@memoarchitect/tools 0.6.2 → 0.6.4

package/packages/tools/lib/llm/llm-provider.js

@@ -1,28 +1,31 @@
 // ─── LLM Provider Abstraction ────────────────────────────────────────────────
 //
 // Provider-agnostic interface for LLM calls. Supports OpenAI-compatible APIs
-// (OpenAI, Azure, local models) and Anthropic Claude. Configured via env vars.
+// (OpenAI, Azure, local models) and Anthropic Claude, including tool calling.
+//
+// Deliberately provider-neutral and SDK-free: both providers are driven over
+// native fetch so the package stays dependency-light and neither vendor's SDK
+// dictates the message shape. Messages and tool calls use MEMO's own types and
+// are translated to each wire format at the edge.
 // ─────────────────────────────────────────────────────────────────────────────
-/** Resolve LLM config from environment variables */
-export function resolveLLMConfig() {
-    // Anthropic takes priority if both are set
-    if (process.env.ANTHROPIC_API_KEY) {
-        return {
-            provider: 'anthropic',
-            apiKey: process.env.ANTHROPIC_API_KEY,
-            model: process.env.MEMO_LLM_MODEL || 'claude-sonnet-4-20250514',
-            baseUrl: process.env.ANTHROPIC_BASE_URL,
-        };
-    }
-    if (process.env.OPENAI_API_KEY) {
-        return {
-            provider: 'openai',
-            apiKey: process.env.OPENAI_API_KEY,
-            model: process.env.MEMO_LLM_MODEL || 'gpt-4o',
-            baseUrl: process.env.OPENAI_BASE_URL,
-        };
-    }
-    return undefined;
+import { resolveLlmSettings, DEFAULT_MODELS } from './llm-settings.js';
+/**
+ * Resolve LLM config from the environment, a project `.env`, project settings,
+ * and stored user credentials — see `llm-settings.ts` for the precedence order.
+ *
+ * `projectRoot` is optional so existing callers that only ever used real
+ * environment variables keep working unchanged.
+ */
+export function resolveLLMConfig(projectRoot) {
+    const settings = resolveLlmSettings(projectRoot);
+    if (!settings.configured || !settings.apiKey || !settings.provider)
+        return undefined;
+    return {
+        provider: settings.provider,
+        apiKey: settings.apiKey,
+        model: settings.model,
+        baseUrl: settings.baseUrl,
+    };
 }
 /**
  * Create an LLM provider from config.
@@ -35,31 +38,79 @@ export function createProvider(config) {
     return createOpenAIProvider(config);
 }
 // ─── OpenAI-compatible provider ─────────────────────────────────────────────
+function toOpenAIMessages(messages) {
+    return messages.map(m => {
+        if (m.role === 'tool') {
+            return { role: 'tool', tool_call_id: m.toolCallId, content: m.content };
+        }
+        if (m.role === 'assistant' && m.toolCalls?.length) {
+            return {
+                role: 'assistant',
+                content: m.content || null,
+                tool_calls: m.toolCalls.map(c => ({
+                    id: c.id,
+                    type: 'function',
+                    function: { name: c.name, arguments: JSON.stringify(c.input) },
+                })),
+            };
+        }
+        return { role: m.role, content: m.content };
+    });
+}
+function openAIStopReason(finish, hasToolCalls) {
+    if (hasToolCalls || finish === 'tool_calls')
+        return 'tool_use';
+    if (finish === 'stop')
+        return 'end_turn';
+    if (finish === 'length')
+        return 'max_tokens';
+    if (finish === 'content_filter')
+        return 'refusal';
+    return 'other';
+}
 function createOpenAIProvider(config) {
     const baseUrl = config.baseUrl || 'https://api.openai.com/v1';
     return {
         name: `openai/${config.model}`,
         async complete(options) {
+            const body = {
+                model: config.model,
+                messages: toOpenAIMessages(options.messages),
+                temperature: options.temperature ?? 0.3,
+                max_tokens: options.maxTokens ?? 4096,
+            };
+            if (options.tools?.length) {
+                body.tools = options.tools.map(t => ({
+                    type: 'function',
+                    function: { name: t.name, description: t.description, parameters: t.inputSchema },
+                }));
+            }
             const response = await fetch(`${baseUrl}/chat/completions`, {
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json',
                     'Authorization': `Bearer ${config.apiKey}`,
                 },
-                body: JSON.stringify({
-                    model: config.model,
-                    messages: options.messages,
-                    temperature: options.temperature ?? 0.3,
-                    max_tokens: options.maxTokens ?? 4096,
-                }),
+                body: JSON.stringify(body),
             });
             if (!response.ok) {
                 const text = await response.text();
                 throw new Error(`OpenAI API error ${response.status}: ${text}`);
             }
