@idcloudhost/ai-connect 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 PT Cloud Hosting Indonesia (IDCloudHost)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,287 @@
+# @idcloudhost/ai-connect
+
+Point any AI agent at the IDCloudHost PaaS AI gateway in one command.
+
+The gateway is OpenAI-compatible, so in principle every agent below already works
+with it. In practice each one wants the endpoint spelled out in its own config
+file, in its own format, under its own key names — five different config
+languages across the tools people actually use. This does that part for you, and
+then proves the result works instead of assuming it.
+
+```bash
+npx @idcloudhost/ai-connect login     # save your gateway URL + key once
+npx @idcloudhost/ai-connect connect   # configure every agent it finds
+npx @idcloudhost/ai-connect doctor    # prove it works
+```
+
+## What it supports
+
+| Agent | Written to | Notes |
+|---|---|---|
+| [opencode](https://opencode.ai) | `~/.config/opencode/opencode.json` | via `@ai-sdk/openai-compatible` |
+| [pi](https://github.com/badlogic/pi-mono) | `~/.pi/agent/models.json` | |
+| [omp (oh-my-pi)](https://github.com/can1357/oh-my-pi) | `~/.omp/agent/models.yml` | |
+| [Hermes Agent](https://github.com/NousResearch/hermes-agent) | `~/.hermes/config.yaml` | one active model at a time |
+| [OpenClaw](https://docs.openclaw.ai) | `~/.openclaw/openclaw.json` | provider **and** `agents.defaults.models` allowlist |
+| [Codex CLI](https://developers.openai.com/codex) | `~/.codex/config.toml` | key must come from the environment |
+| [Claude Code](https://docs.claude.com/en/docs/claude-code) | `~/.claude/settings.json` | needs the Anthropic `/v1/messages` route |
+| [Crush](https://github.com/charmbracelet/crush) | `~/.config/crush/crush.json` | |
+| [Goose](https://block.github.io/goose) | `~/.config/goose/config.yaml` | key lives in your OS keyring |
+| [Aider](https://aider.chat) | `~/.aider.conf.yml` | key deliberately kept out of the file |
+| [Continue](https://continue.dev) | `~/.continue/config.yaml` | |
+| [Zed](https://zed.dev) | `~/.config/zed/settings.json` | key is entered in the Agent panel |
+| Shell / anything else | `~/.config/idch-ai/env.sh` | `OPENAI_BASE_URL` + `OPENAI_API_KEY` |
+
+Cline (and its forks Roo Code and Kilo Code), Cursor, and the Gemini-CLI forks
+like Qwen Code keep their settings somewhere a CLI has no business writing —
+VS Code's encrypted global state, a GUI keychain. For those it prints the exact
+values to paste, filled in with your real URL and models.
+
+## Install
+
+```bash
+npm i -g @idcloudhost/ai-connect     # then: idch-ai …
+# or just: npx @idcloudhost/ai-connect …
+```
+
+Node 18.17 or newer. No native dependencies.
+
+## Getting a key
+
+An organization admin enables AI and creates a virtual key in the IDCloudHost
+dashboard. The secret is shown exactly once, so save it when it appears.
+
+`idch-ai login` can do the lookup for you if you have a dashboard token — it
+reads the gateway URL from the dashboard and can mint a key if you are an admin.
+Otherwise paste the URL and key you already have.
+
+The gateway URL is **not** hard-coded in this package. It is per-environment and
+published by the dashboard at runtime, so the tool discovers it rather than
+guessing.
+
+## Commands
+
+```
+idch-ai connect [agents…]   Write provider config for one, several, or all detected agents
+idch-ai list                Show supported agents and which are installed here
+idch-ai models              List the models this key may use, with context sizes and pricing
+idch-ai doctor              Probe the live gateway and check every agent config
+idch-ai remove [agents…]    Strip the provider block back out
+idch-ai login / logout      Manage the saved profile
+idch-ai env [--shell fish|powershell|dotenv]
+idch-ai snippet [curl|node|python|vercel-ai|langchain]
+```
+
+Run `idch-ai connect` with no arguments and it detects what you have installed
+and asks which to configure. Name them to skip the prompt:
+
+```bash
+idch-ai connect opencode
+idch-ai connect pi,omp,hermes
+idch-ai connect all --model deepseek-chat
+```
+
+## How it treats your config files
+
+These are files you hand-edit, so it behaves like a careful colleague rather
+than a code generator:
+
+- **Nothing is clobbered.** Only the provider block keyed by `--provider-id`
