 'mcp', 'connect', 'disconnect',
-  'integrations', 'update', 'serve', 'acp', 'plugins', 'gh-bot',
-  'completion', 'stats', 'export', 'import', 'pr',
-])
-
-export function parseArgs(argv) {
-  const args = [...argv]
-  // Public BCCLI accepts options before subcommands. This candidate does
-  // not: reject those spellings rather than accidentally charging for a
-  // prompt such as "-m ling login" or "-m ling models".
-  if (!args.includes('-p') && !args.includes('--print') && !args.includes('-c') && !args.includes('--continue') && !ALLOWED.has(args[0])) {
-    let firstWord
-    for (let i = 0; i < args.length; i++) {
-      const flag = args[i]
-      if (flag === '--model' || flag === '-m' || flag === '--mcp-config') { i++; continue }
-      if (flag.startsWith('-')) continue
-      firstWord = flag
-      break
-    }
-    if (firstWord && (PUBLIC_ONLY_COMMANDS.has(firstWord) || ALLOWED.has(firstWord))) {
-      throw Error('Subcommand "' + firstWord + '" must come first in this candidate. No AI request was sent.')
-    }
-  }
-  // Check old public subcommands BEFORE rewriting -p to run: otherwise
-  // "login -p" might accidentally become a billable model prompt.
-  if (args.length && PUBLIC_ONLY_COMMANDS.has(args[0])) {
-    throw Error('Command "' + args[0] + '" is available only in public BCCLI 0.4.17, not this isolated candidate. No AI request was sent.')
-  }
-  // Qwen handles both -c and -r natively. Never combine the two session modes.
-  if (args.some(a => a === '-c' || a === '--continue') && args.some(a => a === '-r' || a === '--resume')) {
-    throw Error('Use either -c or -r, not both. No AI request was sent.')
-  }
-  // The public -c/--continue resumes the last *current-project* session.
-  // Candidate Qwen 'resume' already implements that behavior in isolation.
-  const continueFlags = args.filter(a => a === '-c' || a === '--continue')
-  if (continueFlags.length > 1) throw Error('Specify -c / --continue only once.')
-  if (continueFlags.length) {
-    if (args.some(a => a === '-p' || a === '--print')) throw Error('Combining -c with -p is not yet supported by the candidate.')
-    const otherArgs = args.filter(a => a !== continueFlags[0])
-    if (ALLOWED.has(otherArgs[0])) throw Error('-c / --continue is not compatible with an explicit subcommand; use resume directly.')
-    args.splice(args.indexOf(continueFlags[0]), 1)
-    args.unshift('resume')
-  }
-  // Keep public BCCLI's common noninteractive invocation as a safe alias.
-  // Do not imply parity with public JSON/stream-json.
-  const printIndexes = args.flatMap((arg, i) => arg === '-p' || arg === '--print' ? [i] : [])
-  if (printIndexes.length > 1) throw Error('Specify -p / --print only once.')
-  if (printIndexes.length === 1) {
-    args.splice(printIndexes[0], 1)
-    if (ALLOWED.has(args[0]) && args[0] !== 'run') {
-      throw Error('-p / --print only supports a single headless run, not ' + args[0] + '.')
-    }
-    if (args[0] !== 'run') args.unshift('run')
-  }
-  const command = ALLOWED.has(args[0]) ? args.shift() : 'chat'
-  let model, mcpConfig, provider, json = false, resumeSession
-  const prompt = []
-  while (args.length) {
-    const arg = args.shift()
-    if (arg === '-r' || arg === '--resume') {
-      if (command !== 'chat' || resumeSession !== undefined) throw Error('Use -r [SESSION_UUID] only once for interactive chat.')
-      const next = args[0]
-      if (next && !next.startsWith('-')) {
-        if (!/^[a-f\d]{8}-(?:[a-f\d]{4}-){3}[a-f\d]{12}$/i.test(next)) {
-          throw Error('Session ID must be a UUID. No AI request was sent.')
-        }
-        resumeSession = args.shift()
-      } else {
-        resumeSession = null // Native Qwen --resume with no ID opens its own session picker.
-      }
-      continue
-    }
-    if (arg === '--model' || arg === '-m') {
-      if (model !== undefined || !args.length) throw Error('Specify --model exactly once with an ID.')
-      model = args.shift()
-      continue
-    }
-    if (arg === '--provider') {
-      if (provider !== undefined || !args.length || args[0].startsWith('-')) throw Error('--provider requires exactly one provider ID.')
-      provider = args.shift()
-      continue
