@nextxai/cli 0.1.1 → 0.3.1

package/dist/commands/model.js

@@ -0,0 +1,106 @@
+import { brand } from "../core/brand.js";
+import { CliError, Exit } from "../core/errors.js";
+import { tr } from "../core/i18n.js";
+import { c, emit, info, ok, table } from "../core/output.js";
+import { hasTty } from "../core/prompt.js";
+import { PROVIDERS, addModel, defaultModel, isProvider, listModels, removeModel, resolveModel, setDefaultModel } from "../ai/models.js";
+async function readAll() {
+    const chunks = [];
+    for await (const ch of process.stdin)
+        chunks.push(ch);
+    return Buffer.concat(chunks).toString("utf8").trim();
+}
+/** Reads a key from the terminal without echoing it. */
+async function readHidden(question) {
+    process.stderr.write(question);
+    const stdin = process.stdin;
+    stdin.setRawMode?.(true);
+    stdin.resume();
+    return new Promise((resolve, reject) => {
+        let value = "";
+        const onData = (d) => {
+            for (const ch of d.toString("utf8")) {
+                if (ch === "\r" || ch === "\n") {
+                    done();
+                    return resolve(value.trim());
+                }
+                if (ch === "\u0003") {
+                    done();
+                    return reject(new CliError(tr("Đã huỷ.", "Cancelled."), Exit.interrupted));
+                }
+                if (ch === "\u007f")
+                    value = value.slice(0, -1);
+                else
+                    value += ch;
+            }
+        };
+        const done = () => {
+            stdin.off("data", onData);
+            stdin.setRawMode?.(false);
+            stdin.pause();
+            process.stderr.write("\n");
+        };
+        stdin.on("data", onData);
+    });
+}
+export function registerModel(program) {
+    const b = brand();
+    const model = program
+        .command("model")
+        .description(tr(`model của bạn cho --model (khoá lưu keychain, không gửi về ${b.name})`, `your own models for --model (keys stay in the keychain, never sent to ${b.name})`));
+    model
+        .command("list")
+        .description(tr("các model đã thêm", "models you added"))
+        .action(() => {
+        const rows = listModels();
+        const def = defaultModel();
+        emit({ default: def ?? b.bin, models: rows.map((r) => ({ name: r.name, provider: r.entry.provider, model: r.entry.model ?? PROVIDERS[r.entry.provider].defaultModel ?? null, url: r.entry.url ?? null, hasKey: r.hasKey })) }, () => {
+            info(table([tr("Tên", "Name"), tr("Nhà", "Provider"), "Model", tr("Khoá", "Key"), ""], [
+                [b.bin, b.name, b.aiName, "—", def ? "" : c.green(tr("mặc định", "default"))],
+                ...rows.map((r) => [r.name, PROVIDERS[r.entry.provider].label, r.entry.model ?? PROVIDERS[r.entry.provider].defaultModel ?? c.dim(tr("(nêu khi dùng)", "(name it when used)")), PROVIDERS[r.entry.provider].needsKey ? (r.hasKey ? c.green("✓") : c.yellow(tr("chưa có", "missing"))) : "—", r.isDefault ? c.green(tr("mặc định", "default")) : ""]),
+            ]));
+            if (!rows.length)
+                info(c.dim(`\n  ${b.bin} model add claude --key-from-stdin < key.txt  ·  ${b.bin} model add ollama --url http://localhost:11434 --name qwen3:32b`));
+        });
+    });
+    model
+        .command("add <provider>")
+        .description(tr(`thêm nhà model: ${Object.keys(PROVIDERS).join(", ")}`, `add a provider: ${Object.keys(PROVIDERS).join(", ")}`))
+        .option("--key-from-stdin", tr("đọc khoá API từ stdin (không bao giờ đưa khoá lên dòng lệnh)", "read the API key from stdin (never put keys on the command line)"))
+        .option("--name <model>", tr("model dùng khi chỉ ghi tên nhà, vd gpt → --name <tên model>", "model used when only the provider is given"))
+        .option("--url <url>", tr("địa chỉ máy chủ (Ollama hoặc cổng tương thích)", "server address (Ollama or a compatible endpoint)"))
+        .action(async (provider, o) => {
+        if (!isProvider(provider))
+            throw new CliError(tr(`Không biết nhà "${provider}".`, `Unknown provider "${provider}".`), Exit.usage, Object.keys(PROVIDERS).join(", "));
+        const info0 = PROVIDERS[provider];
+        let key;
+        if (info0.needsKey) {
+            if (o.keyFromStdin)
+                key = await readAll();
+            else if (hasTty())
+                key = await readHidden(tr(`Khoá API ${info0.label}: `, `${info0.label} API key: `));
+            else
+                throw new CliError(tr("Không có terminal: dùng --key-from-stdin.", "No terminal: use --key-from-stdin."), Exit.usage);
+            if (!key)
+                throw new CliError(tr("Khoá rỗng.", "Empty key."), Exit.usage);
+        }
+        addModel(provider, { key, model: o.name, url: o.url });
+        ok(tr(`Đã thêm ${info0.label}. Dùng: ${b.bin} --model ${provider}${o.name || info0.defaultModel ? "" : "/<model>"}`, `Added ${info0.label}. Use: ${b.bin} --model ${provider}${o.name || info0.defaultModel ? "" : "/<model>"}`));
+    });
+    model
+        .command("remove <name>")
+        .description(tr("gỡ model và xoá khoá khỏi keychain", "remove a model and delete its key"))
+        .action((name) => {
+        if (!removeModel(name))
+            throw new CliError(tr(`Chưa có model "${name}".`, `No model "${name}".`), Exit.notFound);
+        ok(tr(`Đã gỡ ${name}.`, `Removed ${name}.`));
+    });
+    model
+        .command("default <name>")
+        .description(tr(`model mặc định khi mở chat (${b.bin} = ${b.aiName})`, `model used by default (${b.bin} = ${b.aiName})`))
+        .action((name) => {
+        const m = resolveModel(name);
+        setDefaultModel(m ? name : undefined);
+        ok(tr(`Mặc định: ${m ? m.label : b.aiName}`, `Default: ${m ? m.label : b.aiName}`));
+    });
+}

