@nextxai/cli 0.1.0 → 0.2.0

package/dist/commands/ai.js

@@ -10,7 +10,11 @@ import { get, post, put, del } from "../core/http.js";
 import { getProfile, updateProfile } from "../core/config.js";
 import { hasTty, confirm, confirmTyped, select } from "../core/prompt.js";
 import { requirePerson, withWorkspace } from "../auth/session.js";
-import { ask, attach, composeText, confirmAction, listConversations, openConversation, renameConversation, pinConversation, deleteConversation, history, riskOf, confirmWord, } from "../ai/client.js";
+import { ask, attach, attachmentKind, composeText, confirmAction, listConversations, openConversation, renameConversation, pinConversation, deleteConversation, history, riskOf, confirmWord, } from "../ai/client.js";
+import { LocalChat } from "../ai/local.js";
+import { mcpToken } from "../auth/mcp-oauth.js";
+import { defaultModel, resolveModel } from "../ai/models.js";
+import { registerAiNextFarm } from "./ai-nextfarm.js";
 // ── NEXTX.md ───────────────────────────────────────────────────────────────────────────────────────
 const NOTES_MAX = 4096;
 export function notesFileName() {
@@ -64,7 +68,8 @@ export function renderBlocks(blocks) {
 export function proposalCard(a) {
     const env = context().env === "prod" ? c.red(tr("GHI VÀO PROD", "WRITES TO PROD")) : c.yellow("SANDBOX");
     const risk = riskOf(a);
-    const tag = risk === "large" ? c.red(tr("GHI LỚN · ", "LARGE WRITE · ")) : risk === "finance" ? c.red(tr("TÀI CHÍNH · ", "FINANCE · ")) : "";
+    const tag = risk === "large" ? c.red(tr("GHI LỚN · ", "LARGE WRITE · ")) : risk === "finance" ? c.red(tr("TÀI CHÍNH · ", "FINANCE · "))
+        : risk === "device" ? c.red(tr("THIẾT BỊ · ", "DEVICE · ")) : "";
     const left = a.expiresAt ? Math.max(0, Math.round((Date.parse(a.expiresAt) - Date.now()) / 60000)) : 15;
     const lines = [
         c.yellow(`┌ ${tr("Đề xuất", "Proposal")} `) + tag + env + c.yellow(` · ${tr(`hết hạn sau ${left} phút`, `expires in ${left} min`)}`),
@@ -89,13 +94,16 @@ export async function handleProposal(sessionId, a, mode = context().mode) {
         return { written: false, message: r.message };
     }
     const risk = riskOf(a);
-    const resume = `${brand().bin} -r ${sessionId}`;
+    // NextFarm proposals are confirmed by id; the default platform's by reopening the conversation.
+    const resume = brand().platform === "nextfarm" ? `${brand().bin} ai apply ${a.nonce}` : `${brand().bin} -r ${sessionId}`;
     if (mode === "read") {
         info(c.dim(tr("  Chế độ chỉ đọc: không ghi. Đổi chế độ: --mode propose", "  Read-only mode: nothing written. Switch with --mode propose")));
         return { written: false };
     }
-    if (risk === "finance") {
-        info(c.dim(tr(`  Việc tài chính chỉ xác nhận trong app: ${context().endpoints.app}`, `  Finance actions are confirmed in the app only: ${context().endpoints.app}`)));
+    if (risk === "finance" || risk === "device") {
+        info(c.dim(risk === "device"
+            ? tr(`  Việc chạm thiết bị / tự động hoá chỉ xác nhận trong app: ${context().endpoints.app}`, `  Device and automation actions are confirmed in the app only: ${context().endpoints.app}`)
+            : tr(`  Việc tài chính chỉ xác nhận trong app: ${context().endpoints.app}`, `  Finance actions are confirmed in the app only: ${context().endpoints.app}`)));
         return { written: false };
     }
     if (!hasTty()) {
@@ -154,17 +162,59 @@ export async function resolveConversation(o) {
 }
 export async function runRoot(o, words) {
     const printMode = o.print !== undefined && o.print !== false;
+    const spec = o.model ?? defaultModel();
+    const model = spec ? resolveModel(spec) : undefined;
     if (!printMode && hasTty() && outputFormat() === "text") {
         await requirePerson();
+        // The MCP grant may need a browser round-trip; do it before the chat UI owns the terminal.
+        if (model)
+            await mcpToken({ interactive: true });
         const { startRepl } = await import("../repl/index.js");
-        return withWorkspace(context().workspace, () => startRepl({ flags: o, initialQuestion: words.join(" ").trim() || undefined }));
+        return withWorkspace(context().workspace, () => startRepl({ flags: o, initialQuestion: words.join(" ").trim() || undefined, model }));
     }
     const q = [typeof o.print === "string" ? o.print : "", ...words].join(" ").trim();
     const piped = await readStdin();
     if (!q && !piped)
-        throw new CliError(tr(`Thiếu câu hỏi. Ví dụ: ${brand().bin} -p "doanh thu hôm qua"`, `Missing question. Example: ${brand().bin} -p "yesterday's revenue"`), Exit.usage);
+        throw new CliError(tr(`Thiếu câu hỏi. Ví dụ: ${brand().bin} -p "${brand().example.vi}"`, `Missing question. Example: ${brand().bin} -p "${brand().example.en}"`), Exit.usage);
     await requirePerson();
-    await withWorkspace(context().workspace, () => printAsk(o, q || tr("Xử lý nội dung đính kèm.", "Process the attached content."), piped));
+    const question = q || tr("Xử lý nội dung đính kèm.", "Process the attached content.");
+    await withWorkspace(context().workspace, () => (model ? printLocal(o, model, question, piped) : printAsk(o, question, piped)));