             const data = await response.json();
+            const choice = data.choices?.[0];
+            const message = choice?.message ?? {};
+            const toolCalls = (message.tool_calls ?? [])
+                .filter((c) => c?.function?.name)
+                .map((c) => ({
+                id: c.id,
+                name: c.function.name,
+                input: safeParseJson(c.function.arguments),
+            }));
             return {
-                content: data.choices[0].message.content,
+                content: message.content ?? '',
+                toolCalls: toolCalls.length ? toolCalls : undefined,
+                stopReason: openAIStopReason(choice?.finish_reason, toolCalls.length > 0),
                 usage: data.usage ? {
                     promptTokens: data.usage.prompt_tokens,
                     completionTokens: data.usage.completion_tokens,
@@ -69,26 +120,111 @@ function createOpenAIProvider(config) {
         },
     };
 }
+/** Tool arguments arrive as a JSON string; a malformed one must not crash the loop. */
+function safeParseJson(raw) {
+    if (typeof raw !== 'string')
+        return raw ?? {};
+    try {
+        const parsed = JSON.parse(raw);
+        return parsed && typeof parsed === 'object' ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
 // ─── Anthropic provider ─────────────────────────────────────────────────────
+/**
+ * Current-generation Claude models reject `temperature` / `top_p` / `top_k`
+ * with a 400 — the sampling parameters were removed starting with Opus 4.7.
+ * Sending the old default of 0.3 to any of them fails the request outright,
+ * so the parameter is only included for models known to still accept it.
+ */
+const MODELS_REJECTING_SAMPLING_PARAMS = [
+    'claude-opus-5',
+    'claude-opus-4-7',
+    'claude-opus-4-8',
+    'claude-sonnet-5',
+    'claude-fable-5',
+    'claude-mythos-5',
+];
+export function acceptsSamplingParams(model) {
+    return !MODELS_REJECTING_SAMPLING_PARAMS.some(prefix => model.startsWith(prefix));
+}
+/**
+ * Translate MEMO messages into Anthropic's content-block format.
+ *
+ * Anthropic has no `tool` role: results are `tool_result` blocks inside a user
+ * message, and consecutive results must be merged into one message so parallel
+ * tool calls are answered in a single turn.
+ */
+function toAnthropicMessages(messages) {
+    const out = [];
+    for (const m of messages) {
+        if (m.role === 'system')
+            continue; // hoisted to the top-level `system` field
+        if (m.role === 'tool') {
+            const block = {
+                type: 'tool_result',
+                tool_use_id: m.toolCallId,
+                content: m.content,
+                ...(m.isError ? { is_error: true } : {}),
+            };
+            const last = out[out.length - 1];
+            if (last?.role === 'user' && last.content.every(b => b.type === 'tool_result')) {
+                last.content.push(block);
+            }
+            else {
+                out.push({ role: 'user', content: [block] });
+            }
+            continue;
+        }
+        if (m.role === 'assistant' && m.toolCalls?.length) {
+            const content = [];
+            if (m.content)
+                content.push({ type: 'text', text: m.content });
+            for (const c of m.toolCalls) {
+                content.push({ type: 'tool_use', id: c.id, name: c.name, input: c.input });
+            }
+            out.push({ role: 'assistant', content });
+            continue;
+        }
+        out.push({ role: m.role, content: [{ type: 'text', text: m.content }] });
+    }
+    return out;
+}
+function anthropicStopReason(raw) {
+    switch (raw) {
+        case 'tool_use': return 'tool_use';
+        case 'end_turn': return 'end_turn';
+        case 'max_tokens': return 'max_tokens';
+        case 'refusal': return 'refusal';
+        default: return 'other';
+    }
+}
 function createAnthropicProvider(config) {
     const baseUrl = config.baseUrl || 'https://api.anthropic.com';
     return {
         name: `anthropic/${config.model}`,
         async complete(options) {
-            // Separate system message from user/assistant messages
             const systemMsg = options.messages.find(m => m.role === 'system');
-            const chatMessages = options.messages
-                .filter(m => m.role !== 'system')
-                .map(m => ({ role: m.role, content: m.content }));
             const body = {
                 model: config.model,
-                messages: chatMessages,
-                temperature: options.temperature ?? 0.3,
+                messages: toAnthropicMessages(options.messages),
                 max_tokens: options.maxTokens ?? 4096,
             };
+            if (acceptsSamplingParams(config.model)) {
+                body.temperature = options.temperature ?? 0.3;
+            }
             if (systemMsg) {
                 body.system = systemMsg.content;
             }
