@melaya/runner 1.0.72 → 1.0.74

package/dist/cli.js

@@ -63,8 +63,8 @@ async function main() {
     // Detect local models
     const models = await detectModels();
     if (models.length === 0) {
-        console.log(chalk.yellow("  ⚠ No local models detected (LM Studio / Ollama not running)"));
-        console.log(chalk.gray("    Start LM Studio or Ollama, then restart the runner"));
+        console.log(chalk.yellow("  ⚠ No local models detected (LM Studio / Ollama not running, Claude Code not logged in)"));
+        console.log(chalk.gray("    Start LM Studio or Ollama (or log in to Claude Code), then restart the runner"));
     }
     else {
         for (const m of models) {

package/dist/detect.d.ts

@@ -1,8 +1,5 @@
-/**
- * Auto-detect local LLM providers (LM Studio, Ollama) and list models.
- */
 export interface DetectedModel {
-    provider: "lmstudio" | "ollama";
+    provider: "lmstudio" | "ollama" | "claude_code";
     name: string;
 }
 export declare function detectModels(): Promise<DetectedModel[]>;

package/dist/detect.js

@@ -1,6 +1,52 @@
 /**
- * Auto-detect local LLM providers (LM Studio, Ollama) and list models.
+ * Auto-detect local LLM providers (LM Studio, Ollama, Claude Code CLI)
+ * and list models.
  */
+import { execFile } from "child_process";
+import { promisify } from "util";
+import { readFile } from "fs/promises";
+import { homedir } from "os";
+import { join } from "path";
+const execFileAsync = promisify(execFile);
+/** Claude Code is a subscription CLI — when it's logged in on this machine,
+ *  report its model aliases so the platform's model picker shows TRUE
+ *  availability for local runs (claude_code pipelines execute HERE).
+ *
+ *  We read the CLI's OAuth credentials FILE directly rather than spawning
+ *  `claude auth status`. That subprocess flashed a console window on Windows
+ *  every time the runner started (`windowsHide` is unreliable through the
+ *  `.cmd` shell wrapper, which spawns its own conhost). The file is the source
+ *  of truth on Windows/Linux; macOS keeps the grant in the Keychain, where
+ *  `security` is a subprocess but pops NO window. Zero windows, faster, and
+ *  it mirrors exactly what the runtime (model.py `_read_claude_oauth`) reads. */
+async function detectClaudeCode() {
+    let raw = null;
+    try {
+        raw = await readFile(join(homedir(), ".claude", ".credentials.json"), "utf8");
+    }
+    catch {
+        raw = null;
+    }
+    if (!raw && process.platform === "darwin") {
+        try {
+            const { stdout } = await execFileAsync("security", ["find-generic-password", "-s", "Claude Code-credentials", "-w"], { timeout: 8000 });
+            if (stdout && stdout.trim())
+                raw = stdout.trim();
+        }
+        catch { /* not in keychain */ }
+    }
+    if (!raw)
+        return [];
+    try {
+        const oauth = (JSON.parse(raw)?.claudeAiOauth ?? {});
+        const expiresAt = Number(oauth.expiresAt ?? 0);
+        if (oauth.accessToken && (!expiresAt || Date.now() < expiresAt)) {
+            return ["sonnet", "opus", "haiku"].map((name) => ({ provider: "claude_code", name }));
+        }
+    }
+    catch { /* malformed creds → treat as logged out */ }
+    return []; // not logged in / expired → don't advertise models
+}
 export async function detectModels() {
     const models = [];
     // LM Studio — OpenAI-compatible at :1234
@@ -25,5 +71,7 @@ export async function detectModels() {
         }
     }
     catch { /* not running */ }
+    // Claude Code CLI — subscription auth on THIS machine
+    models.push(...await detectClaudeCode());
     return models;
 }

package/dist/pythonEnv.js

@@ -109,6 +109,14 @@ const PIP_DEPS = [
     // shared.tools.telegram_user_tools. The bot-API path in
     // shared.tools.messaging.py uses plain HTTP and needs no extra dep.
     "telethon",
+    // yfinance — TradFi/macro price history + live FX spot for the financial
+    // tools (shared.tools.alphavantage_tools yf_* + shared.tools.fx_tools live
+    // spot). BOTH modules guard the import (try/except at load + a
+    // _require_yfinance() that raises a clear "pip install yfinance" only when a
+    // yf_ tool is actually CALLED), so a runner without it still imports every
+    // tool module cleanly — this just makes the dep present so the yf_ tools work
+    // when attached. Pulls pandas transitively.
+    "yfinance",
     // ── Vector RAG (retrieval mode) ────────────────────────────────────────
     // ollama — Python client used by agentscope.embedding.OllamaTextEmbedding.
     //   Talks to localhost:11434 (the user's local Ollama daemon) to embed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@melaya/runner",
-  "version": "1.0.72",
+  "version": "1.0.74",
   "description": "Run Melaya AI pipelines locally with your own LM Studio or Ollama models",
   "license": "UNLICENSED",
   "private": false,