package/dist/commands/tools.js

@@ -11,9 +11,13 @@ import { authorizeMcp, readGrant, revokeGrant } from "../auth/mcp-oauth.js";
 import { browserAvailable } from "./auth.js";
 let publicCache;
 export async function publicTools() {
-    publicCache ??= (await get("/ai/public/tools", { anonymous: true })).filter((t) => !brand().modules || brand().modules.includes(t.module));
+    publicCache ??= (await loadPublicTools())
+        .filter((t) => !brand().modules || brand().modules.includes(t.module));
     return publicCache;
 }
+async function loadPublicTools() {
+    return get("/ai/public/tools", { anonymous: true });
+}
 /** MCP names may differ from catalog names (module prefix, dots); match loosely. */
 export function sameTool(a, b) {
     const n = (s) => s.toLowerCase().replace(/[.\-]/g, "_");

package/dist/commands/util.js

@@ -57,7 +57,7 @@ export async function doctor() {
             const me = await get("/iam/auth/me");
             add(tr("Danh tính", "Identity"), true, `${src} · ${me.email ?? ""} · ${me.workspace?.name ?? ""} · ${me.permissions?.length ?? 0} ${tr("quyền", "permissions")}`);
             try {
-                const u = await get("/operator/widget/support/usage");
+                const u = await (await import("../ai/client.js")).usage();
                 add(tr("Gói AI", "AI plan"), u.limit === 0 ? "warn" : true, `${u.planName ?? "-"}${u.limit ? ` · ${tr("còn", "left")} ${u.remaining}/${u.limit}` : ""}`);
             }
             catch {

