@majkapp/majk-chat-cli 1.0.3 → 1.0.5

package/README.md

@@ -51,36 +51,50 @@ npm install @majkapp/majk-chat-cli
 ### Basic Chat
 
 ```bash
-# Send a simple message
+# Send a simple message (uses default profile)
 majk-chat chat -M "Hello, how are you?"
 
-# Use a specific provider
-majk-chat chat -p anthropic -M "Explain quantum computing"
+# Use a specific provider with work profile
+majk-chat chat -p anthropic --profile work -M "Explain quantum computing"
 
-# Use a specific model
-majk-chat chat -m gpt-4 -M "Write a haiku"
+# Use a specific model with personal profile
+majk-chat chat -m gpt-4 --profile personal -M "Write a haiku"
+```
+
+### Profile Setup (First Time)
+
+```bash
+# Set up your API keys with profiles
+majk-chat set-key --openai sk-your-openai-key --profile default
+majk-chat set-key --anthropic sk-ant-your-anthropic-key --profile work
+
+# Test your setup
+majk-chat test-all-profiles
+
+# Start chatting
+majk-chat chat --profile work -M "Hello, I'm using my work profile!"
 ```
 
 ### Interactive Mode
 
 ```bash
-# Start interactive chat
+# Start interactive chat with default profile
 majk-chat interactive
 
-# With specific provider and model
-majk-chat interactive -p openai -m gpt-4
+# With specific profile and provider
+majk-chat interactive --profile work -p anthropic -m claude-3-sonnet
 
-# With tools enabled
-majk-chat interactive --tools --auto-execute
+# With tools enabled using production profile
+majk-chat interactive --tools --auto-execute --profile production
 ```
 
 ### Session Management
 
 ```bash
-# Create a session with title
-majk-chat chat --save-session --session-title "Web Development" -M "Help me build a React app"
+# Create a session with title and profile
+majk-chat chat --save-session --session-title "Web Development" --profile work -M "Help me build a React app"
 
-# Continue the most recent session
+# Continue the most recent session (inherits profile)
 majk-chat chat --continue -M "Add user authentication"
 
 # List all sessions in current directory
@@ -117,8 +131,10 @@ majk-chat chat [options]
 - `--tool-result-limit <limit>` - Truncate tool results over this character limit (default: 8000)
 - `--max-steps <steps>` - Maximum tool execution steps
 - `-c, --config <file>` - Configuration file
+- `--profile <name>` - Use specific profile for credentials (default: "default")
 - `--api-key <key>` - API key (overrides environment)
 - `--api-key-file <file>` - Read API key from file
+- `--bedrock-api-key <key>` - AWS Bedrock API key (bearer token)
 
 #### Session Management Options
 
@@ -132,28 +148,38 @@ majk-chat chat [options]
 #### Examples
 
 ```bash
-# Simple message
+# Simple message with default profile
 majk-chat chat -M "What is the capital of France?"
 
-# With system message
-majk-chat chat -s "You are a helpful assistant" -M "Hello"
+# Use specific profile
+majk-chat chat --profile work -M "Hello from work environment"
+
+# With system message and profile
+majk-chat chat -s "You are a helpful assistant" --profile personal -M "Hello"
 
-# Read from file
-majk-chat chat -f prompt.txt
+# Read from file with specific profile
+majk-chat chat -f prompt.txt --profile production
 
-# With specific model and temperature
-majk-chat chat -m gpt-4 -t 0.7 -M "Write a creative story"
+# With specific model and temperature using work profile  
+majk-chat chat -m claude-3-sonnet -t 0.7 --profile work -M "Write a creative story"
 
-# Enable tools
-majk-chat chat --tools -M "Create a file called test.txt with 'Hello World' in it"
+# Enable tools with profile
+majk-chat chat --tools --profile default -M "Create a file called test.txt with 'Hello World' in it"
 
-# JSON output
-majk-chat chat -j -M "Hello" > response.json
+# JSON output with profile
+majk-chat chat -j --profile work -M "Hello" > response.json
 
-# Create a session
-majk-chat chat --save-session --session-title "Code Review" -M "Review this Python function"
+# Use Bedrock with API key (bearer token)
+majk-chat chat --provider bedrock --bedrock-api-key "bedrock-api-key-..." -M "Hello"
 