+  (default `idcloudhost`) is touched. Your themes, keybindings, other providers
+  and unrelated settings are left exactly as they were.
+- **Comments survive.** YAML and JSONC files are edited in place, not
+  reserialised, so `# do not lose this` is still there afterwards.
+- **Backups, always.** Overwriting an existing file first writes
+  `<file>.idch-bak-<timestamp>` beside it.
+- **Atomic writes.** Temp file plus rename, so an interrupted run can never
+  leave you with half a config.
+- **Idempotent.** Running it twice changes nothing the second time — no backup
+  churn.
+- **Reversible.** `idch-ai remove` takes the block back out and prunes the empty
+  containers it leaves behind.
+
+Preview anything before it happens:
+
+```bash
+idch-ai connect openclaw --dry-run --print
+```
+
+## Where the key ends up
+
+Some agents can only read a key from the environment (Codex, Goose, Zed), some
+prefer a file, most accept either. Choose with `--secret`:
+
+```bash
+idch-ai connect opencode --secret env     # writes {env:IDCH_AI_API_KEY}
+idch-ai connect opencode --secret inline  # writes the key into the file
+```
+
+Adapters that cannot honour your choice fall back to what the agent supports and
+say so in the output. The saved profile at `~/.config/idch-ai/config.json` is
+written `chmod 600`.
+
+`idch-ai remove` strips config blocks; `idch-ai logout` forgets the profile. Do
+both if you are rotating a key.
+
+## doctor: measured, not assumed
+
+The gateway is a LiteLLM proxy in front of whatever upstream models your
+environment has configured. Which OpenAI features work is therefore a property
+of your deployment and the model you picked — not something a compatibility
+table can tell you. `doctor` makes real calls and reports what came back.
+
+Illustrative output — the exact statuses and wording are your gateway's, not
+ours:
+
+```
+Gateway capabilities
+CHECK                                             RESULT  DETAIL
+GET /models                                       yes     7 models visible to this key
+POST /chat/completions                            yes     replied "ok"
+Server-sent event streaming (stream: true)        yes     14 chunks
+Tool / function calling                           yes     model returned a tool_call
+response_format: json_object                      yes     accepted
+response_format: json_schema (structured output)  no      HTTP 4xx: <whatever your gateway said>
+Image input (multimodal content parts)            yes     accepted
+POST /embeddings                                  yes     1 vector(s)
+POST /responses (OpenAI Responses API)            no      HTTP 404: Not Found
+POST /messages (Anthropic wire format)            yes     accepted
+Rate limit / quota headers                        yes     x-ratelimit-remaining-requests
+```
+
+A `no` means that gateway or that model does not support it. It is information,
+not a failure of this tool. Claude Code in particular depends on the Anthropic
+`/messages` row being `yes` — check before relying on it.
+
+Classification is deliberately coarse: a `2xx` is a `yes`, anything else is a
+`no`, and the gateway's own status and message are passed through verbatim in the
+detail column. Nothing keys on matching a particular error string, because the
+wording a gateway uses for an unsupported feature is not something this package
+can know in advance — you read what your gateway actually said.
+
+### What is known about `ai.paas.id` without a key
+
+Verified 2026-08-30 by unauthenticated probing, which distinguishes a registered
+route (LiteLLM's `auth_error` envelope) from an unregistered one (FastAPI's
+`{"detail":"Not Found"}`):
+
+- Registered under `/v1`: `messages`, `chat/completions`, `embeddings`,
+  `responses`, `completions`, `models`, `model/info`.
+- The non-`/v1` mounts are **not** symmetric. `/chat/completions` and
+  `/embeddings` answer at the root too, `/models` answers `GET` only (405 to a
+  POST), and `/messages` is **`/v1` only** — it 404s at the root.
+
+That last point is why the Claude Code adapter sets `ANTHROPIC_BASE_URL` to the
+origin rather than the `/v1` base: Claude Code appends `/v1/messages` itself.
+
+This tells you the routes are *registered*, not that any particular model behind
+them answers. LiteLLM mounts `/v1/messages` regardless of what the upstream
+supports. The functional question is what `doctor` answers, with your key and