+}
+/** -p with --model: same output contract as the platform assistant, answered by the user's model. */
+async function printLocal(o, model, question, piped) {
+    const attachments = [];
+    for (const f of (o.file ?? []).slice(0, 3)) {
+        if (attachmentKind(f) !== "text")
+            throw new CliError(tr(`Model riêng chỉ đọc tệp chữ: ${f}`, `Your own model reads text files only: ${f}`), Exit.usage);
+        attachments.push(await attach(f));
+    }
+    if (piped)
+        attachments.push({ path: "-", name: "stdin", kind: "text", text: piped.slice(0, 20_000) });
+    const fmt = outputFormat();
+    const chat = new LocalChat(model, hasTty(), context().mode === "read");
+    const outcome = await chat.ask({
+        text: composeText(question, attachments, findProjectNotes()?.text),
+        onChunk: (ch) => {
+            if (fmt === "stream-json")
+                return json(ch);
+            if (fmt !== "text")
+                return;
+            if (ch.type === "token")
+                process.stdout.write(ch.text ?? "");
+            else if (ch.type === "activity" && ch.activity && !o.quiet)
+                process.stderr.write(c.dim(`⏺ ${ch.activity.label}\n`));
+        },
+    });
+    if (fmt === "json")
+        json({ model: model.label, text: outcome.text, notices: outcome.notices, tools: outcome.activities.map((a) => a.toolName), workspace: getProfile(context().profile)?.workspaceCode ?? null, env: context().env, ended: outcome.ended });
+    else if (fmt === "text") {
+        if (outcome.text && !outcome.text.endsWith("\n"))
+            process.stdout.write("\n");
+        for (const n of outcome.notices)
+            process.stderr.write(`${c.yellow("⚠")} ${n.message}\n`);
+    }
+    if (outcome.ended === "error")
+        process.exitCode = Exit.general;
 }
 async function printAsk(o, question, piped) {
     const sessionId = await resolveConversation(o);
@@ -195,11 +245,12 @@ async function printAsk(o, question, piped) {
         },
         onRetry: (n) => stderr.write(c.yellow(tr(`⚠ Mất kết nối, đang nối lại (${n}/2)…\n`, `⚠ Connection lost, reconnecting (${n}/2)…\n`))),
     });
-    updateProfile(context().profile, { lastConversation: sessionId });
+    const conversationId = outcome.sessionId || sessionId;
+    updateProfile(context().profile, { lastConversation: conversationId });
     const proposal = outcome.proposedAction;
     if (fmt === "json") {
         json({
-            conversationId: sessionId,
+            conversationId,
             runId: outcome.runId ?? null,
             messageId: outcome.done?.messageId ?? null,
             text: outcome.text,
@@ -207,7 +258,8 @@ async function printAsk(o, question, piped) {
             followUps: outcome.done?.followUps ?? [],
             notices: outcome.notices,
             agent: outcome.agent ?? null,
-            proposals: proposal ? [{ kind: proposal.kind, label: proposal.label, prompt: proposal.confirmPrompt, writes: proposal.writes, expiresAt: proposal.expiresAt ?? null, risk: riskOf(proposal), confirm: `${brand().bin} -r ${sessionId}` }] : [],
+            proposals: proposal ? [{ kind: proposal.kind, label: proposal.label, prompt: proposal.confirmPrompt, writes: proposal.writes, expiresAt: proposal.expiresAt ?? null, risk: riskOf(proposal),
+                    confirm: brand().platform === "nextfarm" ? `${brand().bin} ai apply ${proposal.nonce}` : `${brand().bin} -r ${conversationId}` }] : [],
             workspace: getProfile(context().profile)?.workspaceCode ?? null,
             env: context().env,
             ended: outcome.ended,
@@ -225,7 +277,7 @@ async function printAsk(o, question, piped) {
         if (proposal) {
             for (const l of proposalCard(proposal))
                 stderr.write(`${l}\n`);
-            await handleProposal(sessionId, proposal);
+            await handleProposal(conversationId, proposal);
         }
     }
     if (outcome.notices.some((n) => n.code === "ai_not_purchased"))
@@ -303,6 +355,8 @@ export function registerAi(program) {
         await deleteConversation(id);
         ok(tr("Đã xoá.", "Deleted."));
     });
+    if (brand().platform === "nextfarm")
+        return registerAiNextFarm(ai, program);
     ai.command("why [runId]")
         .description(tr("vì sao AI trả lời vậy: các bước, công cụ đã gọi", "why the AI answered that way: steps and tools"))
         .action(async (runId) => {
@@ -464,7 +518,7 @@ export function registerAi(program) {
     });
     ai.command("usage").description(tr("lượt AI tháng này", "AI turns this month"))
         .action(async () => {
-        const u = await get("/operator/widget/support/usage");
+        const u = await (await import("../ai/client.js")).usage();
         emit(u, () => info(`${tr("Gói", "Plan")} ${c.bold(u.planName ?? "-")} · ${tr("đã dùng", "used")} ${u.used ?? 0}${u.limit ? `/${u.limit}` : ""} · ${tr("mở lại", "resets")} ${u.resetsAt?.slice(0, 10) ?? ""}`));
     });
     ai.command("feedback <messageId> <vote>").description(tr("báo câu trả lời tốt (up) / chưa tốt (down)", "rate an answer: up / down"))