-# Continue a session
+# Use Bedrock with environment variable
+export AWS_BEARER_TOKEN_BEDROCK="bedrock-api-key-..."
+majk-chat chat --provider bedrock -M "Explain quantum computing"
+
+# Create a session with profile
+majk-chat chat --save-session --session-title "Code Review" --profile work -M "Review this Python function"
+
+# Continue a session (inherits profile from saved session)
 majk-chat chat --continue -M "Fix the performance issues"
 
 # List sessions
@@ -180,6 +206,7 @@ majk-chat interactive [options]
 - `--tool-result-limit <limit>` - Truncate tool results over this character limit (default: 8000)
 - `--auto-execute` - Auto-execute tools without confirmation
 - `-c, --config <file>` - Configuration file
+- `--profile <name>` - Use specific profile for credentials (default: "default")
 
 #### Interactive Commands
 
@@ -201,14 +228,14 @@ Once in interactive mode, you can use these commands:
 #### Examples
 
 ```bash
-# Start interactive mode
+# Start interactive mode with default profile
 majk-chat interactive
 
-# With specific configuration
-majk-chat interactive -p anthropic -m claude-3-sonnet
+# With specific profile and provider
+majk-chat interactive --profile work -p anthropic -m claude-3-sonnet
 
-# With tools enabled
-majk-chat interactive --tools
+# With tools and specific profile
+majk-chat interactive --tools --profile production
 
 You> /help
 [Shows available commands]
@@ -243,15 +270,19 @@ majk-chat models [options]
 
 - `-p, --provider <provider>` - Filter by provider
 - `-c, --config <file>` - Configuration file
+- `--profile <name>` - Use specific profile for credentials
 
 #### Examples
 
 ```bash
-# List all models
+# List all models using default profile
 majk-chat models
 
-# List models for specific provider
-majk-chat models -p openai
+# List models for specific provider using work profile
+majk-chat models -p anthropic --profile work
+
+# List models for specific profile
+majk-chat models --profile production
 ```
 
 ### `config` - Configure providers and credentials
@@ -283,6 +314,120 @@ majk-chat config --get providers.openai.apiKey
 majk-chat config --list
 ```
 
+### Profile Configuration Commands
+
+#### `configure-provider` - Interactive provider setup
+
+```bash
+majk-chat configure-provider <provider> [options]
+```
+
+**Arguments:**
+- `<provider>` - Provider to configure (openai, anthropic, azure-openai, bedrock)
+
+**Options:**
+- `--profile <name>` - Profile name (default: "default")
+- `--skip-validation` - Skip API key validation
+
+**Examples:**
+```bash
+# Interactive OpenAI setup with validation
+majk-chat configure-provider openai
+
+# Set up Anthropic for work profile
+majk-chat configure-provider anthropic --profile work
+
+# Set up Azure OpenAI without validation
+majk-chat configure-provider azure-openai --profile production --skip-validation
+```
+
+#### `set-key` - Direct credential configuration
+
+```bash
+majk-chat set-key [options]
+```
+
+**Options:**
+- `--openai <key>` - OpenAI API key
+- `--anthropic <key>` - Anthropic API key  
+- `--azure-openai <key> <endpoint> <deployment>` - Azure OpenAI credentials
+- `--bedrock <accessKey> <secretKey> [region]` - AWS Bedrock traditional credentials
+- `--profile <name>` - Profile to store configuration in (default: "default")
+- `--skip-validation` - Skip API key validation
+
+**Examples:**
+```bash
+# Set OpenAI key for default profile
+majk-chat set-key --openai sk-your-key
+
+# Set Anthropic key for work profile
+majk-chat set-key --anthropic sk-ant-key --profile work
+
+# Set Azure OpenAI (all parameters required)
+majk-chat set-key --azure-openai key https://endpoint.com deployment --profile prod
+
+# Set Bedrock with region
+majk-chat set-key --bedrock access-key secret-key us-west-2 --profile aws
+```
+
+#### `list-profiles` - Show configured profiles
+
+```bash
+majk-chat list-profiles
+```
+
+**Example output:**
+```
+Configured profiles:
+  default (openai, anthropic)
+  work (anthropic, azure-openai)  
+  aws-prod (bedrock)
+```
+
+#### `delete-profile` - Remove a profile
+
+```bash
+majk-chat delete-profile <name>
+```
+
+**Examples:**
+```bash
+majk-chat delete-profile old-work-profile
+```
+
+#### Profile Testing Commands
+
+##### `test-profile` - Test all providers in a profile
+```bash
+majk-chat test-profile <name>
+```
+
+##### `test-all-profiles` - Test all profiles
+```bash
+majk-chat test-all-profiles
+```
+
+##### `test-provider` - Test specific provider in profile
+```bash
+majk-chat test-provider <provider> [--profile <name>]
+```
+
+**Examples:**
+```bash
+# Test work profile
+majk-chat test-profile work
+# Output:
+# Testing profile: work
+#   ✓ anthropic (model: claude-3-5-sonnet-20241022)  
+#   ✗ azure-openai - Invalid endpoint
+
+# Test all profiles
+majk-chat test-all-profiles
+
+# Test specific provider
+majk-chat test-provider openai --profile default
+```
+
 ## Core Tools Usage
 