+your model.
+
+### The base-URL probe checks its own assumption
+
+Finding the right base URL means asking `/models` at a few candidate paths and
+reading the status code. A `401` there normally means "the route exists, your key
+is the problem" — but that inference only holds if the host returns `404` for
+paths that *don't* exist. Put a proxy, WAF or login page in front that answers
+before routing, and every path looks identical; the inference silently becomes
+worthless and the probe would pick whichever candidate it tried first.
+
+So it doesn't assume. Whenever a candidate answers with something other than
+`200` or `404`, the probe issues one unauthenticated request to a path that
+cannot exist (`/__idch-probe-<random>`; the random segment stops a cache or WAF
+from holding a stored answer). If that returns `404`, the discrimination is live
+and the verdict stands. If it returns anything uniform, the tool refuses to
+guess:
+
+```
+✖ could not verify https://gateway.example: this host answers the same way for
+  paths that do not exist, so an auth error proves nothing about whether the
+  OpenAI routes are there. Something is likely replying before routing (a proxy,
+  WAF, or login page).
+```
+
+A `200` settles things outright, so the extra request costs nothing on the happy
+path with a valid key.
+
+## Programmatic use
+
+Every command is available as a library, for devcontainer bootstraps and
+internal installers:
+
+```ts
+import { resolveSource, buildTarget, getAdapter } from '@idcloudhost/ai-connect';
+
+const source = await resolveSource({ baseUrl: process.env.IDCH_AI_BASE_URL, apiKey: key });
+const target = await buildTarget(source, {});
+
+await getAdapter('opencode')!.apply({
+  target,
+  dryRun: false,
+  secretMode: 'inline',
+  scope: 'user',
+  cwd: process.cwd(),
+});
+```
+
+`probeCapabilities`, `listModels`, `resolveApiBase` and the `ManagementClient`
+are exported too.
+
+## Configuration reference
+
+| Flag | Environment | Meaning |
+|---|---|---|
+| `--base-url` | `IDCH_AI_BASE_URL` | Gateway base URL |
+| `--api-key` | `IDCH_AI_API_KEY` | Virtual key |
+| `--profile` | | Named saved profile |
+| `--dashboard-url`, `--token`, `--org` | | Discover the gateway through the dashboard API |
+| `--model` | | Model to make the default |
+| `--only a,b` | | Register only these models |
+| `--provider-id` | | Key the block is written under (default `idcloudhost`) |
+| `--secret inline\|env` | | Where the key goes |
+| `--scope user\|project` | | Home directory or the current project |
+| `--config-path` | | Override the target file (single agent only) |
+| `--dry-run`, `--print` | | Preview, with a diff |
+| `--no-verify`, `--no-save` | | Skip the live test call / profile save |
+| `--json` | | Machine-readable output |
+| `--yes` | | Never prompt |
+
+Values resolve in this order: flag, environment, saved profile, dashboard
+lookup, interactive prompt.
+
+## Adding an agent
+
+An adapter is one file in `src/adapters/` implementing `detect`, `configPath`,
+`apply` and `remove`, registered in `src/adapters/index.ts`. The integration
+suite automatically covers every registered adapter: it checks the written
+config points at the gateway, that a second run is a no-op, and that `remove`
+leaves no trace.
+
+```bash
+npm install
+npm run build
+npm test
+```
+
+Tests run against a mock OpenAI-compatible server and a temporary `HOME`, so
+they never touch your own agent configs.
+
+## Known limits
+
+- The gateway URL differs per environment. Always discover it; never hard-code it.
+- Route detection relies on the gateway answering `404` for unknown paths. That
+  is checked on every run rather than assumed — see above — but if the check
+  fails you get an error, not a guess.
+- Model ids are passed through verbatim. There is no provider prefix to add, and
+  the id you send must be one your key is allowed to use — the allowlist is set
+  per team and per key by an organization admin.
+- Deleting a config block can take an adjacent comment with it if the comment was
+  attached to the key being removed. The backup path is printed for that reason.
+- A route existing is not the same as a model serving it. Claude Code, the
+  Responses API and embeddings all need an upstream that actually answers, not
+  just a mounted path. `doctor` tells you which you have.
+
+## License
+
+MIT