package/dist/commands/webhooks.js

@@ -9,21 +9,53 @@ import { c, emit, info, json, ok, table, warn } from "../core/output.js";
 import { get, post, del, requestRaw, errorFor } from "../core/http.js";
 import { confirm, hasTty } from "../core/prompt.js";
 const when = (iso) => (iso ? iso.slice(0, 19).replace("T", " ") : "");
+/** Platforms whose webhook contract differs (event list shape, endpoints with many events, per-endpoint deliveries, test call). */
+let farm = () => false;
+/** Signature headers per platform: `…-Signature-256` by default (sha256=HMAC(ts.body)). */
+function sigHeader() {
+    return "x-nextx-signature-256";
+}
+function tsHeader() {
+    return "x-nextx-timestamp";
+}
+function sigScheme() {
+    return "Signature-256";
+}
 export async function eventTypes() {
     return get("/webhook/public/event-types", { anonymous: true });
 }
+/** Some platforms send `eventTypes` per endpoint and no single module. */
+async function listEndpoints() {
+    const list = await get("/webhook/endpoints");
+    return farm() ? list.map((e) => ({ ...e, events: e.eventTypes ?? [], status: e.isActive ? "active" : "disabled" })) : list;
+}
+/** Some platforms keep deliveries per endpoint only; the CLI merges them. */
+async function listDeliveries(o) {
+    if (!farm()) {
+        const path = o.endpoint ? `/webhook/endpoints/${(await findEndpoint(o.endpoint)).id}/deliveries` : "/webhook/deliveries";
+        const r = await get(path, { query: { status: o.status, pageSize: o.limit } });
+        return Array.isArray(r) ? r : r.items;
+    }
+    const eps = o.endpoint ? [await findEndpoint(o.endpoint)] : await listEndpoints();
+    const all = (await Promise.all(eps.map((e) => get(`/webhook/endpoints/${e.id}/deliveries`, { query: { limit: o.limit } })))).flat();
+    return all
+        .map((d) => ({ id: d.id, eventType: d.eventType, status: d.status === "delivered" ? "success" : d.status, responseStatus: d.lastStatusCode, durationMs: d.lastDurationMs, retryCount: d.attemptCount, maxRetries: 8, deliveredAt: d.deliveredAt, createdAt: d.createdAt }))
+        .filter((d) => !o.status || d.status === o.status)
+        .sort((a, b) => b.createdAt.localeCompare(a.createdAt))
+        .slice(0, o.limit);
+}
 /** Checks both the NextX header (sha256=HMAC(ts.body)) and Standard Webhooks (v1,base64 HMAC(id.ts.body)). */
 export function verifySignature(secret, body, headers, toleranceSec = 300) {
     const h = Object.fromEntries(Object.entries(headers).map(([k, v]) => [k.toLowerCase(), v]));
     const eq = (a, b) => a.length === b.length && timingSafeEqual(Buffer.from(a), Buffer.from(b));
-    const ts = h["x-nextx-timestamp"] ?? h["webhook-timestamp"];
+    const ts = h[tsHeader()] ?? h["webhook-timestamp"];
     if (ts && Math.abs(Date.now() / 1000 - Number(ts)) > toleranceSec)
         return { ok: false, reason: tr("dấu thời gian quá cũ", "timestamp too old") };
-    if (h["x-nextx-signature-256"] && ts) {
+    if (h[sigHeader()] && ts) {
         const expected = "sha256=" + createHmac("sha256", secret).update(`${ts}.${body}`).digest("hex");
-        const got = [h["x-nextx-signature-256"], h["x-nextx-signature-256-previous"]].filter(Boolean);
+        const got = [h[sigHeader()], h[`${sigHeader()}-previous`]].filter(Boolean);
         if (got.some((g) => eq(g, expected)))
-            return { ok: true, scheme: "Signature-256" };
+            return { ok: true, scheme: sigScheme() };
     }
     if (h["webhook-signature"] && h["webhook-id"] && ts) {
         const key = secret.startsWith("whsec_") ? Buffer.from(secret.slice(6), "base64") : Buffer.from(secret);
@@ -34,7 +66,7 @@ export function verifySignature(secret, body, headers, toleranceSec = 300) {
     return { ok: false, reason: tr("chữ ký không khớp", "signature mismatch") };
 }
 async function findEndpoint(id) {
-    const e = (await get("/webhook/endpoints")).find((x) => x.id.startsWith(id) || x.url === id);
+    const e = (await listEndpoints()).find((x) => x.id.startsWith(id) || x.url === id);
     if (!e)
         throw new CliError(tr("Không thấy endpoint này.", "Endpoint not found."), Exit.notFound);
     return e;
@@ -46,7 +78,7 @@ export function registerWebhooks(program) {
         let list = await eventTypes();
         if (o.module)
             list = list.filter((e) => e.service.toLowerCase() === o.module.toLowerCase());
-        emit(list, () => info(table([tr("Sự kiện", "Event"), tr("Phân hệ", "Module"), tr("Mô tả", "Description"), tr("Gói", "Plan")], list.map((e) => [e.event, e.service, (currentLang() === "en" ? e.descriptionEn ?? e.title : e.title), e.planRequired ?? ""]))));
+        emit(list, () => info(table([tr("Sự kiện", "Event"), tr("Phân hệ", "Module"), tr("Mô tả", "Description"), farm() ? tr("Quyền", "Permission") : tr("Gói", "Plan")], list.map((e) => [e.event, e.service, (currentLang() === "en" ? e.descriptionEn ?? e.title : e.title), e.planRequired ?? ""]))));
     });
     wh.command("schema <event>").description(tr("schema và ví dụ payload", "payload schema and example"))
         .action(async (event) => {
@@ -63,7 +95,7 @@ export function registerWebhooks(program) {
     });
     const ep = wh.command("endpoints").description(tr("endpoint nhận webhook của workspace", "your webhook endpoints"));
     ep.command("list", { isDefault: true }).action(async () => {
-        const list = await get("/webhook/endpoints");
+        const list = await listEndpoints();