package/dist/commands/api.js

@@ -1,4 +1,5 @@
 import { readFileSync } from "node:fs";
+import { brand } from "../core/brand.js";
 import { context } from "../core/context.js";
 import { CliError, Exit } from "../core/errors.js";
 import { tr } from "../core/i18n.js";
@@ -25,7 +26,7 @@ export function select(value, path) {
 export function registerApi(program) {
     program
         .command("api <method> <path>")
-        .description(tr("gọi thẳng API (vd: api GET /crm/contacts -f q=Minh)", "call the API directly (e.g. api GET /crm/contacts -f q=Minh)"))
+        .description(tr(`gọi thẳng API (vd: api ${brand().apiExample})`, `call the API directly (e.g. api ${brand().apiExample})`))
         .option("-f, --raw-field <key=value>", tr("tham số dạng chuỗi: query với GET/DELETE, thân JSON với POST/PUT/PATCH (lặp được)", "string parameter: query for GET/DELETE, JSON body for POST/PUT/PATCH (repeatable)"), (v, p = []) => [...p, v])
         .option("-F, --field <key=value>", tr("như -f nhưng đoán kiểu: số, true/false, JSON", "like -f but typed: numbers, true/false, JSON"), (v, p = []) => [...p, v])
         .option("--input <file>", tr("thân request từ tệp JSON (- = stdin)", "request body from a JSON file (- = stdin)"))
@@ -61,7 +62,7 @@ export function registerApi(program) {
         let page = Number(query?.pageNumber ?? query?.page ?? 1);
         for (;;) {
             const q = o.paginate ? { ...query, pageNumber: page } : query;
-            const r = await request(method, path, { query: q, body, headers, idempotencyKey: o.idempotencyKey });
+            const r = await request(method, path, { query: q, body, headers, idempotencyKey: o.idempotencyKey, verbatim: true });
             if (o.include) {
                 info(c.dim(`HTTP ${r.status}`));
                 r.headers.forEach?.((v, k) => info(c.dim(`${k}: ${v}`)));