package/dist/adapters/aider.d.ts

@@ -0,0 +1,11 @@
+import type { Adapter } from '../types.js';
+/**
+ * Aider routes through LiteLLM internally, so an OpenAI-compatible gateway is
+ * addressed as `openai/<model>` with `openai-api-base` repointed.
+ *
+ * The key is deliberately NOT written to the config file: aider's own docs push
+ * people to `.env` / the environment, and `~/.aider.conf.yml` is a file users
+ * commonly commit into dotfile repos.
+ */
+export declare const aiderAdapter: Adapter;
+//# sourceMappingURL=aider.d.ts.map

package/dist/adapters/aider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aider.d.ts","sourceRoot":"","sources":["../../src/adapters/aider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAA6B,MAAM,aAAa,CAAC;AAUtE;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,EAAE,OAqD1B,CAAC"}

package/dist/adapters/aider.js

@@ -0,0 +1,69 @@
+import path from 'node:path';
+import { readIfExists, shortenHome, writeFileSafely } from '../fsutil/edit.js';
+import { editYaml, editYamlPruned, parseYaml } from '../fsutil/formats.js';
+import { detectByBinOrConfig } from '../core/detect.js';
+import { home, result } from './helpers.js';
+function userConfig() {
+    return home('.aider.conf.yml');
+}
+/**
+ * Aider routes through LiteLLM internally, so an OpenAI-compatible gateway is
+ * addressed as `openai/<model>` with `openai-api-base` repointed.
+ *
+ * The key is deliberately NOT written to the config file: aider's own docs push
+ * people to `.env` / the environment, and `~/.aider.conf.yml` is a file users
+ * commonly commit into dotfile repos.
+ */
+export const aiderAdapter = {
+    id: 'aider',
+    name: 'Aider',
+    summary: 'Pair-programming CLI. Config in ~/.aider.conf.yml, key from the environment.',
+    docsUrl: 'https://aider.chat/docs/config/aider_conf.html',
+    bins: ['aider'],
+    mode: 'auto',
+    supportsProjectScope: true,
+    secretModes: ['env'],
+    async detect() {
+        return detectByBinOrConfig(['aider'], [userConfig()]);
+    },
+    configPath({ scope, cwd, configPathOverride }) {
+        if (configPathOverride)
+            return configPathOverride;
+        return scope === 'project' ? path.join(cwd, '.aider.conf.yml') : userConfig();
+    },
+    async apply(opts) {
+        const file = this.configPath(opts);
+        const before = await readIfExists(file);
+        const { target } = opts;
+        const after = editYaml(before, (doc) => {
+            doc.setIn(['openai-api-base'], target.apiBase);
+            if (target.defaultModel)
+                doc.setIn(['model'], `openai/${target.defaultModel}`);
+        });
+        const change = await writeFileSafely(file, after, { dryRun: opts.dryRun });
+        return result(this.id, [change], {
+            envVars: { OPENAI_API_KEY: target.apiKey },
+            notes: [
+                'Export OPENAI_API_KEY before running aider — the key is kept out of the config file on purpose.',
+                'Models are addressed as openai/<model-id>; aider resolves them through LiteLLM.',
+                'Unknown model ids make aider warn about missing metadata. That is cosmetic; add .aider.model.metadata.json to silence it.',
+            ],
+            tryCommand: target.defaultModel ? `aider --model openai/${target.defaultModel}` : 'aider',
+        });
+    },
+    async remove(opts) {
+        const file = this.configPath(opts);
+        const before = await readIfExists(file);
+        if (before === null)
+            return result(this.id, []);
+        const model = parseYaml(before).model;
+        const after = editYamlPruned(before, (doc) => {
+            doc.deleteIn(['openai-api-base']);
+            if (typeof model === 'string' && model.startsWith('openai/'))
+                doc.deleteIn(['model']);
+        });
+        const change = await writeFileSafely(file, after, { dryRun: opts.dryRun });
+        return result(this.id, [change], { notes: [`Cleared the gateway keys from ${shortenHome(file)}.`] });
+    },
+};
+//# sourceMappingURL=aider.js.map