+            if (options.tools?.length) {
+                body.tools = options.tools.map(t => ({
+                    name: t.name,
+                    description: t.description,
+                    input_schema: t.inputSchema,
+                }));
+            }
             const response = await fetch(`${baseUrl}/v1/messages`, {
                 method: 'POST',
                 headers: {
@@ -103,12 +239,18 @@ function createAnthropicProvider(config) {
                 throw new Error(`Anthropic API error ${response.status}: ${text}`);
             }
             const data = await response.json();
-            const content = data.content
-                .filter((b) => b.type === 'text')
-                .map((b) => b.text)
+            const blocks = Array.isArray(data.content) ? data.content : [];
+            const content = blocks
+                .filter(b => b.type === 'text')
+                .map(b => b.text)
                 .join('');
+            const toolCalls = blocks
+                .filter(b => b.type === 'tool_use')
+                .map(b => ({ id: b.id, name: b.name, input: (b.input ?? {}) }));
             return {
                 content,
+                toolCalls: toolCalls.length ? toolCalls : undefined,
+                stopReason: anthropicStopReason(data.stop_reason),
                 usage: data.usage ? {
                     promptTokens: data.usage.input_tokens,
                     completionTokens: data.usage.output_tokens,
@@ -118,4 +260,5 @@ function createAnthropicProvider(config) {
         },
     };
 }
+export { DEFAULT_MODELS };
 //# sourceMappingURL=llm-provider.js.map

package/packages/tools/lib/llm/llm-provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"llm-provider.js","sourceRoot":"","sources":["../../src/llm/llm-provider.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,gFAAgF;AAuChF,oDAAoD;AACpD,MAAM,UAAU,gBAAgB;IAC5B,2CAA2C;IAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAChC,OAAO;YACH,QAAQ,EAAE,WAAW;YACrB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;YACrC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,0BAA0B;YAC/D,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;SAC1C,CAAC;IACN,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;QAC7B,OAAO;YACH,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc;YAClC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,QAAQ;YAC7C,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;SACvC,CAAC;IACN,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAiB;IAC5C,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,+EAA+E;AAE/E,SAAS,oBAAoB,CAAC,MAAiB;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,2BAA2B,CAAC;IAE9D,OAAO;QACH,IAAI,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE;QAC9B,KAAK,CAAC,QAAQ,CAAC,OAA0B;YACrC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,mBAAmB,EAAE;gBACxD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACL,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE;iBAC7C;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACjB,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,GAAG;oBACvC,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;iBACxC,CAAC;aACL,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;YACpE,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAS,CAAC;YAC1C,OAAO;gBACH,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO;gBACxC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;oBAChB,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa;oBACtC,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB;oBAC9C,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY;iBACvC,CAAC,CAAC,CAAC,SAAS;aAChB,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC;AAED,+EAA+E;AAE/E,SAAS,uBAAuB,CAAC,MAAiB;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,2BAA2B,CAAC;IAE9D,OAAO;QACH,IAAI,EAAE,aAAa,MAAM,CAAC,KAAK,EAAE;QACjC,KAAK,CAAC,QAAQ,CAAC,OAA0B;YACrC,uDAAuD;YACvD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;YAClE,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ;iBAChC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;iBAChC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAA4B,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAE9E,MAAM,IAAI,GAAQ;gBACd,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,QAAQ,EAAE,YAAY;gBACtB,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,GAAG;gBACvC,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;aACxC,CAAC;YACF,IAAI,SAAS,EAAE,CAAC;gBACZ,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC;YACpC,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,cAAc,EAAE;gBACnD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACL,cAAc,EAAE,kBAAkB;oBAClC,WAAW,EAAE,MAAM,CAAC,MAAM;oBAC1B,mBAAmB,EAAE,YAAY;iBACpC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC7B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAS,CAAC;YAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO;iBACvB,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;iBACrC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBACvB,IAAI,CAAC,EAAE,CAAC,CAAC;YAEd,OAAO;gBACH,OAAO;gBACP,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;oBAChB,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY;oBACrC,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa;oBAC1C,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa;iBAClE,CAAC,CAAC,CAAC,SAAS;aAChB,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"llm-provider.js","sourceRoot":"","sources":["../../src/llm/llm-provider.