 The `--enable-core-tools` flag provides access to a comprehensive set of tools for file system operations, process management, and utility functions:
@@ -306,25 +451,112 @@ The `--enable-core-tools` flag provides access to a comprehensive set of tools f
 ### Basic Usage
 
 ```bash
-# Enable core tools with basic usage
+# Enable core tools with basic usage (uses default profile)
 majk-chat chat -M "List all JavaScript files in the src directory" --enable-core-tools
 
-# Enable with custom result limit (default: 8000 chars)
-majk-chat chat -M "Show me the contents of package.json" --enable-core-tools --tool-result-limit 4000
+# Enable with custom result limit using work profile
+majk-chat chat -M "Show me the contents of package.json" --enable-core-tools --tool-result-limit 4000 --profile work
+
+# Filter specific tools (only allow file operations) with production profile
+majk-chat chat -M "Read and analyze config files" --enable-core-tools --allowed-tools "ls,read,glob,grep" --profile production
+
+# Exclude potentially dangerous tools using personal profile
+majk-chat chat -M "Analyze the codebase" --enable-core-tools --disallowed-tools "bash,kill_bash,web_fetch" --profile personal
+```
+
+### 🔍 Dry Run Mode
+
+Preview and approve tool operations before execution for safe testing and verification:
+
+```bash
+# Preview mode - see what would happen without executing
+majk-chat chat --dry-run --enable-core-tools -M "Refactor this codebase and add tests"
+
+# Interactive review mode - approve/reject each operation
+majk-chat chat --dry-run-review --enable-core-tools -M "Set up a new React project"
+```
+
+#### How Dry Run Works
+
+1. **Planning Phase**: All tool operations are captured and analyzed instead of executed
+2. **Risk Assessment**: Each operation is classified as low/medium/high risk  
+3. **Preview Generation**: Shows file diffs, command effects, and safety warnings
+4. **User Review**: Interactive approval/rejection of individual operations
+5. **Selective Execution**: Only approved operations are actually executed
 
-# Filter specific tools (only allow file operations)
-majk-chat chat -M "Read and analyze config files" --enable-core-tools --allowed-tools "ls,read,glob,grep"
+#### Dry Run Examples
 
-# Exclude potentially dangerous tools
-majk-chat chat -M "Analyze the codebase" --enable-core-tools --disallowed-tools "bash,kill_bash,web_fetch"
+```bash
+# Basic dry run - shows planned operations
+majk-chat chat --dry-run --enable-core-tools -M "Write a hello world script and run it"
+
+# Output:
+# 🔍 Dry run mode enabled
+# 📋 Planned 2 operations:
+#   1. [LOW] Write to file: hello.py (67 characters)
+#   2. [MEDIUM] Execute bash command: python hello.py
+# 
+# Use --dry-run-review to interactively review and execute operations.
+
+# Interactive review mode
+majk-chat chat --dry-run-review --enable-core-tools -M "Update package.json and install dependencies"
+
+# Interactive flow:
+# 🔍 Reviewing 2 planned operations
+# 
+# 📋 Operation 1/2
+# ──────────────────────────────────────────────────
+# Tool: edit
+# Risk: LOW
+# Category: filesystem
+# Description: Replace first occurrence of "version": "1.0.0" with "version": "1.0.1" in package.json
+# 
+# Preview:
+# File: /path/to/package.json
+# - "version": "1.0.0",
+# + "version": "1.0.1",
+# 
+# Options:
+#   a - Approve this operation
+#   r - Reject this operation
+#   s - Skip (decide later)
+#   p - Show/hide preview
+#   d - Show detailed arguments
+# Choice (a/r/s/p/d): a
 ```
 
