@ekzs/cli 0.2.0 → 0.3.0

package/dist/lib/providers/tools.js

@@ -0,0 +1,145 @@
+import { execFile } from "child_process";
+import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from "fs";
+import { dirname, join, relative, resolve } from "path";
+import { promisify } from "util";
+import { detectShellEnvironment } from "../shell.js";
+const execFileAsync = promisify(execFile);
+const MAX_FILE_BYTES = 120_000;
+const MAX_CMD_OUTPUT = 24_000;
+function safePath(cwd, input) {
+    const root = resolve(cwd);
+    const abs = resolve(root, input.trim());
+    const rel = relative(root, abs);
+    if (rel.startsWith("..") || rel.includes("..")) {
+        throw new Error(`Path escapes project root: ${input}`);
+    }
+    return abs;
+}
+export async function toolReadFile(cwd, path) {
+    const abs = safePath(cwd, path);
+    if (!existsSync(abs))
+        return `Error: file not found: ${path}`;
+    const stat = statSync(abs);
+    if (!stat.isFile())
+        return `Error: not a file: ${path}`;
+    if (stat.size > MAX_FILE_BYTES) {
+        return readFileSync(abs, "utf8").slice(0, MAX_FILE_BYTES) + "\n…[truncated]";
+    }
+    return readFileSync(abs, "utf8");
+}
+export async function toolWriteFile(cwd, path, content) {
+    const abs = safePath(cwd, path);
+    mkdirSync(dirname(abs), { recursive: true });
+    writeFileSync(abs, content, "utf8");
+    return `Wrote ${relative(resolve(cwd), abs)} (${content.length} bytes)`;
+}
+export async function toolListFiles(cwd, path = ".") {
+    const abs = safePath(cwd, path);
+    if (!existsSync(abs))
+        return `Error: path not found: ${path}`;
+    const stat = statSync(abs);
+    if (!stat.isDirectory())
+        return `Error: not a directory: ${path}`;
+    const entries = readdirSync(abs, { withFileTypes: true })
+        .slice(0, 200)
+        .map((e) => `${e.isDirectory() ? "d" : "f"} ${join(path, e.name).replace(/\\/g, "/")}`);
+    return entries.join("\n") || "(empty)";
+}
+export async function toolRunCommand(cwd, command) {
+    const shell = detectShellEnvironment();
+    const trimmed = command.trim();
+    if (!trimmed)
+        return "Error: empty command";
+    try {
+        if (shell.agentShell === "powershell") {
+            const { stdout, stderr } = await execFileAsync("powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", trimmed], { cwd: resolve(cwd), timeout: 90_000, maxBuffer: MAX_CMD_OUTPUT });
+            return [stdout, stderr].filter(Boolean).join("\n").slice(0, MAX_CMD_OUTPUT) || "(no output)";
+        }
+        if (shell.agentShell === "cmd") {
+            const { stdout, stderr } = await execFileAsync("cmd.exe", ["/c", trimmed], {
+                cwd: resolve(cwd),
+                timeout: 90_000,
+                maxBuffer: MAX_CMD_OUTPUT,
+            });
+            return [stdout, stderr].filter(Boolean).join("\n").slice(0, MAX_CMD_OUTPUT) || "(no output)";
+        }
+        const { stdout, stderr } = await execFileAsync(trimmed, {
+            cwd: resolve(cwd),
+            timeout: 90_000,
+            maxBuffer: MAX_CMD_OUTPUT,
+            shell: true,
+        });
+        return [stdout, stderr].filter(Boolean).join("\n").slice(0, MAX_CMD_OUTPUT) || "(no output)";
+    }
+    catch (err) {
+        const e = err;
+        const out = [e.stdout, e.stderr, e.message].filter(Boolean).join("\n");
+        return `Command failed:\n${out.slice(0, MAX_CMD_OUTPUT)}`;
+    }
+}
+export const AGENT_TOOL_DEFINITIONS = [
+    {
+        type: "function",
+        function: {
+            name: "read_file",
+            description: "Read a UTF-8 text file relative to the project root.",
+            parameters: {
+                type: "object",
+                properties: { path: { type: "string", description: "Relative file path" } },
+                required: ["path"],
+            },
+        },
+    },
+    {
+        type: "function",
+        function: {
+            name: "write_file",
+            description: "Write or overwrite a UTF-8 text file relative to the project root.",
+            parameters: {
+                type: "object",
+                properties: {
+                    path: { type: "string" },
+                    content: { type: "string" },
+                },
+                required: ["path", "content"],
+            },
+        },
+    },
+    {
+        type: "function",
+        function: {
+            name: "list_files",
+            description: "List files and directories in a project-relative folder.",
+            parameters: {
+                type: "object",
+                properties: { path: { type: "string", description: "Directory path (default .)" } },
+            },
+        },
+    },
+    {
+        type: "function",
+        function: {
+            name: "run_command",
+            description: "Run a shell command in the project directory. Prefer ekz doctor/scan when possible.",
+            parameters: {
+                type: "object",
+                properties: { command: { type: "string" } },
+                required: ["command"],
+            },
+        },
+    },
+];
+export async function executeAgentTool(cwd, name, args) {
+    switch (name) {
+        case "read_file":
+            return toolReadFile(cwd, String(args.path ?? ""));
+        case "write_file":
+            return toolWriteFile(cwd, String(args.path ?? ""), String(args.content ?? ""));
+        case "list_files":
+            return toolListFiles(cwd, args.path ? String(args.path) : ".");
+        case "run_command":
+            return toolRunCommand(cwd, String(args.command ?? ""));
+        default:
+            return `Unknown tool: ${name}`;
+    }
+}