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,kDAAkD;AAClD,gFAAgF;AAEhF,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAwB,MAAM,mBAAmB,CAAC;AAoE7F;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAoB;IACjD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IACrF,OAAO;QACH,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC5B,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAiB;IAC5C,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,+EAA+E;AAE/E,SAAS,gBAAgB,CAAC,QAAuB;IAC7C,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QACpB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;YAChD,OAAO;gBACH,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;gBAC1B,UAAU,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC9B,EAAE,EAAE,CAAC,CAAC,EAAE;oBACR,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;iBACjE,CAAC,CAAC;aACN,CAAC;QACN,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA0B,EAAE,YAAqB;IACvE,IAAI,YAAY,IAAI,MAAM,KAAK,YAAY;QAAE,OAAO,UAAU,CAAC;IAC/D,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,UAAU,CAAC;IACzC,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC;IAC7C,IAAI,MAAM,KAAK,gBAAgB;QAAE,OAAO,SAAS,CAAC;IAClD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAiB;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,2BAA2B,CAAC;IAE9D,OAAO;QACH,IAAI,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE;QAC9B,KAAK,CAAC,QAAQ,CAAC,OAA0B;YACrC,MAAM,IAAI,GAA4B;gBAClC,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,QAAQ,EAAE,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC5C,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,GAAG;gBACvC,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;aACxC,CAAC;YACF,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;gBACxB,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACjC,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE;iBACpF,CAAC,CAAC,CAAC;YACR,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,mBAAmB,EAAE;gBACxD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACL,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE;iBAC7C;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC7B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;YACpE,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAS,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;YAEtC,MAAM,SAAS,GAAe,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;iBACnD,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC;iBACrC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;gBACd,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI;gBACrB,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;aAC7C,CAAC,CAAC,CAAC;YAER,OAAO;gBACH,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;gBAC9B,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACnD,UAAU,EAAE,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;gBACzE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;oBAChB,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa;oBACtC,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB;oBAC9C,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY;iBACvC,CAAC,CAAC,CAAC,SAAS;aAChB,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC;AAED,uFAAuF;AACvF,SAAS,aAAa,CAAC,GAAY;IAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAQ,GAA+B,IAAI,EAAE,CAAC;IAC3E,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,CAAC;IACd,CAAC;AACL,CAAC;AAED,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,gCAAgC,GAAG;IACrC,eAAe;IACf,iBAAiB;IACjB,iBAAiB;IACjB,iBAAiB;IACjB,gBAAgB;IAChB,iBAAiB;CACpB,CAAC;AAEF,MAAM,UAAU,qBAAqB,CAAC,KAAa;IAC/C,OAAO,CAAC,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACtF,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,QAAuB;IAChD,MAAM,GAAG,GAAyD,EAAE,CAAC;IAErE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS,CAAC,0CAA0C;QAE7E,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG;gBACV,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,CAAC,CAAC,UAAU;gBACzB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3C,CAAC;YACF,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACjC,IAAI,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAE,CAAS,CAAC,IAAI,KAAK,aAAa,CAAC,EAAE,CAAC;gBACtF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACJ,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,SAAS;QACb,CAAC;QAED,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;YAChD,MAAM,OAAO,GAAc,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,OAAO;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/D,