+#### Dry Run Safety Features
+
+- **Risk Assessment**: Automatic classification of operations
+  - 🟢 **Low Risk**: Simple file reads, basic edits
+  - 🟡 **Medium Risk**: Config files, package installs, git operations
+  - 🔴 **High Risk**: System files, destructive commands, sudo operations
+
+- **Operation Previews**: 
+  - File operations show diffs and content previews
+  - Bash commands show potential effects and warnings
+  - Network operations show URLs and request details
+
+- **Safety Warnings**: Automatic detection of dangerous patterns
+  - `rm -rf` commands
+  - `sudo` usage
+  - Script downloads (`curl | bash`)
+  - Eval/exec operations
+
+#### Dry Run Options
+
+- `--dry-run` - Plan operations without executing (shows summary)
+- `--dry-run-review` - Plan operations with interactive review and execution
+
 ### Interactive Mode with Core Tools
 
 ```bash
-# Start interactive session with core tools
+# Start interactive session with core tools using default profile
 majk-chat interactive --enable-core-tools
 
+# Start with specific profile for development work
+majk-chat interactive --enable-core-tools --profile development
+
 # Example conversation:
 User: Find all TypeScript files and show me the first 50 lines of the main entry point
 
@@ -336,8 +568,8 @@ User: Find all TypeScript files and show me the first 50 lines of the main entry
 ### Background Process Management
 
 ```bash
-# Start a long-running task
-majk-chat chat -M "Start a development server in the background and monitor its output" --enable-core-tools
+# Start a long-running task with development profile
+majk-chat chat -M "Start a development server in the background and monitor its output" --enable-core-tools --profile development
 
 # The LLM can use:
 # 1. bash --command "npm run dev" --run-in-background
@@ -543,64 +775,163 @@ Each session file contains:
 - **User explicit consent**: Sessions are only created when explicitly requested
 - **Local storage only**: All session data stays on your machine
 - **Easy cleanup**: Sessions can be deleted individually or cleaned up automatically
-## Configuration
+- **Profile inheritance**: Sessions remember the profile used when created and continue using it automatically
 
-### Configuration File
+## Profile Configuration (AWS-Style)
 
-Create a configuration file at `~/.majk-chat/config.yaml`:
+The CLI now supports AWS-style profiles for managing multiple sets of credentials. This is the recommended way to manage API keys.
 
-```yaml
-providers:
-  openai:
-    apiKey: ${OPENAI_API_KEY}
-    organizationId: ${OPENAI_ORG_ID}
-  anthropic:
-    apiKey: ${ANTHROPIC_API_KEY}
-  azure-openai:
-    apiKey: ${AZURE_OPENAI_API_KEY}
-    endpoint: ${AZURE_OPENAI_ENDPOINT}
-    deploymentName: ${AZURE_OPENAI_DEPLOYMENT}
-  bedrock:
-    region: ${AWS_REGION}
-    accessKeyId: ${AWS_ACCESS_KEY_ID}
-    secretAccessKey: ${AWS_SECRET_ACCESS_KEY}
-
-defaultProvider: openai
+### Quick Setup
 