         emit(list, () => info(table(["ID", "URL", tr("Sự kiện", "Events"), tr("Trạng thái", "Status"), tr("Lỗi liên tiếp", "Failures")], list.map((e) => [e.id.slice(0, 8), e.url, e.events.length > 3 ? `${e.events.slice(0, 3).join(", ")} +${e.events.length - 3}` : e.events.join(", "), e.isActive ? c.green(e.status) : c.dim(e.status), e.consecutiveFailures || ""]))));
     });
     ep.command("create <url>")
@@ -71,6 +103,19 @@ export function registerWebhooks(program) {
         .option("--description <text>")
         .action(async (url, o) => {
         const events = o.events.split(",").map((s) => s.trim()).filter(Boolean);
+        if (farm()) {
+            const known = new Set((await eventTypes()).map((t) => t.event));
+            const unknown = events.filter((e) => !known.has(e));
+            if (unknown.length)
+                throw new CliError(tr(`Không có sự kiện: ${unknown.join(", ")}`, `Unknown events: ${unknown.join(", ")}`), Exit.usage, `${brand().bin} webhooks events`);
+            const r = await post("/webhook/endpoints", { url, description: o.description, eventTypes: events });
+            emit(r, () => {
+                ok(tr("Đã tạo endpoint.", "Endpoint created."));
+                if (r.secret)
+                    info(`  ${tr("Khoá ký", "Signing secret")}: ${c.bold(String(r.secret))} ${c.dim(tr("(chỉ hiện một lần)", "(shown once)"))}`);
+            });
+            return;
+        }
         const types = await eventTypes();
         const services = [...new Set(events.map((e) => types.find((t) => t.event === e)?.service).filter(Boolean))];
         if (services.length !== 1)
@@ -98,10 +143,18 @@ export function registerWebhooks(program) {
     wh.command("trigger <event>").description(tr("bắn một sự kiện mẫu tới endpoint", "send a sample event to an endpoint"))
         .option("--endpoint <id>", tr("endpoint đích (mặc định: endpoint đầu tiên nhận sự kiện này)", "target endpoint (default: first one subscribed)"))
         .action(async (event, o) => {
-        const list = await get("/webhook/endpoints");
+        const list = await listEndpoints();
         const target = o.endpoint ? await findEndpoint(o.endpoint) : list.find((e) => e.events.includes(event));
         if (!target)
             throw new CliError(tr("Chưa có endpoint nào nhận sự kiện này.", "No endpoint subscribes to this event."), Exit.notFound, tr(`Dùng \`${brand().bin} webhooks listen --events ${event}\` để nghe về máy.`, `Use \`${brand().bin} webhooks listen --events ${event}\` to receive it locally.`));
+        if (farm()) {
+            // This platform sends a signed `webhook.test` and answers with the receiver's status straight away.
+            const t = await post(`/webhook/endpoints/${target.id}/test`, {});
+            emit(t, () => (t.ok ? ok : warn)(tr(`Đã gửi webhook.test → ${target.url}`, `Sent webhook.test → ${target.url}`) + ` · ${t.statusCode ? `HTTP ${t.statusCode}` : t.error ?? ""} · ${t.durationMs}ms`));
+            if (!t.ok)
+                process.exitCode = Exit.general;
+            return;
+        }
         const r = await post(`/webhook/endpoints/${target.id}/test`, { eventType: event });
         emit(r, () => ok(tr(`Đã gửi ${event} → ${target.url}`, `Sent ${event} → ${target.url}`) + (r.responseStatus ? ` · HTTP ${r.responseStatus}` : "")));
     });
@@ -110,15 +163,13 @@ export function registerWebhooks(program) {
         .option("--endpoint <id>")
         .option("--limit <n>", "", "30")
         .action(async (o) => {
-        const path = o.endpoint ? `/webhook/endpoints/${(await findEndpoint(o.endpoint)).id}/deliveries` : "/webhook/deliveries";
-        const r = await get(path, { query: { status: o.status, pageSize: o.limit } });
-        const list = Array.isArray(r) ? r : r.items;
+        const list = await listDeliveries({ endpoint: o.endpoint, status: o.status, limit: Number(o.limit) });
         emit(list, () => info(table(["ID", tr("Sự kiện", "Event"), tr("Kết quả", "Result"), "HTTP", "ms", tr("Thử lại", "Retries"), tr("Lúc", "At")], list.map((d) => [
             d.id.slice(0, 8), d.eventType, d.status === "success" ? c.green(d.status) : d.status === "failed" ? c.red(d.status) : d.status, d.responseStatus ?? "", d.durationMs ?? "", `${d.retryCount}/${d.maxRetries}`, when(d.createdAt),
         ]))));
     });
     wh.command("retry <deliveryId>").description(tr("gửi lại một lượt giao", "retry a delivery")).action(async (id) => {
-        const full = id.length >= 32 ? id : (await get("/webhook/deliveries", { query: { pageSize: 100 } }).then((r) => (Array.isArray(r) ? r : r.items).find((d) => d.id.startsWith(id))?.id));
+        const full = id.length >= 32 ? id : (await listDeliveries({ limit: 100 })).find((d) => d.id.startsWith(id))?.id;
         if (!full)
             throw new CliError(tr("Không thấy lượt giao này.", "Delivery not found."), Exit.notFound);
         const r = await post(`/webhook/deliveries/${full}/retry`, {});
@@ -139,9 +190,9 @@ export function registerWebhooks(program) {
                 headers[h.slice(0, i).trim()] = h.slice(i + 1).trim();
         }
         if (o.signature)
-            headers["x-nextx-signature-256"] = o.signature;
+            headers[sigHeader()] = o.signature;
         if (o.timestamp)
-            headers["x-nextx-timestamp"] = o.timestamp;
+            headers[tsHeader()] = o.timestamp;
         const r = verifySignature(o.secret, body, headers);
         emit(r, () => (r.ok ? ok(tr(`Chữ ký hợp lệ (${r.scheme})`, `Valid signature (${r.scheme})`)) : warn(tr(`Không hợp lệ: ${r.reason}`, `Invalid: ${r.reason}`))));
         if (!r.ok)