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/E,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;YACzC,SAAS;QACb,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,GAAG,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAuB;IAChD,QAAQ,GAAG,EAAE,CAAC;QACV,KAAK,UAAU,CAAC,CAAC,OAAO,UAAU,CAAC;QACnC,KAAK,UAAU,CAAC,CAAC,OAAO,UAAU,CAAC;QACnC,KAAK,YAAY,CAAC,CAAC,OAAO,YAAY,CAAC;QACvC,KAAK,SAAS,CAAC,CAAC,OAAO,SAAS,CAAC;QACjC,OAAO,CAAC,CAAC,OAAO,OAAO,CAAC;IAC5B,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAiB;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,2BAA2B,CAAC;IAE9D,OAAO;QACH,IAAI,EAAE,aAAa,MAAM,CAAC,KAAK,EAAE;QACjC,KAAK,CAAC,QAAQ,CAAC,OAA0B;YACrC,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;YAElE,MAAM,IAAI,GAA4B;gBAClC,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,QAAQ,EAAE,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC/C,UAAU,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;aACxC,CAAC;YACF,IAAI,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC;YAClD,CAAC;YACD,IAAI,SAAS,EAAE,CAAC;gBACZ,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC;YACpC,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;gBACxB,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACjC,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,YAAY,EAAE,CAAC,CAAC,WAAW;iBAC9B,CAAC,CAAC,CAAC;YACR,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,cAAc,EAAE;gBACnD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACL,cAAc,EAAE,kBAAkB;oBAClC,WAAW,EAAE,MAAM,CAAC,MAAM;oBAC1B,mBAAmB,EAAE,YAAY;iBACpC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC7B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,uBAAuB,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAS,CAAC;YAC1C,MAAM,MAAM,GAAU,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAEtE,MAAM,OAAO,GAAG,MAAM;iBACjB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;iBAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAChB,IAAI,CAAC,EAAE,CAAC,CAAC;YAEd,MAAM,SAAS,GAAe,MAAM;iBAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;iBAClC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAA4B,EAAE,CAAC,CAAC,CAAC;YAE/F,OAAO;gBACH,OAAO;gBACP,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACnD,UAAU,EAAE,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC;gBACjD,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;oBAChB,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY;oBACrC,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa;oBAC1C,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa;iBAClE,CAAC,CAAC,CAAC,SAAS;aAChB,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC;AAED,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/packages/tools/lib/llm/llm-settings.d.ts

@@ -0,0 +1,84 @@
+/** Which provider a set of settings selects. */
+export type LLMProviderName = 'anthropic' | 'openai';
+/** Non-secret settings, safe to keep in the project. */
+export interface LlmProjectSettings {
+    provider?: LLMProviderName;
+    model?: string;
+    baseUrl?: string;
+}
+/** Per-provider secrets, stored outside the project. */
+export interface LlmCredentials {
+    anthropic?: {
+        apiKey?: string;
+    };
+    openai?: {
+        apiKey?: string;
+    };
+}
+/** Where a resolved value came from — surfaced in the UI so the key's origin is never a mystery. */
+export type LlmSettingsOrigin = 'env' | 'env-file' | 'project-settings' | 'user-credentials' | 'default';
+/** Default model per provider. Both are the current flagship at time of writing. */
+export declare const DEFAULT_MODELS: Record<LLMProviderName, string>;
+/**
+ * Parse a `.env` file body into key/value pairs.
+ *
+ * Deliberately small: `KEY=value` per line, `#` comments, optional `export`
+ * prefix, and single- or double-quoted values (escapes are only expanded
+ * inside double quotes, matching the common dotenv behaviour). Anything more
+ * elaborate belongs in a real shell, not a settings file.
+ */
+export declare function parseEnvFile(contents: string): Record<string, string>;
+/** Read `<projectRoot>/.env`, or an empty map when there is none. */
+export declare function loadEnvFile(projectRoot: string): Record<string, string>;
+export declare function projectSettingsPath(projectRoot: string): string;
+export declare function loadLlmProjectSettings(projectRoot: string): LlmProjectSettings;
+export declare function saveLlmProjectSettings(projectRoot: string, settings: LlmProjectSettings): void;
+/**
+ * Where user credentials live.
+ *
+ * `MEMO_CREDENTIALS_PATH` overrides the default so CI, containers, and tests
+ * can point somewhere other than the real home directory — without it, a key a
+ * developer saved through the workbench would leak into their test runs.
+ */
+export declare function credentialsPath(): string;
+export declare function loadLlmCredentials(): LlmCredentials;
+/**
+ * Store an API key for one provider, merging with any key already held for the
+ * other. Written 0600 — this file is the one place MEMO persists a secret.