-    }
-    if (arg === '--mcp-config') {
-      if (mcpConfig !== undefined || !args.length || args[0].startsWith('-')) throw Error('--mcp-config requires exactly one absolute path.')
-      mcpConfig = args.shift()
-      continue
-    }
-    if (arg === '--json' && command === 'models') { json = true; continue }
-    if (arg.startsWith('-')) throw Error('Unsupported option. POC intentionally blocks passthrough flags.')
-    prompt.push(arg)
-  }
-  if (command === 'provider' && (model || mcpConfig || provider || json)) throw Error('Use: provider list | add ID | use ID | remove ID.')
-  if (command === 'auth' && (model || mcpConfig || json || prompt.join(' ') !== 'status')) throw Error('Use: auth status (offline and read-only).')
-  if (command === 'models' && (model || mcpConfig || prompt.length)) throw Error('Use: models [--json].')
-  if (resumeSession !== undefined && prompt.length) throw Error('Session picker cannot be combined with a prompt.')
-  if (command === 'run' && !prompt.length) throw Error('Use: run --model MODEL "prompt".')
-  return { command, model, json, prompt: prompt.join(' '), ...(mcpConfig ? { mcpConfig } : {}), ...(provider ? { provider } : {}), ...(resumeSession !== undefined ? { resumeSession } : {}) }
-}
-
-export async function discoverModels({ key, fetchImpl = fetch, endpoint = GATEWAY }) {
-  if (!key || !key.trim()) throw Error('BOTCONNECTOR_API_KEY is required (do not supply it as a CLI argument).')
-  let response
-  try {
-    response = await fetchImpl(endpoint + '/models', {
-      method: 'GET',
-      headers: { authorization: 'Bearer ' + key, accept: 'application/json' },
-      redirect: 'error',
-      signal: AbortSignal.timeout(12000),
-    })
-  } catch {
-    throw Error('Gateway model discovery failed; no fallback provider was used.')
-  }
-  if (!response.ok) throw Error('Gateway model discovery failed (HTTP ' + response.status + ').')
-  let payload
-  try { payload = await response.json() }
-  catch { throw Error('Gateway model discovery returned invalid JSON.') }
-  if (!Array.isArray(payload?.data)) throw Error('Gateway model discovery returned no model list.')
-  const models = new Map()
-  for (const item of payload.data) {
-    if (typeof item?.id === 'string' && MODEL_ID.test(item.id)) {
-      models.set(item.id, { id: item.id, name: typeof item.name === 'string' ? item.name : item.id })
-    }
-  }
-  if (!models.size) throw Error('No valid models available to this key.')
-  return [...models.values()]
-}
-
-export function selectModel(models, value) {
-  if (!value) throw Error('Select a model with --model ID or BOTCONNECTOR_MODEL_ID; run models first.')
-  if (!MODEL_ID.test(value)) throw Error('Invalid model ID.')
-  if (!models.some((item) => item.id === value)) throw Error('Model is not available for this BotConnector API key.')
-  return value
-}
-
-export function qwenArguments(model, prompt, endpoint = GATEWAY, { mcpConfig, continueSession = false, resumeSession } = {}) {
-  if (continueSession && resumeSession !== undefined) throw Error('Cannot combine native Qwen --continue with --resume.')
-  // --bare is security critical: project settings may otherwise override
-  // the provider baseUrl, forwarding an API key to an attacker-controlled endpoint.
-  const args = [
-    '--bare', '--auth-type', 'openai',
-    '--openai-base-url', endpoint,
-    '--model', model, '--approval-mode', 'default',
-    '--telemetry=false',
-  ]
-  // The active AI can change with /model. Do not embed the STARTUP model
-  // here: doing so would falsely identify a later selected model.
-  // The BotConnector local proxy adds the actual request model to each
-  // chat call, without forcing the AI to impersonate BCCLI.
-  args.push('--append-system-prompt',
-    'Client application: BCCLI. The upstream coding engine is Qwen Code, which is software, not the AI model answering the user. Identify the responding AI using active_model_id from current-request runtime metadata (the model can change mid-session). If no current model ID is available, state that it is unknown. Do not call the assistant Qwen Code or BCCLI as if either were the AI model, and do not infer who developed the active model from the application or engine brand.')