package/dist/adapters/aider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aider.js","sourceRoot":"","sources":["../../src/adapters/aider.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE5C,SAAS,UAAU;IACjB,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,YAAY,GAAY;IACnC,EAAE,EAAE,OAAO;IACX,IAAI,EAAE,OAAO;IACb,OAAO,EAAE,8EAA8E;IACvF,OAAO,EAAE,gDAAgD;IACzD,IAAI,EAAE,CAAC,OAAO,CAAC;IACf,IAAI,EAAE,MAAM;IACZ,oBAAoB,EAAE,IAAI;IAC1B,WAAW,EAAE,CAAC,KAAK,CAAC;IAEpB,KAAK,CAAC,MAAM;QACV,OAAO,mBAAmB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,kBAAkB,EAAE;QAC3C,IAAI,kBAAkB;YAAE,OAAO,kBAAkB,CAAC;QAClD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAkB;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAExB,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;YACrC,GAAG,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/C,IAAI,MAAM,CAAC,YAAY;gBAAE,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE;YAC/B,OAAO,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE;YAC1C,KAAK,EAAE;gBACL,iGAAiG;gBACjG,iFAAiF;gBACjF,2HAA2H;aAC5H;YACD,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,wBAAwB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,OAAO;SAC1F,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAI;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC;QACtC,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;YAC3C,GAAG,CAAC,QAAQ,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,iCAAiC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;CACF,CAAC"}

package/dist/adapters/claude-code.d.ts

@@ -0,0 +1,17 @@
+import type { Adapter } from '../types.js';
+/**
+ * Claude Code speaks the Anthropic wire format, not OpenAI's. It works against
+ * our gateway only through LiteLLM's Anthropic-compatible `/v1/messages` route.
+ *
+ * `ANTHROPIC_BASE_URL` must be the ORIGIN, because Claude Code appends
+ * `/v1/messages` itself. This is not a guess: on ai.paas.id the Anthropic route
+ * is mounted under `/v1` only — `/v1/messages` exists while `/messages` returns
+ * 404, unlike `/chat/completions` and `/embeddings` which answer at both. Setting
+ * the base to the `/v1` URL would request `/v1/v1/messages` and 404.
+ *
+ * That the route is registered does not mean the model behind it serves Anthropic
+ * requests — LiteLLM mounts /v1/messages regardless of upstream config. Only an
+ * authenticated call settles it, which is what `idch-ai doctor` makes.
+ */
+export declare const claudeCodeAdapter: Adapter;
+//# sourceMappingURL=claude-code.d.ts.map

package/dist/adapters/claude-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code.d.ts","sourceRoot":"","sources":["../../src/adapters/claude-code.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAA6B,MAAM,aAAa,CAAC;AAUtE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,iBAAiB,EAAE,OAuD/B,CAAC"}

