@kidsinai/kids-client 0.0.10 → 0.0.11

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@kidsinai/kids-client",
-  "version": "0.0.10",
+  "version": "0.0.11",
   "type": "module",
   "description": "Own-client TUI for Kids OpenCode — talks to local `opencode serve` via @opencode-ai/sdk v2 with kid-warm rendering, mission progress, permission dialog, and stderr-tail audit pipeline.",
   "license": "MIT",

package/src/core/connection.ts

@@ -13,10 +13,17 @@ export type OpencodeClient = ReturnType<typeof createOpencodeClient>
 export interface ConnectionOptions {
   baseUrl: string
   serverPassword: string
+  /**
+   * Must match upstream's `OPENCODE_SERVER_USERNAME` (default "opencode").
+   * Sending an empty username here yields a 401 against opencode ≥1.x —
+   * see opencode-kernel server/auth.ts `authorized()` which requires
+   * `credentials.username === config.username`.
+   */
+  serverUsername: string
 }
 
 export function createKidsClient(opts: ConnectionOptions): OpencodeClient {
-  const authHeader = "Basic " + btoa(`:${opts.serverPassword}`)
+  const authHeader = buildAuthHeader(opts.serverUsername, opts.serverPassword)
   return createOpencodeClient({
     baseUrl: opts.baseUrl,
     headers: {
@@ -24,3 +31,13 @@ export function createKidsClient(opts: ConnectionOptions): OpencodeClient {
     },
   } as Parameters<typeof createOpencodeClient>[0])
 }
+
+/**
+ * Construct the HTTP Basic-Auth header opencode serve expects.
+ * Exposed so serve-manager's probe + tests can share the exact format
+ * upstream `authorized()` checks against (username MUST match config,
+ * default "opencode" — empty username produces 401 on opencode ≥1.x).
+ */
+export function buildAuthHeader(username: string, password: string): string {
+  return "Basic " + btoa(`${username}:${password}`)
+}

package/src/core/env.ts

@@ -14,6 +14,13 @@ export interface KidsClientEnv {
   opencodeBaseUrl: string
   /** HTTP Basic Auth password for serve. Mandatory. */
   opencodeServerPassword: string
+  /**
+   * HTTP Basic Auth *username* for serve. Defaults to "opencode" to match
+   * upstream's `OPENCODE_SERVER_USERNAME` default (opencode-kernel
+   * packages/opencode/src/server/auth.ts) — sending an empty username here
+   * causes a 401 against opencode ≥1.x even when the password is correct.
+   */
+  opencodeServerUsername: string
   /** DeepRouter tenant key. May be empty when using BYOK bypass. */
   deeprouterApiKey: string
   /** True if the wrapper set KIDS_LLM_BYPASS_GATEWAY=1 (BYOK dogfood mode). */
@@ -39,6 +46,7 @@ export function readEnv(): KidsClientEnv {
   return {
     opencodeBaseUrl: process.env.OPENCODE_BASE_URL ?? "http://127.0.0.1:4096",
     opencodeServerPassword: password,
+    opencodeServerUsername: process.env.OPENCODE_SERVER_USERNAME || "opencode",
     deeprouterApiKey: process.env.DEEPROUTER_API_KEY ?? "",
     bypassGateway: process.env.KIDS_LLM_BYPASS_GATEWAY === "1",
     coursePack: process.env.KIDS_COURSE_PACK || null,

package/src/core/serve-manager.ts

@@ -10,6 +10,7 @@
  */
 
 import { spawn, type Subprocess } from "bun"
+import { buildAuthHeader } from "./connection.ts"
 