package/dist/core/brand.js

@@ -1,8 +1,8 @@
 // One codebase, several branded binaries. The entry file (src/bin/<brand>.ts) picks the brand before
 // anything else is imported; every user-facing name, host and storage location comes from here.
-// <brand:nextx>
 const NEXTX = {
     id: "nextx",
+    platform: "nextx",
     bin: "nextx",
     name: "NextX",
     aiName: "NextX AI",
@@ -10,6 +10,10 @@ const NEXTX = {
     clientId: "nextx-cli",
     envPrefix: "NEXTX",
     mobileApp: "NextX",
+    examples: { scopes: "crm.contacts.view,sales.orders.view", ciKinds: "crm.tasks.create" },
+    example: { vi: "doanh thu hôm qua", en: "yesterday's revenue" },
+    apiExample: "GET /crm/contacts -f q=Minh",
+    ciSettings: { vi: "Thiết lập › Ứng dụng & API › CI", en: "Settings › Apps & API › CI" },
     modules: null,
     env: {
         prod: {
@@ -30,10 +34,9 @@ const NEXTX = {
         },
     },
 };
-// </brand:nextx>
 // Exported trees keep only their own brand (scripts/export.sh strips the other block and its line here).
 const BRANDS = {
-    nextx: NEXTX, // <brand-line:nextx>
+    nextx: NEXTX,
 };
 let current = Object.values(BRANDS)[0];
 export function setBrand(id) {

package/dist/core/errors.js

@@ -11,6 +11,10 @@ export const Exit = {
     notFound: 8,
     interrupted: 130,
 };
+/** The brand's server does not offer this sign-in method yet. */
+export function notYetError(what, instead) {
+    return new CliError(`${what} — ${instead}`, Exit.usage);
+}
 export class CliError extends Error {
     exitCode;
     hint;

package/dist/core/http.js

@@ -1,13 +1,22 @@
 // Every call to the platform goes through here: identity headers, retry on expired token, error → exit code.
 import { randomUUID } from "node:crypto";
 import { arch, platform } from "node:os";
-import { fetch, EnvHttpProxyAgent, setGlobalDispatcher } from "undici";
+import { fetch, FormData, EnvHttpProxyAgent, setGlobalDispatcher } from "undici";
 import { brand } from "./brand.js";
 import { context } from "./context.js";
 import { CliError, Exit } from "./errors.js";
 import { t, currentLang } from "./i18n.js";
 import { VERSION } from "./version.js";
 import { currentAuth, refreshSession } from "../auth/session.js";
+/** Key case on the wire: some services speak snake_case; the CLI keeps camelCase inside. */
+function toWire(url, body) {
+    void url;
+    return body;
+}
+function fromWire(url, body) {
+    void url;
+    return body;
+}
 setGlobalDispatcher(new EnvHttpProxyAgent());
 export const userAgent = () => `${brand().bin}-cli/${VERSION} (${platform()}; ${arch()}; node ${process.versions.node})`;
 export function apiPath(path) {
@@ -46,10 +55,11 @@ async function send(method, url, opts, auth) {
     };
     let body;
     if (opts.body !== undefined) {
-        if (typeof opts.body === "string")
+        // Multipart: undici sets the boundary itself, so no Content-Type here.
+        if (opts.body instanceof FormData || typeof opts.body === "string")
             body = opts.body;
         else {
-            body = JSON.stringify(opts.body);
+            body = JSON.stringify(opts.verbatim ? opts.body : toWire(url, opts.body));
             headers["Content-Type"] ??= "application/json";
         }
     }
@@ -158,7 +168,8 @@ export async function request(method, path, opts = {}) {
     const requestId = res.headers.get("x-request-id") ?? undefined;
     if (opts.raw)
         return { status: res.status, data: res, headers: res.headers, requestId };
-    const data = await readBody(res);
+    const body = await readBody(res);
+    const data = opts.verbatim ? body : fromWire(res.url || path, body);
     if (!res.ok && !opts.allow?.includes(res.status))
         throw errorFor(res.status, data, res);
     return { status: res.status, data: data, headers: res.headers, requestId };