-  if (mcpConfig) args.push('--mcp-config', mcpConfig)
-  if (continueSession) args.push('--continue')
-  if (resumeSession !== undefined) args.push('--resume', ...(resumeSession === null ? [] : [resumeSession]))
-  if (prompt) args.push(prompt)
-  return args
-}
-
-export function childEnvironment(base, key, model, { endpoint = GATEWAY, home, providerId = 'botconnector' } = {}) {
-  const env = { ...base }
-  // Prevent inherited cross-provider auth from becoming another route or key.
-  for (const name of [
-    'QWEN_OAUTH', 'BOTCONNECTOR_API_KEY', 'OPENAI_API_KEY', 'OPENAI_BASE_URL', 'OPENAI_MODEL', 'QWEN_MODEL',
-    'ANTHROPIC_API_KEY', 'ANTHROPIC_BASE_URL', 'GEMINI_API_KEY',
-    'GOOGLE_API_KEY', 'OPENROUTER_API_KEY', 'QWENCLOUD_API_KEY',
-    'QWENCLOUD_TOKEN_PLAN_API_KEY', 'DEEPSEEK_API_KEY', 'GROQ_API_KEY', 'XAI_API_KEY',
-  ]) delete env[name]
-  env.OPENAI_API_KEY = key
-  env.OPENAI_BASE_URL = endpoint
-  env.OPENAI_MODEL = model
-  env.QWEN_MODEL = model
-  env.QWEN_HOME = home ?? (providerId === 'botconnector' ? join(homedir(), '.bccli-preview') : join(homedir(), '.bccli-preview', 'sessions-' + providerId))
-  env.BCCLI_ACTIVE_PROVIDER = providerId
-  env.CLI_TITLE = 'BCCLI - ' + process.cwd().split(/[\\/]/).filter(Boolean).at(-1)
-  env.QWEN_CODE_SKIP_UPDATE_CHECK_ONCE = 'true' // Never query or install upstream Qwen releases.
-  return env
-}
-
-// Explicit MCP servers run local commands on startup, so they must originate
-// from a config file the user deliberately placed outside any cloned project.
-// There is no automatic project/user MCP discovery when Qwen runs --bare.
-export function resolveTrustedMcpConfig(input, { home = join(homedir(), '.bccli-preview') } = {}) {
-  if (!input) return undefined
-  if (!isAbsolute(input)) throw Error('MCP config must use an absolute path.')
-  let realHome, file, stats
-  try {
-    realHome = realpathSync(home)
-    file = realpathSync(input)
-    stats = lstatSync(input)
-  } catch {
-    throw Error('MCP config must be a readable file in the owner config directory.')
-  }
-  if (stats.isSymbolicLink() || !stats.isFile() || dirname(file) !== realHome) {
-    throw Error('MCP config must be a regular file directly in the owner config directory.')
-  }
-  let config
-  try { config = JSON.parse(readFileSync(file, 'utf8')) }
-  catch { throw Error('MCP config must contain valid JSON.') }
-  if (!config || typeof config !== 'object' || Array.isArray(config) ||
-    !config.mcpServers || typeof config.mcpServers !== 'object' || Array.isArray(config.mcpServers)) {
-    throw Error('MCP config must contain mcpServers.')
-  }
-  if (Object.keys(config).some((name) => name !== 'mcpServers')) {
-    throw Error('MCP config may contain only mcpServers (no provider or credential overrides).')
-  }
-  if (!Object.keys(config.mcpServers).length) throw Error('MCP config must define at least one server.')
-  return file
-}
-
-export function resolveQwenEntrypoint() {
-  const require = createRequire(import.meta.url)
-  return join(dirname(require.resolve('@qwen-code/qwen-code/package.json')), 'cli-entry.js')
-}
-
-export async function launchQwen({ key, model, prompt, mcpConfig, continueSession = false, resumeSession, upstream = GATEWAY, providerId = 'botconnector', env = process.env, entrypoint = resolveQwenEntrypoint(), spawnImpl = spawn, proxyFactory = startGatewayProxy }) {
-  // The real API key never enters Qwen, its tools, or any MCP child process.
-  // Only this launcher retains it while the ephemeral proxy is running.
-  const proxy = await proxyFactory({ key, endpoint: upstream })
-  try {
-    const args = [entrypoint, ...qwenArguments(model, prompt, proxy.baseUrl, { mcpConfig, continueSession, resumeSession })]
-    const child = spawnImpl(process.execPath, args, {
-      cwd: process.cwd(), env: childEnvironment(env, proxy.token, model, { endpoint: proxy.baseUrl, providerId }),
-      stdio: 'inherit', windowsHide: false, shell: false,
-    })
-    return await new Promise((resolve, reject) => {
-      child.once('error', reject)
-      child.once('exit', (code, signal) => resolve(code ?? (signal ? 130 : 1)))
-    })
-  } finally {
-    await proxy.close()
-  }
-}