+ */
+export declare function saveLlmCredential(provider: LLMProviderName, apiKey: string): void;
+/** Forget the stored key for one provider. */
+export declare function clearLlmCredential(provider: LLMProviderName): void;
+/** A resolved setting plus where it was found. */
+export interface ResolvedLlmSettings {
+    provider?: LLMProviderName;
+    apiKey?: string;
+    model: string;
+    baseUrl?: string;
+    /** Where the API key came from. `undefined` when there is no key. */
+    keyOrigin?: LlmSettingsOrigin;
+    /** True when a key is available from any source. */
+    configured: boolean;
+}
+/**
+ * Resolve provider settings across every layer.
+ *
+ * The chosen provider is whichever the project explicitly selects, or — absent
+ * that — whichever has a usable key, Anthropic first.
+ */
+export declare function resolveLlmSettings(projectRoot?: string): ResolvedLlmSettings;
+/**
+ * Settings safe to send to a browser client: everything except the key itself.
+ * The workbench needs to know a key exists and where it came from — never its value.
+ */
+export interface LlmSettingsStatus {
+    configured: boolean;
+    provider?: LLMProviderName;
+    model: string;
+    baseUrl?: string;
+    keyOrigin?: LlmSettingsOrigin;
+    /** True when the key came from a file MEMO can overwrite. */
+    keyEditable: boolean;
+}
+export declare function llmSettingsStatus(projectRoot?: string): LlmSettingsStatus;
+//# sourceMappingURL=llm-settings.d.ts.map

package/packages/tools/lib/llm/llm-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-settings.d.ts","sourceRoot":"","sources":["../../src/llm/llm-settings.ts"],"names":[],"mappings":"AAmBA,gDAAgD;AAChD,MAAM,MAAM,eAAe,GAAG,WAAW,GAAG,QAAQ,CAAC;AAErD,wDAAwD;AACxD,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wDAAwD;AACxD,MAAM,WAAW,cAAc;IAC3B,SAAS,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChC,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAChC;AAED,oGAAoG;AACpG,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,UAAU,GAAG,kBAAkB,GAAG,kBAAkB,GAAG,SAAS,CAAC;AAEzG,oFAAoF;AACpF,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAG1D,CAAC;AAOF;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA0BrE;AAED,qEAAqE;AACrE,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQvE;AAID,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,CAe9E;AAED,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAQ9F;AAID;;;;;;GAMG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAIxC;AAED,wBAAgB,kBAAkB,IAAI,cAAc,CASnD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAWjF;AAED,8CAA8C;AAC9C,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAMlE;AAID,kDAAkD;AAClD,MAAM,WAAW,mBAAmB;IAChC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,oDAAoD;IACpD,UAAU,EAAE,OAAO,CAAC;CACvB;AAoCD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,mBAAmB,CAgC5E;AAaD;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAC9B,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAC9B,6DAA6D;IAC7D,WAAW,EAAE,OAAO,CAAC;CACxB;AAED,wBAAgB,iBAAiB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAYzE"}

package/packages/tools/lib/llm/llm-settings.js

@@ -0,0 +1,249 @@
+// ─── LLM Settings Resolution ─────────────────────────────────────────────────
+//
+// Resolves LLM provider settings from four sources, highest precedence first:
+//
+//   1. The real process environment            (ANTHROPIC_API_KEY, …)
+//   2. A project `.env` file                   (<projectRoot>/.env)
+//   3. Project settings                        (<projectRoot>/.memo/llm.json)
+//   4. User credentials                        (~/.memo/credentials.json)
+//
+// Only the last source is written by MEMO itself, and it lives outside the
+// project so a key entered in the workbench can never be committed. Project
+// settings hold provider/model/baseUrl and are safe to version — the loader
+// ignores an `apiKey` there rather than encouraging a key into the repo.
+// ─────────────────────────────────────────────────────────────────────────────
+import { existsSync, readFileSync, writeFileSync, mkdirSync, chmodSync } from 'node:fs';
+import { resolve, dirname } from 'node:path';
+import { homedir } from 'node:os';
+/** Default model per provider. Both are the current flagship at time of writing. */
+export const DEFAULT_MODELS = {
+    anthropic: 'claude-opus-5',
+    openai: 'gpt-4o',
+};
+const PROJECT_SETTINGS_RELATIVE = ['.memo', 'llm.json'];
+const CREDENTIALS_RELATIVE = ['.memo', 'credentials.json'];
+// ─── .env parsing ────────────────────────────────────────────────────────────
+/**
+ * Parse a `.env` file body into key/value pairs.