package/dist/commands/auth.js

@@ -21,7 +21,7 @@ export function browserAvailable() {
 }
 export async function usage() {
     try {
-        return await get("/operator/widget/support/usage");
+        return await (await import("../ai/client.js")).usage();
     }
     catch {
         return undefined;
@@ -31,8 +31,8 @@ function printLogin(r) {
     const p = getProfile(context().profile);
     ok(tr(`Đã đăng nhập ${c.bold(r.userName ?? "")} (${r.userEmail ?? ""})`, `Logged in as ${c.bold(r.userName ?? "")} (${r.userEmail ?? ""})`));
     info(`  ${tr("Workspace", "Workspace")}  ${c.bold(r.workspaceName ?? p?.workspaceName ?? "")}  · ${context().env === "prod" ? "prod" : c.yellow("sandbox")}`);
-    info(`  ${tr("Phiên", "Session")}      ${tr("tự gia hạn khi dùng, hết hạn nếu bỏ không 30 ngày", "renews while used, expires after 30 idle days")} · ${storageKind() === "keychain" ? "Keychain" : tr("tệp 0600", "0600 file")}`);
-    info(c.dim(`  ${tr("Thử", "Try")}: ${brand().bin}  ·  ${brand().bin} -p "${tr("doanh thu hôm qua", "yesterday's revenue")}"  ·  ${brand().bin} help`));
+    info(`  ${tr("Phiên", "Session")}      ${r.session.via === "ci" ? tr("15 phút, không gia hạn — hết thì đăng nhập CI lại", "15 minutes, no renewal — logs in again through CI when it ends") : tr("tự gia hạn khi dùng, hết hạn nếu bỏ không 30 ngày", "renews while used, expires after 30 idle days")} · ${storageKind() === "keychain" ? "Keychain" : tr("tệp 0600", "0600 file")}`);
+    info(c.dim(`  ${tr("Thử", "Try")}: ${brand().bin}  ·  ${brand().bin} -p "${tr(brand().example.vi, brand().example.en)}"  ·  ${brand().bin} help`));
 }
 export function registerAuth(program) {
     const b = brand();
@@ -47,6 +47,10 @@ export function registerAuth(program) {
         .action(async (o) => {
         const ws = context().workspace;
         let r;
+        if ((o.ci && b.notYet?.includes("ci")) || (o.device && b.notYet?.includes("device"))) {
+            const { notYetError } = await import("../core/errors.js");
+            throw notYetError(tr(`${b.name} chưa mở ${o.ci ? "đăng nhập CI bằng OIDC" : "đăng nhập bằng mã thiết bị"}`, `${b.name} does not offer ${o.ci ? "CI OIDC login" : "device-code login"} yet`), o.ci ? tr(`dùng khoá API: ${b.envPrefix}_API_KEY`, `use an API key: ${b.envPrefix}_API_KEY`) : tr(`dùng ${b.bin} login --qr (quét bằng app ${b.mobileApp}) hoặc --no-browser`, `use ${b.bin} login --qr (scan with the ${b.mobileApp} app) or --no-browser`));
+        }
         if (o.ci)
             r = await loginCi({ workspace: ws });
         else if (o.device)