package/credentials.mjs

@@ -1,52 +0,0 @@
-// Credentials bridge: reuse an owner's existing BCCLI bc-cloud login without
-// another provider account or a second credential store. Never log the key.
-import { homedir } from 'node:os'
-import { join, isAbsolute } from 'node:path'
-import { lstatSync, readFileSync } from 'node:fs'
-
-const MAX_CREDENTIAL_FILE_BYTES = 64 * 1024
-
-export function botConnectorKey({ env = process.env, home = homedir() } = {}) {
-  if (typeof env.BOTCONNECTOR_API_KEY === 'string' && env.BOTCONNECTOR_API_KEY.trim()) {
-    return env.BOTCONNECTOR_API_KEY.trim()
-  }
-  const override = env.BCCLI_HOME
-  const base = override ? override : join(home, '.bccli')
-  if (!isAbsolute(base)) throw Error('BCCLI_HOME must be an absolute directory.')
-  const path = join(base, 'credentials')
-  let info
-  try { info = lstatSync(path) }
-  catch (error) {
-    if (error?.code === 'ENOENT') {
-      throw Error('No BotConnector login. Run bccli login to save your bc-cloud key, or set BOTCONNECTOR_API_KEY.')
-    }
-    throw Error('Cannot inspect the existing BCCLI credentials file.')
-  }
-  if (!info.isFile() || info.isSymbolicLink() || info.size > MAX_CREDENTIAL_FILE_BYTES) {
-    throw Error('Invalid BCCLI credentials file; do not follow symlinks or oversized files.')
-  }
-  let data
-  try { data = JSON.parse(readFileSync(path, 'utf8')) }
-  catch { throw Error('Existing BCCLI credentials are not valid JSON.') }
-  const key = data && typeof data === 'object' && !Array.isArray(data) ? data['bc-cloud'] : null
-  if (typeof key !== 'string' || !key.trim()) {
-    throw Error('No bc-cloud key saved. Run bccli login or set BOTCONNECTOR_API_KEY.')
-  }
-  return key.trim()
-}
-
-/**
- * Offline, read-only status. Reuse the public BCCLI bc-cloud login; never
- * duplicate, rewrite, mask-print, or migrate the long-lived secret.
- * "configured" means a credential exists, not that Gateway accepted it.
- */
-export function botConnectorCredentialStatus({ env = process.env, home = homedir() } = {}) {
-  const viaEnvironment = typeof env.BOTCONNECTOR_API_KEY === 'string' && !!env.BOTCONNECTOR_API_KEY.trim()
-  try {
-    botConnectorKey({ env, home })
-    return { configured: true, source: viaEnvironment ? 'environment' : 'public-bccli' }
-  } catch (error) {
-    // All botConnectorKey errors are intentionally static; do not include keys.
-    return { configured: false, source: 'none', reason: error instanceof Error ? error.message : 'Credential inspection failed.' }
-  }
-}

package/gateway.mjs

@@ -1,2 +0,0 @@
-// Stable, audited BotConnector destination. Never accept this from a project settings file.
-export const GATEWAY = 'https://api.botconnector.id/v1'

package/legacy/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2026 BotConnector
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