package/dist/adapters/claude-code.js

@@ -0,0 +1,73 @@
+import { readIfExists, shortenHome, writeFileSafely } from '../fsutil/edit.js';
+import { parseJson, stringifyJson } from '../fsutil/formats.js';
+import { detectByBinOrConfig } from '../core/detect.js';
+import { deleteIn, home, result, setIn } from './helpers.js';
+function userConfig() {
+    return home('.claude', 'settings.json');
+}
+/**
+ * Claude Code speaks the Anthropic wire format, not OpenAI's. It works against
+ * our gateway only through LiteLLM's Anthropic-compatible `/v1/messages` route.
+ *
+ * `ANTHROPIC_BASE_URL` must be the ORIGIN, because Claude Code appends
+ * `/v1/messages` itself. This is not a guess: on ai.paas.id the Anthropic route
+ * is mounted under `/v1` only — `/v1/messages` exists while `/messages` returns
+ * 404, unlike `/chat/completions` and `/embeddings` which answer at both. Setting
+ * the base to the `/v1` URL would request `/v1/v1/messages` and 404.
+ *
+ * That the route is registered does not mean the model behind it serves Anthropic
+ * requests — LiteLLM mounts /v1/messages regardless of upstream config. Only an
+ * authenticated call settles it, which is what `idch-ai doctor` makes.
+ */
+export const claudeCodeAdapter = {
+    id: 'claude-code',
+    name: 'Claude Code',
+    summary: "Anthropic's terminal agent. Uses the gateway's Anthropic-compatible /v1/messages route.",
+    docsUrl: 'https://docs.claude.com/en/docs/claude-code/settings',
+    bins: ['claude'],
+    mode: 'auto',
+    secretModes: ['inline', 'env'],
+    async detect() {
+        return detectByBinOrConfig(['claude'], [userConfig(), home('.claude')]);
+    },
+    configPath({ configPathOverride }) {
+        return configPathOverride ?? userConfig();
+    },
+    async apply(opts) {
+        const file = this.configPath(opts);
+        const before = await readIfExists(file);
+        const doc = parseJson(before);
+        const { target } = opts;
+        const env = {
+            ANTHROPIC_BASE_URL: target.origin,
+            ANTHROPIC_AUTH_TOKEN: target.apiKey,
+        };
+        if (target.defaultModel)
+            env.ANTHROPIC_MODEL = target.defaultModel;
+        const existing = doc.env;
+        setIn(doc, ['env'], { ...(existing && typeof existing === 'object' ? existing : {}), ...env });
+        const change = await writeFileSafely(file, stringifyJson(doc, before), { dryRun: opts.dryRun });
+        return result(this.id, [change], {
+            notes: [
+                'Claude Code needs a model that answers on the Anthropic /v1/messages route. The route existing is not enough — confirm with: idch-ai doctor',
+                `ANTHROPIC_BASE_URL is set to the origin (${target.origin}) on purpose — Claude Code appends /v1/messages itself, and that route is mounted under /v1 only.`,
+                'This writes a live token into ~/.claude/settings.json. Use `idch-ai env --shell` instead if you would rather keep it out of a file.',
+                'Run `claude` in a new shell so the settings are picked up.',
+            ],
+            tryCommand: 'claude',
+        });
+    },
+    async remove(opts) {
+        const file = this.configPath(opts);
+        const before = await readIfExists(file);
+        if (before === null)
+            return result(this.id, []);
+        const doc = parseJson(before);
+        for (const key of ['ANTHROPIC_BASE_URL', 'ANTHROPIC_AUTH_TOKEN', 'ANTHROPIC_MODEL']) {
+            deleteIn(doc, ['env', key]);
+        }
+        const change = await writeFileSafely(file, stringifyJson(doc, before), { dryRun: opts.dryRun });
+        return result(this.id, [change], { notes: [`Cleared the gateway env vars from ${shortenHome(file)}.`] });
+    },
+};
+//# sourceMappingURL=claude-code.js.map