package/dist/lib/providers/ui.d.ts

@@ -0,0 +1,4 @@
+import { type EkzLocale } from "../locale.js";
+export declare function runProvidersInteractive(locale?: EkzLocale): Promise<void>;
+export declare function formatActiveProviderLabel(locale: EkzLocale): string;
+//# sourceMappingURL=ui.d.ts.map

package/dist/lib/providers/ui.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.d.ts","sourceRoot":"","sources":["../../../src/lib/providers/ui.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AA+L9C,wBAAsB,uBAAuB,CAAC,MAAM,GAAE,SAAgB,iBAuDrE;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAMnE"}

package/dist/lib/providers/ui.js

@@ -0,0 +1,188 @@
+import readline from "readline";
+import { ok, warn } from "../output.js";
+import { c, muted } from "../theme.js";
+import { askWithPlaceholder, formatInputPrompt } from "../ui/prompt.js";
+import { PROVIDER_CATALOG, getProviderDefinition } from "./catalog.js";
+import { listProviderRows, resolveActiveCredentials, } from "./credentials.js";
+import { maskApiKey, providersFilePath, removeStoredProvider, setActiveProvider, setStoredProvider, } from "./store.js";
+function providersTitle(locale) {
+    if (locale === "pt")
+        return "Provedores (BYOK)";
+    if (locale === "zh")
+        return "供应商 (BYOK)";
+    return "Providers (BYOK)";
+}
+function t(locale, pt, en, zh) {
+    if (locale === "pt")
+        return pt;
+    if (locale === "zh")
+        return zh;
+    return en;
+}
+async function askLine(prompt, hidden = false) {
+    if (!hidden || !process.stdin.isTTY) {
+        const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+        return new Promise((resolve) => {
+            rl.question(prompt, (answer) => {
+                rl.close();
+                resolve(answer.trim());
+            });
+        });
+    }
+    process.stdout.write(prompt);
+    return new Promise((resolve) => {
+        const stdin = process.stdin;
+        const stdout = process.stdout;
+        readline.emitKeypressEvents(stdin);
+        stdin.setRawMode(true);
+        stdin.resume();
+        let value = "";
+        const cleanup = () => {
+            stdin.setRawMode(false);
+            stdin.removeListener("keypress", onKeypress);
+            stdout.write("\n");
+        };
+        const onKeypress = (_char, key) => {
+            if (!key)
+                return;
+            if (key.name === "return") {
+                cleanup();
+                resolve(value.trim());
+                return;
+            }
+            if (key.name === "c" && key.ctrl) {
+                cleanup();
+                process.exit(130);
+            }
+            if (key.name === "backspace") {
+                if (value.length > 0) {
+                    value = value.slice(0, -1);
+                    stdout.write("\b \b");
+                }
+                return;
+            }
+            const ch = key.sequence;
+            if (!ch || key.ctrl || key.meta)
+                return;
+            value += ch;
+            stdout.write("*");
+        };
+        stdin.on("keypress", onKeypress);
+    });
+}
+function printProviderList(rows, locale) {
+    console.log("");
+    console.log(`  ${c.bold}${providersTitle(locale)}${c.reset}`);
+    console.log(`  ${muted(providersFilePath())}`);
+    console.log("");
+    rows.forEach((row, index) => {
+        const n = index + 1;
+        const bullet = row.active ? `${c.green}●${c.reset}` : " ";
+        const keyCol = row.maskedKey ? muted(row.maskedKey) : muted("—");
+        const activeTag = row.active
+            ? muted(t(locale, " activo", " active", " 当前"))
+            : "";
+        console.log(`  ${bullet} ${c.bold}${String(n).padStart(2)}.${c.reset} ${row.definition.name.padEnd(14)} ${keyCol}  ${muted(row.model)}${activeTag}`);
+    });
+    console.log("");
+    console.log(`  ${muted(t(locale, "[número] configurar · u usar · r remover · q sair", "[number] configure · u use · r remove · q quit", "[数字] 配置 · u 使用 · r 删除 · q 退出"))}`);
+    console.log("");
+}
+async function configureProvider(id, locale) {
+    const def = getProviderDefinition(id);
+    if (!def)
+        return;
+    console.log("");
+    console.log(`  ${c.bold}${def.name}${c.reset} — ${muted(def.description)}`);
+    console.log(`  ${muted(def.docsUrl)}`);
+    console.log("");
+    const keyPrompt = t(locale, `Cola a API key (${def.keyHint}): `, `Paste API key (${def.keyHint}): `, `粘贴 API key (${def.keyHint}): `);
+    const apiKey = await askLine(keyPrompt, true);
+    if (!apiKey) {