package/legacy/package.json

@@ -1,77 +0,0 @@
-{
-  "name": "@botconnector/bccli",
-  "version": "0.4.17",
-  "description": "BCCLI — BotConnector AI coding agent for the terminal",
-  "type": "module",
-  "bin": {
-    "bccli": "dist/cli.js"
-  },
-  "files": [
-    "dist"
-  ],
-  "engines": {
-    "node": ">=22"
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/farijarifriyanto-debug/bccli.git"
-  },
-  "license": "MIT",
-  "scripts": {
-    "build": "tsup && tsc -p tsconfig.build.json",
-    "typecheck": "tsc --noEmit",
-    "lint": "biome lint --error-on-warnings src test",
-    "test": "vitest run",
-    "coverage": "vitest run --coverage"
-  },
-  "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.32.1",
-    "diff": "^9.0.0",
-    "ink": "^8.0.0",
-    "openai": "^7.27.0",
-    "react": "^19.3.0",
-    "undici": "^8.12.1",
-    "ws": "^8.22.0",
-    "yaml": "^2.9.1",
-    "zod": "^4.6.5"
-  },
-  "devDependencies": {
-    "@biomejs/biome": "^2.5.14",
-    "@types/node": "^26.6.3",
-    "@types/react": "^19.3.0",
-    "@types/ws": "^8.18.2",
-    "@vitest/coverage-v8": "^5.0.5",
-    "ink-testing-library": "^4.0.0",
-    "tsup": "^9.0.0",
-    "typescript": "^7.0.2",
-    "vitest": "^5.0.2"
-  },
-  "overrides": {
-    "esbuild": "0.28.2"
-  },
-  "main": "dist/sdk.js",
-  "types": "dist/sdk.d.ts",
-  "exports": {
-    ".": {
-      "types": "./dist/sdk.d.ts",
-      "default": "./dist/sdk.js"
-    }
-  },
-  "keywords": [
-    "bccli",
-    "ai",
-    "coding-agent",
-    "agent",
-    "cli",
-    "tui",
-    "terminal",
-    "mcp",
-    "openai",
-    "indonesia"
-  ],
-  "author": "BotConnector (https://botconnector.id)",
-  "bugs": {
-    "url": "https://github.com/farijarifriyanto-debug/bccli/issues"
-  },
-  "homepage": "https://github.com/farijarifriyanto-debug/bccli#readme"
-}

package/legacy-compat.mjs

@@ -1,42 +0,0 @@
-// Stable CLI compatibility bridge. There is only one user-visible executable:
-// bccli. Explicit legacy commands continue to use the original BCCLI 0.4.17
-// implementation bundled within the same distribution. Never reinterpret a
-// legacy subcommand as a chargeable AI prompt.
-import { spawn } from 'node:child_process'
-import { existsSync } from 'node:fs'
-import { fileURLToPath } from 'node:url'
-
-const LEGACY_COMMANDS = new Set([
-  'login', 'logout', 'mcp', 'connect', 'disconnect', 'integrations',
-  'update', 'serve', 'acp', 'plugins', 'gh-bot', 'completion',
-  'stats', 'export', 'import', 'pr',
-])
-const LEGACY_OPTIONS = new Set([
-  '--output-format', '--fail-on-tool-error', '--allow-all',
-  '--allowed-tools', '--reasoning', '--lang', '--permission-mode',
-  '--worktree', '-w', '--fallback-model', '--base-url',
-])
-
-export function legacyCompatibilityMode(argv) {
-  if (!Array.isArray(argv) || argv.length === 0) return false
-  if (LEGACY_COMMANDS.has(argv[0])) return true
-  // Explicit flags from BCCLI 0.4.17 preserve that version's exact
-  // semantics, rather than silently mapping to the new engine.
-  if (argv.some(arg => LEGACY_OPTIONS.has(arg) || [...LEGACY_OPTIONS].some(flag => arg.startsWith(flag + '=')))) return true
-  // The old provider CLI permits custom providers, whereas the new CLI
-  // accepts only fixed HTTPS presets. Keep the legacy route explicit.
-  if (argv[0] === 'provider' && argv[1] === 'add' && argv.some(arg => ['--url','--name','--key-env'].includes(arg))) return true
-  return false
-}
-
-export async function runLegacyCli(argv, { spawnImpl = spawn, node = process.execPath, env = process.env, cwd = process.cwd() } = {}) {
-  const entrypoint = fileURLToPath(new URL('./legacy/dist/cli.js', import.meta.url))
-  if (spawnImpl === spawn && !existsSync(entrypoint)) throw Error('Bundled BCCLI compatibility files are missing; reinstall the release package. No AI request was sent.')
-  const child = spawnImpl(node, [entrypoint, ...argv], {
-    cwd, env, stdio: 'inherit', shell: false, windowsHide: false,
-  })
-  return new Promise((resolve, reject) => {
-    child.once('error', reject)
-    child.once('exit', (code, signal) => resolve(code ?? (signal ? 130 : 1)))
-  })
-}