package/dist/commands/ci.js

@@ -0,0 +1,72 @@
+import { brand } from "../core/brand.js";
+import { CliError, Exit } from "../core/errors.js";
+import { tr } from "../core/i18n.js";
+import { c, emit, info, ok, table } from "../core/output.js";
+import { get, post } from "../core/http.js";
+import { confirm, hasTty } from "../core/prompt.js";
+import { requirePerson } from "../auth/session.js";
+import { parseDuration } from "./keys.js";
+const when = (s) => (s ? s.slice(0, 16).replace("T", " ") : "—");
+export function workflowSample(repo = "acme/web", ws = "my-workspace") {
+    const b = brand();
+    return `# .github/workflows/report.yml  (${repo})
+permissions:
+  id-token: write   # cho phép lấy token OIDC — không cần secret nào
+  contents: read
+jobs:
+  report:
+    runs-on: ubuntu-latest
+    steps:
+      - run: npx -y ${b.pkg} login --ci --workspace ${ws}
+      - run: npx -y ${b.pkg} -p "${tr(b.example.vi, b.example.en)}" --json > report.json`;
+}
+export function registerCi(program) {
+    const ci = program.command("ci").description(tr("đăng nhập từ CI không cần bí mật (OIDC)", "secretless CI login (OIDC)"));
+    const trust = ci.command("trust").description(tr("kho CI được phép đăng nhập workspace này", "CI repositories allowed to log in to this workspace"));
+    trust.hook("preAction", async () => {
+        if (brand().notYet?.includes("ci")) {
+            const { notYetError } = await import("../core/errors.js");
+            throw notYetError(tr(`${brand().name} chưa mở đăng nhập CI bằng OIDC`, `${brand().name} does not offer CI OIDC login yet`), tr(`dùng khoá API: ${brand().envPrefix}_API_KEY`, `use an API key: ${brand().envPrefix}_API_KEY`));
+        }
+        await requirePerson();
+    });
+    trust.command("list", { isDefault: true }).action(async () => {
+        const list = await get("/iam/ci-trusts");
+        emit(list, () => info(list.length
+            ? table(["ID", tr("Kho", "Repository"), "Ref", "Env", tr("Dùng lần cuối", "Last used"), ""], list.map((t) => [
+                t.id.slice(0, 8), `${t.provider}:${t.repository}`, t.refPattern, t.environment ?? "", when(t.lastUsedAt), t.revokedAt ? c.red(tr("đã thu hồi", "revoked")) : c.green("●"),
+            ]))
+            : tr(`Chưa có kho nào. Thêm: ${brand().bin} ci trust add --repo owner/repo`, `None yet. Add one: ${brand().bin} ci trust add --repo owner/repo`)));
+    });
+    trust.command("add")
+        .description(tr("cho một kho đăng nhập (token đứng tên bạn, sống 15 phút)", "allow a repository to log in (tokens act as you, live 15 minutes)"))
+        .requiredOption("--repo <owner/repo>")
+        .option("--provider <p>", "github | gitlab", "github")
+        .option("--ref <ref>", tr("nhánh hoặc tiền tố tag, vd main · refs/tags/v*", "branch or tag prefix, e.g. main · refs/tags/v*"), "main")
+        .option("--environment <name>", tr("environment GitHub bắt buộc (khuyên dùng cho nhánh chính)", "required GitHub environment (recommended for the main branch)"))
+        .option("--expires <dur>", tr("thời hạn: 90d, 1y", "lifetime: 90d, 1y"))
+        .option("--name <name>")
+        .action(async (o) => {
+        const t = await post("/iam/ci-trusts", {
+            provider: o.provider, repository: o.repo, refPattern: o.ref, environment: o.environment, name: o.name,
+            expiresAt: o.expires ? parseDuration(o.expires) : null,
+        });
+        emit(t, () => {
+            ok(tr(`Đã cho ${t.provider}:${t.repository} (${t.refPattern}) đăng nhập`, `Allowed ${t.provider}:${t.repository} (${t.refPattern})`));
+            info(c.dim(tr("\nMẫu workflow:", "\nSample workflow:")));
+            info(workflowSample(t.repository));
+        });
+    });
+    trust.command("revoke <id>").description(tr("thu hồi (có hiệu lực ngay)", "revoke (immediate)")).action(async (id) => {
+        const t = (await get("/iam/ci-trusts")).find((x) => x.id.startsWith(id) || x.repository === id);
+        if (!t)
+            throw new CliError(tr("Không thấy khai báo này.", "Not found."), Exit.notFound);
+        if (hasTty() && !(await confirm(tr(`Thu hồi ${t.repository}?`, `Revoke ${t.repository}?`))))
+            return;
+        await post(`/iam/ci-trusts/${t.id}/revoke`, {});
+        ok(tr("Đã thu hồi.", "Revoked."));
+    });
+    ci.command("example").description(tr("in mẫu workflow GitHub Actions", "print a sample GitHub Actions workflow"))
+        .option("--repo <owner/repo>").option("--workspace <code>")
+        .action((o) => info(workflowSample(o.repo, o.workspace)));
+}