package/dist/adapters/claude-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code.js","sourceRoot":"","sources":["../../src/adapters/claude-code.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAE7D,SAAS,UAAU;IACjB,OAAO,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAY;IACxC,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,aAAa;IACnB,OAAO,EAAE,yFAAyF;IAClG,OAAO,EAAE,sDAAsD;IAC/D,IAAI,EAAE,CAAC,QAAQ,CAAC;IAChB,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC;IAE9B,KAAK,CAAC,MAAM;QACV,OAAO,mBAAmB,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,UAAU,CAAC,EAAE,kBAAkB,EAAE;QAC/B,OAAO,kBAAkB,IAAI,UAAU,EAAE,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAkB;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAExB,MAAM,GAAG,GAA2B;YAClC,kBAAkB,EAAE,MAAM,CAAC,MAAM;YACjC,oBAAoB,EAAE,MAAM,CAAC,MAAM;SACpC,CAAC;QACF,IAAI,MAAM,CAAC,YAAY;YAAE,GAAG,CAAC,eAAe,GAAG,MAAM,CAAC,YAAY,CAAC;QAEnE,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC;QACzB,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;QAE/F,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAChG,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE;YAC/B,KAAK,EAAE;gBACL,6IAA6I;gBAC7I,4CAA4C,MAAM,CAAC,MAAM,mGAAmG;gBAC5J,qIAAqI;gBACrI,4DAA4D;aAC7D;YACD,UAAU,EAAE,QAAQ;SACrB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAI;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,CAAC,oBAAoB,EAAE,sBAAsB,EAAE,iBAAiB,CAAC,EAAE,CAAC;YACpF,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAChG,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,qCAAqC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3G,CAAC;CACF,CAAC"}

package/dist/adapters/codex.d.ts

@@ -0,0 +1,11 @@
+import type { Adapter } from '../types.js';
+/**
+ * OpenAI Codex CLI, ~/.codex/config.toml.
+ *
+ * Codex reads the key from an environment variable named by `env_key` and has no
+ * inline-secret form, so this adapter is env-only by design.
+ * `wire_api = "chat"` selects /chat/completions; "responses" selects /responses,
+ * which our gateway only serves if the upstream supports it — check with `doctor`.
+ */
+export declare const codexAdapter: Adapter;
+//# sourceMappingURL=codex.d.ts.map

package/dist/adapters/codex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex.d.ts","sourceRoot":"","sources":["../../src/adapters/codex.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAA6B,MAAM,aAAa,CAAC;AAUtE;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,EAAE,OAwD1B,CAAC"}

package/dist/adapters/codex.js

@@ -0,0 +1,71 @@
+import path from 'node:path';
+import os from 'node:os';
+import { readIfExists, shortenHome, writeFileSafely } from '../fsutil/edit.js';
+import { parseToml, stringifyToml } from '../fsutil/formats.js';
+import { detectByBinOrConfig } from '../core/detect.js';
+import { KEY_ENV, deleteIn, result, setIn } from './helpers.js';
+function userConfig() {
+    return path.join(process.env.CODEX_HOME ?? path.join(os.homedir(), '.codex'), 'config.toml');
+}
+/**
+ * OpenAI Codex CLI, ~/.codex/config.toml.
+ *
+ * Codex reads the key from an environment variable named by `env_key` and has no
+ * inline-secret form, so this adapter is env-only by design.
+ * `wire_api = "chat"` selects /chat/completions; "responses" selects /responses,
+ * which our gateway only serves if the upstream supports it — check with `doctor`.
+ */
+export const codexAdapter = {
+    id: 'codex',
+    name: 'Codex CLI',
+    summary: "OpenAI's terminal coding agent. Providers live in ~/.codex/config.toml.",
+    docsUrl: 'https://developers.openai.com/codex/config-reference',
+    bins: ['codex'],
+    mode: 'auto',
+    secretModes: ['env'],
+    async detect() {
+        return detectByBinOrConfig(['codex'], [userConfig()]);
+    },
+    configPath({ configPathOverride }) {
+        return configPathOverride ?? userConfig();
+    },
+    async apply(opts) {
+        const file = this.configPath(opts);
+        const before = await readIfExists(file);
+        const doc = parseToml(before);
+        const { target } = opts;
+        setIn(doc, ['model_providers', target.providerId], {
+            name: target.providerLabel,
+            base_url: target.apiBase,
+            env_key: KEY_ENV,
+            wire_api: 'chat',
+        });
+        doc.model_provider = target.providerId;
+        if (target.defaultModel)
+            doc.model = target.defaultModel;
+        const change = await writeFileSafely(file, stringifyToml(doc), { dryRun: opts.dryRun });
+        return result(this.id, [change], {
+            // Codex has no inline-key form; the env var is mandatory regardless of --secret.
+            envVars: { [KEY_ENV]: target.apiKey },
+            notes: [
+                `Codex reads the key from $${KEY_ENV} — export it before starting codex.`,
+                'Switch providers per run with: codex --config model_provider=<id>',
+                `If the model rejects requests, try wire_api = "responses" in ${shortenHome(file)} — the gateway only supports it when the upstream does.`,
+            ],
+            tryCommand: target.defaultModel ? `codex --model ${target.defaultModel}` : 'codex',
+        });
+    },
+    async remove(opts) {
+        const file = this.configPath(opts);
+        const before = await readIfExists(file);
+        if (before === null)
+            return result(this.id, []);
+        const doc = parseToml(before);
+        deleteIn(doc, ['model_providers', opts.providerId]);
+        if (doc.model_provider === opts.providerId)
+            delete doc.model_provider;
+        const change = await writeFileSafely(file, stringifyToml(doc), { dryRun: opts.dryRun });
+        return result(this.id, [change], { notes: [`Removed provider "${opts.providerId}" from ${shortenHome(file)}.`] });
+    },
+};
+//# sourceMappingURL=codex.js.map