package/model-command.mjs

@@ -1,61 +0,0 @@
-// Generated, version-pinned Qwen slash command overlay for /model.
-// Fetches the authenticated model catalog from the existing local BotConnector
-// proxy on each invocation. Selection changes Qwen Config in the current
-// session; it never opens upstream provider settings or writes project config.
-export const BCCLI_MODEL_COMMAND = String.raw`var bccliModelLastList=[];var modelCommand={name:"model",get description(){return "Choose an AI model from the active provider"},argumentHint:"[number|model-id|search WORD|page N]",kind:"built-in",supportedModes:["interactive","non_interactive","acp"],action:__name(async(context,argumentText)=>{
-  var response=(type,content)=>({type:"message",messageType:type,content});
-  try{
-    var base=process.env.OPENAI_BASE_URL||"";
-    var key=process.env.OPENAI_API_KEY||"";
-    if(!/^http:\/\/127\.0\.0\.1:[0-9]{1,5}\/v1$/.test(base)||!key){
-      return response("error","BCCLI requires an authenticated local provider session.");
-    }
-    var result=await fetch(base+"/models",{method:"GET",headers:{Authorization:"Bearer "+key,Accept:"application/json"},redirect:"error",signal:AbortSignal.timeout(10000)});
-    if(!result.ok)return response("error","Provider model catalog is unavailable (HTTP "+result.status+"). No provider fallback.");
-    var payload=await result.json();
-    if(!Array.isArray(payload?.data))return response("error","Invalid provider model catalog.");
-    var catalog=new Map();
-    for(var entry of payload.data){
-      if(typeof entry?.id==="string" && /^[a-zA-Z0-9][a-zA-Z0-9._:/+-]{0,255}$/.test(entry.id) && !catalog.has(entry.id)){
-        catalog.set(entry.id,{id:entry.id,name:typeof entry.name==="string"?entry.name.slice(0,90):entry.id});
-      }
-    }
-    var all=[...catalog.values()].sort((a,b)=>a.id.localeCompare(b.id));
-    if(!all.length)return response("error","No provider models available for this API key.");
-    var text=String(context.invocation?.args||argumentText||"").trim();
-    var config=context.services?.config;
-    if(!config||typeof config.setModel!=="function")return response("error","BCCLI model switch is unavailable in this session.");
-    var current=config.getModel?.()||process.env.OPENAI_MODEL||"(unknown)";
-    var list=(entries,page=1)=>{
-      bccliModelLastList=entries.map(x=>x.id);
-      var size=12;
-      var pages=Math.max(1,Math.ceil(entries.length/size));
-      if(!Number.isSafeInteger(page)||page<1||page>pages)return response("error","Invalid page. Use /model page 1 ... "+pages);
-      var start=(page-1)*size;
-      var rows=entries.slice(start,start+size).map((x,i)=>(start+i+1)+". "+x.id+(x.id===current?"  [ACTIVE]":""));
-      return response("info","Provider AI models ("+entries.length+" available; page "+page+"/"+pages+")\nActive: "+current+"\n\n"+rows.join("\n")+"\n\nUse /model NUMBER or /model MODEL_ID to switch now; /model page N; /model search KEYWORD. To change providers, use bccli provider use PROVIDER before a new chat.");
-    };
-    if(!text)return list(all);
-    var page=text.match(/^page\s+([0-9]+)$/i);
-    if(page)return list(all,Number(page[1]));
-    var search=text.match(/^search\s+(.{1,80})$/i);
-    if(search)return list(all.filter(x=>x.id.toLowerCase().includes(search[1].toLowerCase())||x.name.toLowerCase().includes(search[1].toLowerCase())));
-    var item;
-    if(/^[0-9]+$/.test(text)){
-      var index=Number(text);
-      item=Number.isSafeInteger(index)&&index>=1?catalog.get(bccliModelLastList[index-1]||all[index-1]?.id):undefined;
-    }else if(/^[a-zA-Z0-9][a-zA-Z0-9._:/+-]{0,255}$/.test(text)){
-      item=catalog.get(text);
-    }
-    if(!item)return response("error","That model is not available in your active provider catalog. Run /model to view allowed models.");
-    if(item.id===current)return response("info","Already using "+item.id+" via the active provider.");
-    // Raw model IDs are supported by Config.setModel; this preserves OpenAI
-    // auth/loopback proxy instead of switching providers. It refreshes the
-    // live content generator, so the next message uses the new model.
-    await config.setModel(item.id,{reason:"bccli-gateway-model-picker"});
-    if(config.getModel?.()!==item.id)return response("error","Model switch did not take effect; previous model preserved.");
-    return response("info","Switched to "+item.id+" in the current session. Routing and billing remain with the active provider.");
-  }catch{
-    return response("error","Provider model selection failed; no upstream provider fallback was used.");
-  }
-},"action")};`