package/dist/commands/help.js

@@ -3,7 +3,7 @@ import { tr } from "../core/i18n.js";
 import { json } from "../core/output.js";
 import { VERSION } from "../core/version.js";
 import { Exit } from "../core/errors.js";
-import { SLASH, SHORTCUTS } from "../repl/slash.js";
+import { SHORTCUTS, slashCommands } from "../repl/slash.js";
 const opt = (o) => ({ flags: o.flags, description: o.description, ...(o.defaultValue !== undefined ? { default: o.defaultValue } : {}), ...(o.argChoices ? { choices: o.argChoices } : {}) });
 function walk(cmd) {
     return {
@@ -25,7 +25,7 @@ export function helpTree(program) {
         version: VERSION,
         brand: b.id,
         root: walk(program),
-        slashCommands: SLASH.map((s) => ({ name: `/${s.name}`, args: s.args ?? null, description: s.description() })),
+        slashCommands: slashCommands().map((s) => ({ name: `/${s.name}`, args: s.args ?? null, description: s.description() })),
         shortcuts: SHORTCUTS.map((s) => ({ keys: s.keys, description: s.description() })),
         exitCodes: Object.entries(Exit).map(([name, code]) => ({ name, code })),
         environment: ["API_KEY", "TOKEN", "PROFILE", "ENV", "WORKSPACE", "LANG", "DEBUG", "NO_UPDATE_CHECK", "NO_KEYCHAIN", "ID_TOKEN"].map((v) => `${b.envPrefix}_${v}`),

package/dist/commands/mcp.js

@@ -5,7 +5,7 @@ import { spawnSync } from "node:child_process";
 import { createInterface } from "node:readline";
 import { fetch } from "undici";
 import { parse as parseToml, stringify as stringifyToml } from "smol-toml";
-import { brand } from "../core/brand.js";
+import { brand, envVar } from "../core/brand.js";
 import { context } from "../core/context.js";
 import { CliError, Exit } from "../core/errors.js";
 import { tr } from "../core/i18n.js";
@@ -138,8 +138,10 @@ export function registerMcp(program) {
 }
 /** Line-delimited JSON-RPC on stdio ⇄ Streamable HTTP to the hosted server. Logs go to stderr only. */
 async function serveStdio() {
-    const url = context().endpoints.mcp;
-    let token = await mcpToken({ interactive: false });
+    // NextFarm API keys speak MCP through the gateway (same read-only route rules as the key everywhere else).
+    const apiKey = brand().platform === "nextfarm" ? envVar("API_KEY") : undefined;
+    const url = apiKey ? `${context().endpoints.api}/api/v1/mcp` : context().endpoints.mcp;
+    let token = apiKey ?? (await mcpToken({ interactive: false }));
     let sessionId;
     const rl = createInterface({ input: process.stdin });
     const write = (m) => process.stdout.write(`${JSON.stringify(m)}\n`);
@@ -166,7 +168,7 @@ async function serveStdio() {
         });
         try {
             let res = await send();
-            if (res.status === 401) {
+            if (res.status === 401 && !apiKey) {
                 token = await mcpToken({ interactive: false });
                 res = await send();
             }