-tools:
-  autoExecute: false
-  maxSteps: 5
+```bash
+# Direct configuration (recommended for simple setups)
+majk-chat set-key --openai sk-your-openai-key --profile default
+majk-chat set-key --anthropic sk-ant-your-anthropic-key --profile work
+
+# Interactive configuration (recommended for complex setups)
+majk-chat configure-provider openai --profile personal
+majk-chat configure-provider azure-openai --profile production
+```
+
+### Profile Management
+
+```bash
+# List all configured profiles
+majk-chat list-profiles
+# Output: 
+# Configured profiles:
+#   default (openai)
+#   work (anthropic)
+#   production (azure-openai)
+
+# Test profile configurations
+majk-chat test-profile work
+majk-chat test-all-profiles
+majk-chat test-provider openai --profile default
+
+# Delete a profile
+majk-chat delete-profile old-profile
+```
+
+### Using Profiles
+
+```bash
+# Use specific profile for chat
+majk-chat chat --profile work -M "Hello from work environment"
+
+# Interactive mode with profile
+majk-chat interactive --profile production
+
+# Models command with profile
+majk-chat models --profile work
 ```
 
-You can also use JSON format:
+### Provider Configuration Commands
+
+#### Interactive Configuration
+```bash
+# OpenAI
+majk-chat configure-provider openai [--profile name] [--skip-validation]
+
+# Anthropic
+majk-chat configure-provider anthropic [--profile name] [--skip-validation]
+
+# Azure OpenAI (prompts for key, endpoint, deployment)
+majk-chat configure-provider azure-openai [--profile name] [--skip-validation]
+
+# AWS Bedrock (prompts for API key or access key, secret key, region)
+majk-chat configure-provider bedrock [--profile name] [--skip-validation]
+```
+
+#### Direct Configuration
+```bash
+# OpenAI
+majk-chat set-key --openai sk-your-key [--profile name] [--skip-validation]
+
+# Anthropic
+majk-chat set-key --anthropic sk-ant-your-key [--profile name] [--skip-validation]
+
+# Azure OpenAI (requires all three parameters)
+majk-chat set-key --azure-openai your-key https://your-endpoint.com deployment-name [--profile name]
+
+# AWS Bedrock (requires access key and secret key, region optional)
+majk-chat set-key --bedrock access-key secret-key us-east-1 [--profile name]
+```
+
+### Profile Configuration File
+
+Profiles are stored in `~/.magic/chat/config.json`:
 
 ```json
 {
-  "providers": {
-    "openai": {
-      "apiKey": "${OPENAI_API_KEY}"
+  "profiles": {
+    "default": {
+      "providers": {
+        "openai": {
+          "apiKey": "sk-...",
+          "organizationId": "org-..."
+        }
+      }
+    },
+    "work": {
+      "providers": {
+        "anthropic": {
+          "apiKey": "sk-ant-..."
+        },
+        "azure-openai": {
+          "apiKey": "...",
+          "endpoint": "https://work.openai.azure.com",
+          "deploymentName": "gpt-4-work"
+        }
+      }
+    },
+    "aws-prod": {
+      "providers": {
+        "bedrock": {
+          "bearerToken": "bedrock-api-key-...",
+          "region": "us-west-2"
+        }
+      }
     }
-  },
-  "defaultProvider": "openai"
+  }
 }
 ```
 
-### Credential Sources
+### Credential Sources (Resolution Chain)
 
-The CLI looks for credentials in the following order:
+The CLI looks for credentials in the following order (highest to lowest precedence):
 
-1. **Command-line options** (`--api-key`, `--api-key-file`)
-2. **Environment variables**:
+1. **Command-line options** (`--openai-api-key`, `--api-key`, etc.)
+2. **API key files** (`--api-key-file`)
+3. **Environment variables**:
    - OpenAI: `OPENAI_API_KEY`, `OPENAI_ORG_ID`
    - Anthropic: `ANTHROPIC_API_KEY`
-   - Azure: `AZURE_OPENAI_API_KEY`, `AZURE_OPENAI_ENDPOINT`
-   - AWS: `AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY`, `AWS_REGION`
-3. **Standard provider locations**:
+   - Azure: `AZURE_OPENAI_API_KEY`, `AZURE_OPENAI_ENDPOINT`, `AZURE_OPENAI_DEPLOYMENT`
+   - AWS Bedrock: `AWS_BEARER_TOKEN_BEDROCK` (API keys) or `AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY`, `AWS_REGION` (traditional)
+4. **Standard provider locations**:
    - `~/.openai/api_key`
    - `~/.anthropic/api_key`
    - `~/.config/openai/api_key`
    - `~/.config/anthropic/api_key`
-4. **Configuration file** (`~/.majk-chat/config.yaml`)
+5. **Legacy configuration files** (`~/.majk-chat/config.yaml`)
+6. **Profile-based configuration** (`~/.magic/chat/config.json`) ⭐ **NEW**
+
+### Validation and Testing
+
+```bash
+# Test specific profile
+majk-chat test-profile work
+# Output:
+# Testing profile: work
+#   ✓ anthropic (model: claude-3-5-sonnet-20241022)
+#   ✗ openai - 401 Incorrect API key
+
+# Test all profiles
+majk-chat test-all-profiles
+
+# Test specific provider in profile
+majk-chat test-provider openai --profile default
+```
 
 ## Tool Support
 
@@ -668,15 +999,18 @@ response=$(majk-chat chat -M "Generate a random number between 1 and 100" -j)
 echo $response | jq '.choices[0].message.content'
 ```
 