package/provider-cli.mjs

@@ -1,76 +0,0 @@
-// Provider management is an explicitly invoked CLI operation, not a model prompt.
-import { PROVIDERS, isConfigured, providerDefinition, removeProvider, saveProviderKey, selectedProvider, useProvider } from './providers.mjs'
-
-export async function hiddenApiKey({ input = process.stdin, output = process.stdout } = {}) {
-  if (!input.isTTY || typeof input.setRawMode !== 'function') throw Error('Provider add requires an interactive terminal to enter a hidden API key.')
-  output.write('Paste API key (hidden; Enter to save, Ctrl+C to cancel): ')
-  return new Promise((resolve, reject) => {
-    let value = ''
-    const finish = (error) => {
-      input.off('data', onData)
-      input.off('end', onEnd)
-      input.setRawMode(false)
-      input.pause()
-      output.write('\n')
-      error ? reject(error) : resolve(value)
-    }
-    const onEnd = () => finish(Error('API key input ended before confirmation.'))
-    const onData = buffer => {
-      for (const ch of buffer.toString('utf8')) {
-        if (ch === '\u0003') return finish(Error('Cancelled.'))
-        if (ch === '\r' || ch === '\n') return finish(value ? null : Error('Empty API key; nothing saved.'))
-        if (ch === '\u007f' || ch === '\b') { value = value.slice(0, -1); continue }
-        if (ch.charCodeAt(0) < 32) continue
-        value += ch
-        if (value.length > 8192) return finish(Error('API key is too long; nothing saved.'))
-      }
-    }
-    input.on('data', onData)
-    input.on('end', onEnd)
-    input.setRawMode(true)
-    input.resume()
-  })
-}
-
-export async function runProviderCommand(words, {
-  env = process.env,
-  getKey = hiddenApiKey,
-  out = text => console.log(text),
-  save = saveProviderKey,
-  select = useProvider,
-  remove = removeProvider,
-  configured = isConfigured,
-  active = selectedProvider,
-} = {}) {
-  const [action = 'list', id, ...extra] = words
-  if (!['list', 'add', 'use', 'remove'].includes(action) || (action === 'list' ? words.length > 1 : !id || extra.length)) {
-    throw Error('Use: provider list | add PROVIDER | use PROVIDER | remove PROVIDER.')
-  }
-  if (action === 'list') {
-    const current = active({env})
-    for (const [name, info] of Object.entries(PROVIDERS)) {
-      out(name + ' - ' + info.name + ' [' + (configured(name,{env}) ? 'configured' : 'no key') + ']' + (name === current ? ' [ACTIVE]' : ''))
-    }
-    out('Add: bccli provider add openrouter; select: bccli provider use openrouter')
-    out('Provider keys are stored encrypted for your Windows user. Other systems: use the provider environment variable.')
-    return 0
-  }
-  providerDefinition(id)
-  if (action === 'add') {
-    out('Provider: ' + PROVIDERS[id].name + ' (API use may incur charges; entering a key does not send an AI prompt).')
-    const key = await getKey()
-    save(id, key)
-    select(id,{env})
-    out('API key securely saved and provider selected: ' + id + '. Key was not printed. No AI request sent.')
-    out('Run: bccli models, then bccli chat --model MODEL_ID')
-    return 0
-  }
-  if (action === 'use') {
-    select(id,{env})
-    out('Active provider: ' + id + '. New sessions only; existing chats are unchanged.')
-    return 0
-  }
-  remove(id,{env})
-  out('Saved provider key removed for ' + id + '. Environment variables, if set, are not changed.')
-  return 0
-}