+ *
+ * Deliberately small: `KEY=value` per line, `#` comments, optional `export`
+ * prefix, and single- or double-quoted values (escapes are only expanded
+ * inside double quotes, matching the common dotenv behaviour). Anything more
+ * elaborate belongs in a real shell, not a settings file.
+ */
+export function parseEnvFile(contents) {
+    const out = {};
+    for (const rawLine of contents.split(/\r?\n/)) {
+        const line = rawLine.trim();
+        if (!line || line.startsWith('#'))
+            continue;
+        const withoutExport = line.startsWith('export ') ? line.slice('export '.length).trim() : line;
+        const eq = withoutExport.indexOf('=');
+        if (eq <= 0)
+            continue;
+        const key = withoutExport.slice(0, eq).trim();
+        if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key))
+            continue;
+        let value = withoutExport.slice(eq + 1).trim();
+        if (value.startsWith('"') && value.endsWith('"') && value.length >= 2) {
+            value = value.slice(1, -1).replace(/\\n/g, '\n').replace(/\\t/g, '\t').replace(/\\"/g, '"');
+        }
+        else if (value.startsWith("'") && value.endsWith("'") && value.length >= 2) {
+            value = value.slice(1, -1);
+        }
+        else {
+            // Unquoted values run to an unescaped `#`, so `KEY=value # note` works.
+            const hash = value.indexOf(' #');
+            if (hash >= 0)
+                value = value.slice(0, hash).trimEnd();
+        }
+        out[key] = value;
+    }
+    return out;
+}
+/** Read `<projectRoot>/.env`, or an empty map when there is none. */
+export function loadEnvFile(projectRoot) {
+    const path = resolve(projectRoot, '.env');
+    if (!existsSync(path))
+        return {};
+    try {
+        return parseEnvFile(readFileSync(path, 'utf8'));
+    }
+    catch {
+        return {};
+    }
+}
+// ─── Project settings (no secrets) ───────────────────────────────────────────
+export function projectSettingsPath(projectRoot) {
+    return resolve(projectRoot, ...PROJECT_SETTINGS_RELATIVE);
+}
+export function loadLlmProjectSettings(projectRoot) {
+    const path = projectSettingsPath(projectRoot);
+    if (!existsSync(path))
+        return {};
+    try {
+        const parsed = JSON.parse(readFileSync(path, 'utf8'));
+        // A key here would be one `git add` away from being published. Drop it.
+        const { provider, model, baseUrl } = parsed;
+        return {
+            provider: provider === 'anthropic' || provider === 'openai' ? provider : undefined,
+            model: typeof model === 'string' && model ? model : undefined,
+            baseUrl: typeof baseUrl === 'string' && baseUrl ? baseUrl : undefined,
+        };
+    }
+    catch {
+        return {};
+    }
+}
+export function saveLlmProjectSettings(projectRoot, settings) {
+    const path = projectSettingsPath(projectRoot);
+    mkdirSync(dirname(path), { recursive: true });
+    const clean = {};
+    if (settings.provider)
+        clean.provider = settings.provider;
+    if (settings.model)
+        clean.model = settings.model;
+    if (settings.baseUrl)
+        clean.baseUrl = settings.baseUrl;
+    writeFileSync(path, `${JSON.stringify(clean, null, 2)}\n`, 'utf8');
+}
+// ─── User credentials (secrets, outside the project) ─────────────────────────
+/**
+ * Where user credentials live.
+ *
+ * `MEMO_CREDENTIALS_PATH` overrides the default so CI, containers, and tests
+ * can point somewhere other than the real home directory — without it, a key a
+ * developer saved through the workbench would leak into their test runs.
+ */
+export function credentialsPath() {
+    const override = process.env.MEMO_CREDENTIALS_PATH;
+    if (override)
+        return resolve(override);
+    return resolve(homedir(), ...CREDENTIALS_RELATIVE);
+}
+export function loadLlmCredentials() {
+    const path = credentialsPath();
+    if (!existsSync(path))
+        return {};
+    try {
+        const parsed = JSON.parse(readFileSync(path, 'utf8'));
+        return parsed && typeof parsed === 'object' ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Store an API key for one provider, merging with any key already held for the
+ * other. Written 0600 — this file is the one place MEMO persists a secret.