package/dist/adapters/codex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex.js","sourceRoot":"","sources":["../../src/adapters/codex.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAQ,MAAM,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAEtE,SAAS,UAAU;IACjB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC;AAC/F,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,YAAY,GAAY;IACnC,EAAE,EAAE,OAAO;IACX,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,yEAAyE;IAClF,OAAO,EAAE,sDAAsD;IAC/D,IAAI,EAAE,CAAC,OAAO,CAAC;IACf,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,CAAC,KAAK,CAAC;IAEpB,KAAK,CAAC,MAAM;QACV,OAAO,mBAAmB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,UAAU,CAAC,EAAE,kBAAkB,EAAE;QAC/B,OAAO,kBAAkB,IAAI,UAAU,EAAE,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAkB;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAExB,KAAK,CAAC,GAAG,EAAE,CAAC,iBAAiB,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE;YACjD,IAAI,EAAE,MAAM,CAAC,aAAa;YAC1B,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO;YAChB,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QAEH,GAAG,CAAC,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC;QACvC,IAAI,MAAM,CAAC,YAAY;YAAE,GAAG,CAAC,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC;QAEzD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACxF,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE;YAC/B,iFAAiF;YACjF,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;YACrC,KAAK,EAAE;gBACL,6BAA6B,OAAO,qCAAqC;gBACzE,mEAAmE;gBACnE,gEAAgE,WAAW,CAAC,IAAI,CAAC,yDAAyD;aAC3I;YACD,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,OAAO;SACnF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAI;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,QAAQ,CAAC,GAAG,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QACpD,IAAI,GAAG,CAAC,cAAc,KAAK,IAAI,CAAC,UAAU;YAAE,OAAO,GAAG,CAAC,cAAc,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACxF,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,qBAAqB,IAAI,CAAC,UAAU,UAAU,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpH,CAAC;CACF,CAAC"}

package/dist/adapters/continue.d.ts

@@ -0,0 +1,7 @@
+import type { Adapter } from '../types.js';
+/**
+ * Continue (VS Code / JetBrains). `models` is a list, not a map, so we replace
+ * entries whose `provider` is ours and keep everything else the user added.
+ */
+export declare const continueAdapter: Adapter;
+//# sourceMappingURL=continue.d.ts.map

package/dist/adapters/continue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"continue.d.ts","sourceRoot":"","sources":["../../src/adapters/continue.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAA6B,MAAM,aAAa,CAAC;AAUtE;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,OAqE7B,CAAC"}