package/dist/mcp/client.js

@@ -12,16 +12,19 @@ const PROTOCOL = "2025-06-18";
 export class McpClient {
     interactive;
     apiKey;
+    url;
     sessionId;
     nextId = 1;
     token;
     ready = false;
-    constructor(interactive, apiKey) {
+    /** `url`: MCP endpoint other than the hosted OAuth server (API keys that go through the gateway's /api/v1/mcp). */
+    constructor(interactive, apiKey, url) {
         this.interactive = interactive;
         this.apiKey = apiKey;
+        this.url = url;
     }
     async rpc(method, params, notification = false) {
-        const url = context().endpoints.mcp;
+        const url = this.url ?? context().endpoints.mcp;
         this.token ??= this.apiKey ?? (await mcpToken({ interactive: this.interactive }));
         const id = notification ? undefined : this.nextId++;
         const headers = {

package/dist/program.js

@@ -8,6 +8,7 @@ import { tr } from "./core/i18n.js";
 import { registerAuth } from "./commands/auth.js";
 import { registerWorkspace } from "./commands/workspace.js";
 import { registerAi, runRoot } from "./commands/ai.js";
+import { registerModel } from "./commands/model.js";
 import { registerTools } from "./commands/tools.js";
 import { registerApi } from "./commands/api.js";
 import { registerKeys } from "./commands/keys.js";
@@ -16,6 +17,7 @@ import { registerDocs } from "./commands/docs.js";
 import { registerMcp } from "./commands/mcp.js";
 import { registerUtil } from "./commands/util.js";
 import { registerHelp } from "./commands/help.js";
+import { registerCi } from "./commands/ci.js";
 const collect = (v, prev = []) => [...prev, v];
 export function buildProgram() {
     const b = brand();
@@ -32,6 +34,7 @@ export function buildProgram() {
         .option("--sandbox", tr("dùng môi trường thử nghiệm", "use the sandbox environment"))
         .option("-w, --workspace <code>", tr("chạy lệnh này trên workspace khác", "run this command on another workspace"))
         .option("--agent <code>", tr("chọn Agent thay cho Trợ lý chung", "choose an Agent instead of the general assistant"))
+        .option("--model <provider/name>", tr("dùng model của bạn qua MCP: claude, gemini, gpt, grok, ollama/<tên>", "use your own model over MCP: claude, gemini, gpt, grok, ollama/<name>"))
         .addOption(new Option("--mode <mode>", tr("chế độ quyền", "permission mode")).choices(["read", "propose", "auto"]))
         .addOption(new Option("--output-format <format>", tr("định dạng đầu ra", "output format")).choices(["text", "json", "stream-json"]))
         .option("--json", tr("viết tắt của --output-format json", "shorthand for --output-format json"))
@@ -54,12 +57,14 @@ export function buildProgram() {
     registerAuth(program);
     registerWorkspace(program);
     registerAi(program);
+    registerModel(program);
     registerTools(program);
     registerApi(program);
     registerKeys(program);
     registerWebhooks(program);
     registerDocs(program);
     registerMcp(program);
+    registerCi(program);
     registerUtil(program);
     registerHelp(program);
     for (const sub of program.commands)