+ */
+export function saveLlmCredential(provider, apiKey) {
+    const path = credentialsPath();
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    const existing = loadLlmCredentials();
+    const next = { ...existing, [provider]: { apiKey } };
+    writeFileSync(path, `${JSON.stringify(next, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 });
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch {
+        // Best effort — a filesystem without POSIX modes is not a reason to fail the save.
+    }
+}
+/** Forget the stored key for one provider. */
+export function clearLlmCredential(provider) {
+    const path = credentialsPath();
+    if (!existsSync(path))
+        return;
+    const existing = loadLlmCredentials();
+    delete existing[provider];
+    writeFileSync(path, `${JSON.stringify(existing, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 });
+}
+function readLayers(projectRoot) {
+    return {
+        env: process.env,
+        envFile: projectRoot ? loadEnvFile(projectRoot) : {},
+        project: projectRoot ? loadLlmProjectSettings(projectRoot) : {},
+        credentials: loadLlmCredentials(),
+    };
+}
+/** First non-empty value for `name` across the two environment layers. */
+function fromEnvLayers(layers, name) {
+    const direct = layers.env[name];
+    if (direct)
+        return { value: direct, origin: 'env' };
+    const fromFile = layers.envFile[name];
+    if (fromFile)
+        return { value: fromFile, origin: 'env-file' };
+    return undefined;
+}
+function resolveKey(layers, provider) {
+    const envName = provider === 'anthropic' ? 'ANTHROPIC_API_KEY' : 'OPENAI_API_KEY';
+    const fromEnv = fromEnvLayers(layers, envName);
+    if (fromEnv)
+        return fromEnv;
+    const stored = layers.credentials[provider]?.apiKey;
+    if (stored)
+        return { value: stored, origin: 'user-credentials' };
+    return undefined;
+}
+/**
+ * Resolve provider settings across every layer.
+ *
+ * The chosen provider is whichever the project explicitly selects, or — absent
+ * that — whichever has a usable key, Anthropic first.
+ */
+export function resolveLlmSettings(projectRoot) {
+    const layers = readLayers(projectRoot);
+    const preferred = layers.project.provider;
+    const order = preferred
+        ? [preferred, preferred === 'anthropic' ? 'openai' : 'anthropic']
+        : ['anthropic', 'openai'];
+    for (const provider of order) {
+        const key = resolveKey(layers, provider);
+        if (!key)
+            continue;
+        return {
+            provider,
+            apiKey: key.value,
+            model: resolveModel(layers, provider),
+            baseUrl: resolveBaseUrl(layers, provider),
+            keyOrigin: key.origin,
+            configured: true,
+        };
+    }
+    // No key anywhere. Still report the provider/model the project asks for so
+    // the settings screen can show what would be used once a key is supplied.
+    const provider = preferred;
+    return {
+        provider,
+        apiKey: undefined,
+        model: provider ? resolveModel(layers, provider) : DEFAULT_MODELS.anthropic,
+        baseUrl: provider ? resolveBaseUrl(layers, provider) : undefined,
+        keyOrigin: undefined,
+        configured: false,
+    };
+}
+function resolveModel(layers, provider) {
+    return fromEnvLayers(layers, 'MEMO_LLM_MODEL')?.value
+        ?? layers.project.model
+        ?? DEFAULT_MODELS[provider];
+}
+function resolveBaseUrl(layers, provider) {
+    const envName = provider === 'anthropic' ? 'ANTHROPIC_BASE_URL' : 'OPENAI_BASE_URL';
+    return fromEnvLayers(layers, envName)?.value ?? layers.project.baseUrl;
+}
+export function llmSettingsStatus(projectRoot) {
+    const resolved = resolveLlmSettings(projectRoot);
+    return {
+        configured: resolved.configured,
+        provider: resolved.provider,
+        model: resolved.model,
+        baseUrl: resolved.baseUrl,
+        keyOrigin: resolved.keyOrigin,
+        // An env-supplied key wins over the credentials file, so offering to
+        // overwrite it in the UI would be a lie — saving would change nothing.
+        keyEditable: !resolved.configured || resolved.keyOrigin === 'user-credentials',
+    };
+}
+//# sourceMappingURL=llm-settings.js.map