package/dist/commands/model.js

@@ -0,0 +1,106 @@
+import { brand } from "../core/brand.js";
+import { CliError, Exit } from "../core/errors.js";
+import { tr } from "../core/i18n.js";
+import { c, emit, info, ok, table } from "../core/output.js";
+import { hasTty } from "../core/prompt.js";
+import { PROVIDERS, addModel, defaultModel, isProvider, listModels, removeModel, resolveModel, setDefaultModel } from "../ai/models.js";
+async function readAll() {
+    const chunks = [];
+    for await (const ch of process.stdin)
+        chunks.push(ch);
+    return Buffer.concat(chunks).toString("utf8").trim();
+}
+/** Reads a key from the terminal without echoing it. */
+async function readHidden(question) {
+    process.stderr.write(question);
+    const stdin = process.stdin;
+    stdin.setRawMode?.(true);
+    stdin.resume();
+    return new Promise((resolve, reject) => {
+        let value = "";
+        const onData = (d) => {
+            for (const ch of d.toString("utf8")) {
+                if (ch === "\r" || ch === "\n") {
+                    done();
+                    return resolve(value.trim());
+                }
+                if (ch === "\u0003") {
+                    done();
+                    return reject(new CliError(tr("Đã huỷ.", "Cancelled."), Exit.interrupted));
+                }
+                if (ch === "\u007f")
+                    value = value.slice(0, -1);
+                else
+                    value += ch;
+            }
+        };
+        const done = () => {
+            stdin.off("data", onData);
+            stdin.setRawMode?.(false);
+            stdin.pause();
+            process.stderr.write("\n");
+        };
+        stdin.on("data", onData);
+    });
+}
+export function registerModel(program) {
+    const b = brand();
+    const model = program
+        .command("model")
+        .description(tr(`model của bạn cho --model (khoá lưu keychain, không gửi về ${b.name})`, `your own models for --model (keys stay in the keychain, never sent to ${b.name})`));
+    model
+        .command("list")
+        .description(tr("các model đã thêm", "models you added"))
+        .action(() => {
+        const rows = listModels();
+        const def = defaultModel();
+        emit({ default: def ?? b.bin, models: rows.map((r) => ({ name: r.name, provider: r.entry.provider, model: r.entry.model ?? PROVIDERS[r.entry.provider].defaultModel ?? null, url: r.entry.url ?? null, hasKey: r.hasKey })) }, () => {
+            info(table([tr("Tên", "Name"), tr("Nhà", "Provider"), "Model", tr("Khoá", "Key"), ""], [
+                [b.bin, b.name, b.aiName, "—", def ? "" : c.green(tr("mặc định", "default"))],
+                ...rows.map((r) => [r.name, PROVIDERS[r.entry.provider].label, r.entry.model ?? PROVIDERS[r.entry.provider].defaultModel ?? c.dim(tr("(nêu khi dùng)", "(name it when used)")), PROVIDERS[r.entry.provider].needsKey ? (r.hasKey ? c.green("✓") : c.yellow(tr("chưa có", "missing"))) : "—", r.isDefault ? c.green(tr("mặc định", "default")) : ""]),
+            ]));
+            if (!rows.length)
+                info(c.dim(`\n  ${b.bin} model add claude --key-from-stdin < key.txt  ·  ${b.bin} model add ollama --url http://localhost:11434 --name qwen3:32b`));
+        });
+    });
+    model
+        .command("add <provider>")
+        .description(tr(`thêm nhà model: ${Object.keys(PROVIDERS).join(", ")}`, `add a provider: ${Object.keys(PROVIDERS).join(", ")}`))
+        .option("--key-from-stdin", tr("đọc khoá API từ stdin (không bao giờ đưa khoá lên dòng lệnh)", "read the API key from stdin (never put keys on the command line)"))
+        .option("--name <model>", tr("model dùng khi chỉ ghi tên nhà, vd gpt → --name <tên model>", "model used when only the provider is given"))
+        .option("--url <url>", tr("địa chỉ máy chủ (Ollama hoặc cổng tương thích)", "server address (Ollama or a compatible endpoint)"))
+        .action(async (provider, o) => {
+        if (!isProvider(provider))
+            throw new CliError(tr(`Không biết nhà "${provider}".`, `Unknown provider "${provider}".`), Exit.usage, Object.keys(PROVIDERS).join(", "));
+        const info0 = PROVIDERS[provider];
+        let key;
+        if (info0.needsKey) {
+            if (o.keyFromStdin)
+                key = await readAll();
+            else if (hasTty())
+                key = await readHidden(tr(`Khoá API ${info0.label}: `, `${info0.label} API key: `));
+            else
+                throw new CliError(tr("Không có terminal: dùng --key-from-stdin.", "No terminal: use --key-from-stdin."), Exit.usage);
+            if (!key)
+                throw new CliError(tr("Khoá rỗng.", "Empty key."), Exit.usage);
+        }
+        addModel(provider, { key, model: o.name, url: o.url });
+        ok(tr(`Đã thêm ${info0.label}. Dùng: ${b.bin} --model ${provider}${o.name || info0.defaultModel ? "" : "/<model>"}`, `Added ${info0.label}. Use: ${b.bin} --model ${provider}${o.name || info0.defaultModel ? "" : "/<model>"}`));
+    });
+    model
+        .command("remove <name>")
+        .description(tr("gỡ model và xoá khoá khỏi keychain", "remove a model and delete its key"))
+        .action((name) => {
+        if (!removeModel(name))
+            throw new CliError(tr(`Chưa có model "${name}".`, `No model "${name}".`), Exit.notFound);
+        ok(tr(`Đã gỡ ${name}.`, `Removed ${name}.`));
+    });
+    model
+        .command("default <name>")
+        .description(tr(`model mặc định khi mở chat (${b.bin} = ${b.aiName})`, `model used by default (${b.bin} = ${b.aiName})`))
+        .action((name) => {
+        const m = resolveModel(name);
+        setDefaultModel(m ? name : undefined);
+        ok(tr(`Mặc định: ${m ? m.label : b.aiName}`, `Default: ${m ? m.label : b.aiName}`));
+    });
+}