package/dist/repl/App.js

@@ -19,7 +19,9 @@ import { deleteSession } from "../auth/credentials.js";
 import { findProjectNotes, notesFileName, proposalCard, renderBlocks, runLines } from "../commands/ai.js";
 import { markdown } from "./markdown.js";
 import { Editor, Menu, Select, edit } from "./components.js";
-import { SLASH, SHORTCUTS, matchSlash } from "./slash.js";
+import { LocalChat } from "../ai/local.js";
+import { listModels, resolveModel } from "../ai/models.js";
+import { SHORTCUTS, SLASH, matchSlash, slashCommands } from "./slash.js";
 const MODES = ["propose", "auto", "read"];
 const modeLabel = (m) => m === "propose" ? c.cyan(tr("⏵⏵ đề xuất", "⏵⏵ propose")) : m === "auto" ? c.yellow(tr("⏵⏵ tự ghi việc thường", "⏵⏵ auto-write normal")) : c.dim(tr("⏸ chỉ đọc", "⏸ read only"));
 let seq = 0;
@@ -90,6 +92,7 @@ export function App(props) {
     const [modal, setModal] = useState(null);
     const [mode, setMode] = useState(context().mode);
     const [agent, setAgent] = useState(context().agent);
+    const [local, setLocal] = useState(() => (props.model ? new LocalChat(props.model, true, context().mode === "read") : undefined));
     const [sessionId, setSessionId] = useState(props.sessionId);
     const [pending, setPending] = useState([]);
     const [usageText, setUsageText] = useState("");
@@ -124,7 +127,7 @@ export function App(props) {
         const line2 = ` ${c.dim(`${process.cwd().replace(process.env.HOME ?? "", "~")}${notes ? ` (${notesFileName()})` : ""} · CLI ${VERSION}`)}`;
         const strip = (s) => s.replace(/\u001b\[[0-9;]*m/g, "");
         const pad = (s) => s + " ".repeat(Math.max(0, inner + 1 - [...strip(s)].length));
-        const title = `─ ${b.aiName} `;
+        const title = local ? `─ ${b.name} · model: ${local.model.label} · ${tr("công cụ qua MCP", "tools over MCP")} ` : `─ ${b.aiName} `;
         say([
             c.cyan(`╭${title}${"─".repeat(Math.max(0, inner - title.length + 2))}╮`),
             `${c.cyan("│")}${pad(line1)} ${c.cyan("│")}`,
@@ -191,6 +194,8 @@ export function App(props) {
         say(proposalCard(p).join("\n"));
         if (mode === "read")
             return say(c.dim(tr("  Chế độ chỉ đọc: không ghi. Shift+Tab để đổi.", "  Read-only mode: nothing written. Shift+Tab to change.")));
+        if (risk === "device")
+            return say(c.dim(tr(`  Việc chạm thiết bị / tự động hoá chỉ xác nhận trong app ${b.mobileApp}: ${context().endpoints.app}`, `  Device and automation actions are confirmed in the ${b.mobileApp} app: ${context().endpoints.app}`)));
         if (risk === "finance")
             return say(c.dim(tr(`  Việc tài chính chỉ xác nhận trong app: ${context().endpoints.app}`, `  Finance actions are confirmed in the app: ${context().endpoints.app}`)));
         const yes = mode === "auto" && risk === "normal" ? true : await askConfirm(p);
@@ -245,26 +250,38 @@ export function App(props) {
         const ctl = new AbortController();
         abortRef.current = ctl;
         try {
+            const onChunk = (ch) => {
+                const l = liveRef.current;
+                if (ch.type === "token")
+                    l.text += ch.text ?? "";
+                else if (ch.type === "activity" && ch.activity)
+                    l.activities.push(ch.activity);
+                else if (ch.type === "agent" && ch.agent)
+                    l.agent = ch.agent;
+                l.reconnecting = undefined;
+            };
+            if (local) {
+                const skipped = atts.filter((a) => a.kind !== "text");
+                if (skipped.length)
+                    say(c.yellow(tr(`  ⚠ Model riêng chỉ đọc tệp chữ; bỏ qua ${skipped.map((a) => a.name).join(", ")}.`, `  ⚠ Your own model reads text files only; skipped ${skipped.map((a) => a.name).join(", ")}.`)));
+                const out = await local.ask({ text: composeText(clean, atts.filter((a) => a.kind === "text"), notes?.text), signal: ctl.signal, onChunk });
+                setLastOutcome(out);
+                say(renderAnswer(out));
+                return;
+            }
             const out = await ask({
                 sessionId,
                 text: composeText(clean, atts, notes?.text),
                 attachments: atts,
                 agent: thisAgent,
                 signal: ctl.signal,
-                onChunk: (ch) => {
-                    const l = liveRef.current;
-                    if (ch.type === "token")
-                        l.text += ch.text ?? "";
-                    else if (ch.type === "activity" && ch.activity)
-                        l.activities.push(ch.activity);
-                    else if (ch.type === "agent" && ch.agent)
-                        l.agent = ch.agent;
-                    l.reconnecting = undefined;
-                },
+                onChunk,
                 onRetry: (n) => liveRef.current && (liveRef.current.reconnecting = n),
             });