+        warn(t(locale, "Chave vazia — cancelado.", "Empty key — cancelled.", "密钥为空，已取消。"));
+        return;
+    }
+    const modelDefault = def.defaultModel;
+    const modelPrompt = t(locale, `Modelo [${modelDefault}]: `, `Model [${modelDefault}]: `, `模型 [${modelDefault}]: `);
+    const modelInput = await askLine(modelPrompt);
+    const model = modelInput || modelDefault;
+    let baseUrl;
+    if (def.kind === "openai-compatible" || def.defaultBaseUrl) {
+        const urlPrompt = t(locale, `Base URL [${def.defaultBaseUrl ?? "(default)"}]: `, `Base URL [${def.defaultBaseUrl ?? "(default)"}]: `, `Base URL [${def.defaultBaseUrl ?? "(default)"}]: `);
+        const urlInput = await askLine(urlPrompt);
+        if (urlInput)
+            baseUrl = urlInput;
+    }
+    setStoredProvider(id, { apiKey, model, baseUrl });
+    ok(t(locale, `Guardado ${def.name} (${maskApiKey(apiKey)})`, `Saved ${def.name} (${maskApiKey(apiKey)})`, `已保存 ${def.name} (${maskApiKey(apiKey)})`));
+    const active = resolveActiveCredentials();
+    if (!active || active.id !== id) {
+        const useNow = await askLine(t(locale, "Usar como provider activo? [Y/n]: ", "Use as active provider? [Y/n]: ", "设为当前 provider? [Y/n]: "), false);
+        if (!useNow || useNow.toLowerCase() === "y" || useNow.toLowerCase() === "s" || useNow === "") {
+            setActiveProvider(id);
+            ok(t(locale, `${def.name} activo.`, `${def.name} is now active.`, `${def.name} 已激活。`));
+        }
+    }
+}
+function resolveRowTarget(rows, target) {
+    const trimmed = target.trim().toLowerCase();
+    const num = Number(trimmed);
+    if (Number.isInteger(num) && num >= 1 && num <= rows.length) {
+        return rows[num - 1];
+    }
+    return rows.find((r) => r.definition.id === trimmed);
+}
+export async function runProvidersInteractive(locale = "pt") {
+    while (true) {
+        const rows = listProviderRows();
+        printProviderList(rows, locale);
+        const choice = (await askWithPlaceholder({
+            prompt: formatInputPrompt(),
+            placeholder: t(locale, "número ou u/r/q", "number or u/r/q", "数字或 u/r/q"),
+        })).trim();
+        if (!choice || choice.toLowerCase() === "q" || choice === "sair" || choice === "退出")
+            break;
+        const num = Number(choice);
+        if (Number.isInteger(num) && num >= 1 && num <= rows.length) {
+            await configureProvider(rows[num - 1].definition.id, locale);
+            continue;
+        }
+        const parts = choice.split(/\s+/);
+        const cmd = parts[0]?.toLowerCase();
+        if (cmd === "u" || cmd === "use" || cmd === "usar" || cmd === "使用") {
+            const target = parts[1] ?? (await askLine(t(locale, "Número ou id: ", "Number or id: ", "编号或 id: ")));
+            const row = resolveRowTarget(rows, target);
+            if (!row?.stored?.apiKey) {
+                warn(t(locale, "Provider sem chave.", "Provider has no key.", "该 provider 未配置密钥。"));
+                continue;
+            }
+            setActiveProvider(row.definition.id);
+            ok(t(locale, `${row.definition.name} activo.`, `${row.definition.name} active.`, `${row.definition.name} 已激活。`));
+            continue;
+        }
+        if (cmd === "r" || cmd === "remove" || cmd === "remover" || cmd === "删除") {
+            const target = parts[1] ?? (await askLine(t(locale, "Número ou id: ", "Number or id: ", "编号或 id: ")));
+            const row = resolveRowTarget(rows, target);
+            if (!row) {
+                warn(t(locale, "Provider inválido.", "Invalid provider.", "无效的 provider。"));
+                continue;
+            }
+            removeStoredProvider(row.definition.id);
+            ok(t(locale, `${row.definition.name} removido.`, `${row.definition.name} removed.`, `${row.definition.name} 已删除。`));
+            continue;
+        }
+        const byId = PROVIDER_CATALOG.find((p) => p.id === choice.toLowerCase());
+        if (byId) {
+            await configureProvider(byId.id, locale);
+            continue;
+        }
+        warn(t(locale, "Opção inválida.", "Invalid option.", "无效选项。"));
+    }
+}
+export function formatActiveProviderLabel(locale) {
+    const creds = resolveActiveCredentials();
+    if (!creds) {
+        return t(locale, "sem provider", "no provider", "未配置");
+    }
+    return `${creds.definition.name} · ${creds.maskedKey}`;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ekzs/cli",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "CLI agent for e-Kwanza v2.4 — health checks, code scan, webhook tests, AI assistance",
   "type": "module",
   "bin": {