-### Multiple Providers
+### Multiple Providers with Profiles
 
 ```bash
-# Compare responses from different providers
-for provider in openai anthropic; do
-  echo "Provider: $provider"
-  majk-chat chat -p $provider -M "What is love?"
-  echo "---"
-done
+# Compare responses from different providers using different profiles
+majk-chat chat -p openai --profile personal -M "What is love?"
+echo "---"
+majk-chat chat -p anthropic --profile work -M "What is love?"
+echo "---"
+
+# Use different profiles for different environments
+majk-chat chat --profile development -M "Test message"
+majk-chat chat --profile production -M "Production query"
 ```
 
 ## Environment Variables
@@ -686,8 +1020,9 @@ done
 - `AZURE_OPENAI_API_KEY` - Azure OpenAI API key
 - `AZURE_OPENAI_ENDPOINT` - Azure OpenAI endpoint
 - `AZURE_OPENAI_DEPLOYMENT` - Azure OpenAI deployment name
-- `AWS_ACCESS_KEY_ID` - AWS access key
-- `AWS_SECRET_ACCESS_KEY` - AWS secret key
+- `AWS_BEARER_TOKEN_BEDROCK` - AWS Bedrock API key (bearer token)
+- `AWS_ACCESS_KEY_ID` - AWS access key (traditional credentials)
+- `AWS_SECRET_ACCESS_KEY` - AWS secret key (traditional credentials)
 - `AWS_REGION` - AWS region
 - `NO_COLOR` - Disable colored output
 
@@ -696,14 +1031,37 @@ done
 ### No API Key Found
 
 ```bash
-Error: No API key found for provider
+Error: No valid API credentials found
 
-Solution:
+Solution (recommended - profiles):
+1. Set up profile: majk-chat set-key --openai sk-... --profile default
+2. Use specific profile: majk-chat chat --profile work -M "Hello"
+3. Test your setup: majk-chat test-all-profiles
+
+Traditional solutions:
 1. Set environment variable: export OPENAI_API_KEY=sk-...
 2. Use --api-key flag: majk-chat chat --api-key sk-...
 3. Create config file: majk-chat config --init
 ```
 
+### Profile Issues
+
+```bash
+Error: Profile 'work' not found
+
+Solution:
+1. List profiles: majk-chat list-profiles
+2. Create profile: majk-chat set-key --anthropic sk-... --profile work
+3. Use existing profile: majk-chat chat --profile default
+
+Error: Provider validation failed
+
+Solution:
+1. Test configuration: majk-chat test-profile work
+2. Reconfigure: majk-chat configure-provider anthropic --profile work
+3. Skip validation: majk-chat set-key --anthropic sk-... --skip-validation
+```
+
 ### Rate Limiting
 
 ```bash

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@majkapp/majk-chat-cli",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "description": "CLI for multi-provider LLM chat interactions",
   "main": "dist/cli.js",
   "bin": {
@@ -30,8 +30,8 @@
   "author": "Jules White",
   "license": "MIT",
   "dependencies": {
-    "@majkapp/majk-chat-basic-tools": "^1.0.3",
-    "@majkapp/majk-chat-core": "^1.0.2",
+    "@majkapp/majk-chat-basic-tools": "^1.0.4",
+    "@majkapp/majk-chat-core": "^1.0.4",
     "@majkapp/majk-chat-mcp": "^1.0.2",
     "@majkapp/majk-chat-sessions": "^1.0.2",
     "chalk": "^4.1.2",