 export type ServeReadiness =
   | { kind: "already_running" }
@@ -32,6 +33,13 @@ export type ProbeResult = "ok" | "auth_mismatch" | "offline"
 export interface ServeManagerOptions {
   baseUrl: string
   serverPassword: string
+  /**
+   * Must match upstream's `OPENCODE_SERVER_USERNAME` (default "opencode").
+   * The probe sends this as the Basic-auth username — upstream's
+   * authorized() requires an exact match, so an empty username produces
+   * a 401 even when the password is correct.
+   */
+  serverUsername: string
   opencodeBin: string
   /** Max wait for readiness probe in ms. Default 10s. */
   readyTimeoutMs?: number
@@ -75,6 +83,7 @@ export class ServeManager {
       env: {
         ...process.env,
         OPENCODE_SERVER_PASSWORD: this.opts.serverPassword,
+        OPENCODE_SERVER_USERNAME: this.opts.serverUsername,
       },
       stdout: "pipe",
       stderr: "pipe",
@@ -121,7 +130,7 @@ export class ServeManager {
     try {
       const res = await fetch(`${this.opts.baseUrl}/app`, {
         headers: {
-          authorization: "Basic " + btoa(`:${this.opts.serverPassword}`),
+          authorization: buildAuthHeader(this.opts.serverUsername, this.opts.serverPassword),
         },
       })
       return classifyProbeStatus(res.status)

package/src/index.tsx

@@ -64,6 +64,7 @@ interface AppHandlers {
   onPermissionReply: (decision: "allow" | "deny" | "edit") => void
   onDangerousAcknowledge: () => void
   onErrorRetry: () => void | Promise<void>
+  onReconfigure: () => void
   onQuit: () => void | Promise<void>
   onAbort: () => void
   onHelpBack: () => void
@@ -189,6 +190,12 @@ function makeHandlers(
       // Pre-boot error retry: re-run main isn't trivial; just exit.
       process.exit(1)
     },
+    onReconfigure: () => {
+      // From an error screen, jump into the setup wizard so the parent can
+      // change provider / paste a new API key. onSetupContinue knows whether
+      // we're in first-run (resolve gate) or post-boot (reload env + retry).
+      store.update({ screen: { kind: "setup" } })
+    },
     onQuit: async () => {
       const s = servicesHolder.current
       if (s) return s.quit()
@@ -211,6 +218,16 @@ function makeHandlers(
     onSetupContinue: async () => {
       const r = getResolveSetup()
       if (r) r()
+      // Post-boot reconfigure path: services are already up but the env they
+      // were booted with is stale. Re-source the env file (the wizard wrote
+      // it) and replay the same recovery as [Enter] Retry on the error
+      // screen — push the loading screen and re-run readiness probe.
+      const s = servicesHolder.current
+      if (s) {
+        reloadEnvFile(env.configDir)
+        Object.assign(env, readEnv())
+        await s.handlers.onErrorRetry()
+      }
     },
     onSetupSkip: () => {
       const r = getResolveSetup()
@@ -245,6 +262,7 @@ async function bootServices(env: KidsClientEnv, store: Store): Promise<ServiceSe
   const serve = new ServeManager({
     baseUrl: env.opencodeBaseUrl,
     serverPassword: env.opencodeServerPassword,
+    serverUsername: env.opencodeServerUsername,
     opencodeBin: env.opencodeBin,
     onAuditLine: (event) => {
       audit.push(event)
@@ -282,6 +300,7 @@ async function bootServices(env: KidsClientEnv, store: Store): Promise<ServiceSe
   const client = createKidsClient({
     baseUrl: env.opencodeBaseUrl,
     serverPassword: env.opencodeServerPassword,
+    serverUsername: env.opencodeServerUsername,
   })
   const session = new SessionManager(client)
 

package/src/render/ink/App.tsx

@@ -11,7 +11,7 @@
 
 import React, { useSyncExternalStore } from "react"
 import type { InstalledPack } from "../../core/course-pack.ts"
-import type { Store } from "../../core/store.ts"
+import type { ErrorVariant, Store } from "../../core/store.ts"
 import { StartupScreen } from "./screens/StartupScreen.tsx"
 import { MissionScreen } from "./screens/MissionScreen.tsx"
 import { PermissionModal } from "./screens/PermissionModal.tsx"
@@ -25,6 +25,17 @@ import { SetupScreen } from "./screens/SetupScreen.tsx"
 import { TourScreen } from "./screens/TourScreen.tsx"
 import type { ProviderId } from "../../core/setup.ts"
 