package/skills/ekz-sdk-cli/SKILL.md

@@ -35,15 +35,17 @@ Model env: `EKZ_AGENT_MODEL=composer-2.5-fast` → `composer-2.5` + `fast: true`
 | `ekz doctor` | Validate `.env`, live OAuth (free) |
 | `ekz scan` | Common integration mistakes (free) |
 | `ekz webhook <url>` | POST sample payload (free) |
-| `ekz agent` | Local coding agent, edits repo (CURSOR_API_KEY) |
+| `ekz health` | OAuth + rail health (free) |
+| `ekz providers` | Configure LLM API keys — BYOK (`ekz provedores` / `ekz 供应商`) |
+| `ekz agent` | Local coding agent (BYOK — configure via `ekz providers`) |
 | `ekz fix` | Auto-audit + fix integration |
-| `ekz ask` | Remote Q&A only (EKZ_AGENT_API_KEY) |
+| `ekz ask` | BYOK Q&A only (no file edits) |
 
 Modes: `--mode agent` (default) | `--mode plan` | `--mode ask`. Shorthand: `--plan` = plan mode.
-In the REPL: `/help`, `/mode agent|plan|ask`, `/doctor`, `/scan`, `/lang`, `/save`, `/resume`.
+In the REPL: `/help`, `/providers` (`/provedores`, `/供应商`), `/mode agent|plan|ask`, `/doctor`, `/scan`, `/lang`, `/save`, `/resume`.
 
 ```bash
-export CURSOR_API_KEY=crsr_...
+ekz providers           # BYOK keys → ~/.ekz/providers.json
 ekz                    # interactive REPL (agent mode)
 ekz --mode plan        # plan before edits
 ekz --mode ask         # remote Q&A, no edits