package/dist/commands/tools.js

@@ -1,5 +1,6 @@
 import { Option } from "commander";
 import { readFileSync } from "node:fs";
+import { context } from "../core/context.js";
 import { brand, envVar } from "../core/brand.js";
 import { CliError, Exit } from "../core/errors.js";
 import { currentLang, tr } from "../core/i18n.js";
@@ -11,9 +12,18 @@ import { authorizeMcp, readGrant, revokeGrant } from "../auth/mcp-oauth.js";
 import { browserAvailable } from "./auth.js";
 let publicCache;
 export async function publicTools() {
-    publicCache ??= (await get("/ai/public/tools", { anonymous: true })).filter((t) => !brand().modules || brand().modules.includes(t.module));
+    publicCache ??= (brand().platform === "nextfarm" ? await nextFarmPublicTools() : await get("/ai/public/tools", { anonymous: true }))
+        .filter((t) => !brand().modules || brand().modules.includes(t.module));
     return publicCache;
 }
+/** NextFarm: `{ version, tools: [{ name, service, scope, title, title_en, summary, summary_en, parameters, example_args }] }`, read verbatim so schema property names stay as the tool expects them. */
+async function nextFarmPublicTools() {
+    const r = await get("/ai/public/tools", { anonymous: true, verbatim: true });
+    return r.tools.map((t) => ({
+        name: t.name, module: t.service, title: t.title, summary: t.summary, summaryEn: t.summary_en, scope: t.scope,
+        kind: t.scope?.endsWith(":write") ? "write" : "read", parameters: t.parameters, exampleArgs: t.example_args,
+    }));
+}
 /** MCP names may differ from catalog names (module prefix, dots); match loosely. */
 export function sameTool(a, b) {
     const n = (s) => s.toLowerCase().replace(/[.\-]/g, "_");
@@ -151,7 +161,21 @@ export function registerTools(program) {
         .action(async (name, o) => {
         const args = parseArgs(o);
         let value;
-        if (envVar("API_KEY")) {
+        if (envVar("API_KEY") && brand().platform === "nextfarm") {
+            // NextFarm has no REST door for tools: the API key speaks MCP through the gateway, which keeps its read-only route rules.
+            const client = new McpClient(false, envVar("API_KEY"), `${context().endpoints.api}/api/v1/mcp`);
+            const tool = (await client.listTools()).find((t) => sameTool(t.name, name));
+            if (!tool)
+                throw new CliError(tr("Khoá này không thấy công cụ đó (thiếu phạm vi?).", "This key cannot see that tool (missing scope?)."), Exit.notFound, `${brand().bin} tools list`);
+            const r = await client.callTool(tool.name, args);
+            value = resultValue(r);
+            if (r.isError) {
+                emit({ error: value }, () => info(c.red(typeof value === "string" ? value : JSON.stringify(value, null, 2))));
+                process.exitCode = Exit.general;
+                return;
+            }
+        }
+        else if (envVar("API_KEY")) {
             const pub = (await publicTools()).find((p) => sameTool(p.name, name));
             if (!pub)
                 throw new CliError(tr("Không thấy công cụ công khai này.", "Public tool not found."), Exit.notFound);

package/dist/commands/util.js

@@ -57,7 +57,7 @@ export async function doctor() {
             const me = await get("/iam/auth/me");
             add(tr("Danh tính", "Identity"), true, `${src} · ${me.email ?? ""} · ${me.workspace?.name ?? ""} · ${me.permissions?.length ?? 0} ${tr("quyền", "permissions")}`);
             try {
-                const u = await get("/operator/widget/support/usage");
+                const u = await (await import("../ai/client.js")).usage();
                 add(tr("Gói AI", "AI plan"), u.limit === 0 ? "warn" : true, `${u.planName ?? "-"}${u.limit ? ` · ${tr("còn", "left")} ${u.remaining}/${u.limit}` : ""}`);
             }
             catch {