+// Variants where the root cause may be a stale / wrong API key or a missing
+// provider config — showing a [c] Change settings option that opens the setup
+// wizard actually helps. Pure runtime/network problems (network_down,
+// stars_exhausted, ai_hung) are excluded; they need a different recovery.
+const RECONFIGURABLE_VARIANTS: ReadonlySet<ErrorVariant> = new Set([
+  "serve_unreachable",
+  "port_taken",
+  "auth_failed",
+  "config_missing",
+])
+
 export interface AppDeps {
   store: Store
   locale: "zh-Hans" | "en"
@@ -34,6 +45,11 @@ export interface AppDeps {
   onPermissionReply: (decision: "allow" | "deny" | "edit") => void
   onDangerousAcknowledge: () => void
   onErrorRetry: () => void
+  /**
+   * Jump from the error screen into the setup wizard. Only wired for
+   * config-related variants — see RECONFIGURABLE_VARIANTS below.
+   */
+  onReconfigure: () => void
   onQuit: () => void
   onAbort: () => void
   onHelpBack: () => void
@@ -117,6 +133,7 @@ export function App(deps: AppDeps): React.ReactElement {
           detail={state.screen.detail}
           locale={deps.locale}
           onRetry={deps.onErrorRetry}
+          onReconfigure={RECONFIGURABLE_VARIANTS.has(state.screen.variant) ? deps.onReconfigure : undefined}
           onQuit={deps.onQuit}
         />
       )

package/src/render/ink/screens/ErrorScreen.tsx

@@ -21,12 +21,20 @@ interface ErrorScreenProps {
   detail?: string
   onRetry?: () => void
   onQuit?: () => void
+  /**
+   * Open the setup wizard so the parent can change provider / paste a new
+   * API key. Wired by AppDeps only for config-related variants
+   * (serve_unreachable / port_taken / auth_failed / config_missing) — retry
+   * alone won't fix a wrong key.
+   */
+  onReconfigure?: () => void
 }
 
-export function ErrorScreen({ variant, locale, detail, onRetry, onQuit }: ErrorScreenProps): React.ReactElement {
+export function ErrorScreen({ variant, locale, detail, onRetry, onQuit, onReconfigure }: ErrorScreenProps): React.ReactElement {
   const theme = getTheme()
   useInput((input, key) => {
     if (key.return && onRetry) onRetry()
+    else if ((input === "c" || input === "C") && onReconfigure) onReconfigure()
     else if (input === "q" && onQuit) onQuit()
   })
   const t = STRINGS[locale][variant]
@@ -52,6 +60,12 @@ export function ErrorScreen({ variant, locale, detail, onRetry, onQuit }: ErrorS
             <Text color={theme.fg}> {t.retry}</Text>
           </Box>
         )}
+        {onReconfigure && (
+          <Box marginRight={2}>
+            <Text color={theme.accent}>[c]</Text>
+            <Text color={theme.fg}> {STRINGS[locale].reconfigure}</Text>
+          </Box>
+        )}
         {onQuit && (
           <Box>
             <Text color={theme.accent}>[q]</Text>
@@ -66,6 +80,7 @@ export function ErrorScreen({ variant, locale, detail, onRetry, onQuit }: ErrorS
 const STRINGS = {
   "zh-Hans": {
     quit: "退出",
+    reconfigure: "改设置（换 key / 换 provider）",
     serve_unreachable: {
       title: "AI 老师还没起来",
       body: "后台 AI 服务好像没启动。要不要再试一次？",
@@ -104,6 +119,7 @@ const STRINGS = {
   },
   en: {
     quit: "Quit",
+    reconfigure: "Change settings (switch key / provider)",
     serve_unreachable: {
       title: "AI teacher didn't start",
       body: "The background AI service isn't running. Try again?",