             setLastOutcome(out);
-            updateProfile(context().profile, { lastConversation: sessionId });
+            if (out.sessionId && out.sessionId !== sessionId)
+                setSessionId(out.sessionId);
+            updateProfile(context().profile, { lastConversation: out.sessionId || sessionId });
             say(renderAnswer(out));
             if (out.proposedAction)
                 await handleProposal(out.proposedAction);
@@ -320,11 +337,16 @@ export function App(props) {
         const cmd = (cmd0 ?? "").toLowerCase();
         const arg = rest.join(" ").trim();
         try {
+            // Commands that belong to another backend behave like unknown ones.
+            if (SLASH.some((s) => s.name === cmd) && !slashCommands().some((s) => s.name === cmd)) {
+                say(`${c.yellow("⚠")} ${tr(`Không có lệnh /${cmd}.`, `No command /${cmd}.`)} ${c.dim("/help")}`);
+                return;
+            }
             switch (cmd) {
                 case "help":
                 case "?": {
-                    const w = Math.max(...SLASH.map((s) => s.name.length)) + 2;
-                    say([...SLASH.map((s) => `  ${c.cyan(`/${s.name}`.padEnd(w + 1))} ${s.description()}`), "", ...SHORTCUTS.map((s) => `  ${s.keys.padEnd(30)} ${c.dim(s.description())}`)].join("\n"));
+                    const w = Math.max(...slashCommands().map((s) => s.name.length)) + 2;
+                    say([...slashCommands().map((s) => `  ${c.cyan(`/${s.name}`.padEnd(w + 1))} ${s.description()}`), "", ...SHORTCUTS.map((s) => `  ${s.keys.padEnd(30)} ${c.dim(s.description())}`)].join("\n"));
                     break;
                 }
                 case "new": {
@@ -393,9 +415,22 @@ export function App(props) {
                     say(`  ${modeLabel(m)}`);
                     break;
                 }
-                case "model":
-                    say(c.dim(tr(`  Đang dùng ${b.aiName}. Model của bạn: chạy \`${b.bin} --model <tên>\` (xem \`${b.bin} model list\`).`, `  Using ${b.aiName}. Your own model: run \`${b.bin} --model <name>\` (see \`${b.bin} model list\`).`)));
+                case "model": {
+                    if (!arg) {
+                        const rows = listModels();
+                        say([
+                            `  ${tr("Đang dùng", "Using")} ${c.bold(local ? local.model.label : b.aiName)}`,
+                            `  ${c.cyan(b.bin.padEnd(10))} ${b.aiName}`,
+                            ...rows.map((r) => `  ${c.cyan(r.name.padEnd(10))} ${r.entry.model ?? ""}${r.hasKey ? "" : c.yellow(tr(" (chưa có khoá)", " (no key)"))}`),
+                            c.dim(`  /model ${b.bin} · /model claude · /model ollama/<model> · ${b.bin} model add <nhà>`),
+                        ].join("\n"));
+                        break;
+                    }
+                    const m = resolveModel(arg);
+                    setLocal(m ? new LocalChat(m, true, mode === "read") : undefined);
+                    say(`${c.green("✓")} ${m ? `${tr("Model của bạn", "Your model")}: ${m.label} · ${tr("công cụ qua MCP, ghi chỉ bằng link xác nhận, không trừ lượt AI", "tools over MCP, writes only via a confirmation link, no AI turns used")}` : b.aiName}`);
                     break;
+                }
                 case "attach":
                     if (!arg)
                         throw new Error(tr("Cần đường dẫn tệp.", "Pass a file path."));
@@ -765,7 +800,7 @@ export function App(props) {
     });
     // ── view ──────────────────────────────────────────────────────────────────────────────────────
     const p = profile();
-    const footerRight = c.dim(`${p?.workspaceName ?? ""} · ${context().env}${usageText ? ` · ${usageText}` : ""}${agent ? ` · ${agent}` : ""}`);
+    const footerRight = c.dim(`${p?.workspaceName ?? ""} · ${context().env}${local ? ` · ${local.model.label}` : usageText ? ` · ${usageText}` : ""}${agent && !local ? ` · ${agent}` : ""}`);
     const lastReason = live?.activities.filter((a) => a.kind !== "tool").at(-1);
     return (_jsxs(Box, { flexDirection: "column", children: [_jsx(Static, { items: done, children: (it) => _jsx(Text, { children: it.text }, it.id) }), live ? (_jsxs(Box, { flexDirection: "column", marginTop: 0, children: [live.agent && live.agent.code !== "general" ? _jsx(Text, { color: "cyan", children: `● ${live.agent.name}` }) : null, live.activities.filter((a) => a.kind === "tool").map((a, i) => (_jsx(Text, { color: "gray", children: `  ⏺ ${a.label}` }, i))), live.text ? _jsx(Text, { children: markdown(live.text).replace(/^/gm, "  ") }) : null, _jsxs(Text, { color: "gray", children: [_jsx(Spinner, { type: "dots" }), " ", live.reconnecting ? tr(`Mất kết nối, đang nối lại (${live.reconnecting}/2)…`, `Reconnecting (${live.reconnecting}/2)…`) : (lastReason?.label ?? tr("Đang nghĩ…", "Thinking…")), "  ", _jsx(Text, { dimColor: true, children: tr("Esc dừng", "Esc to stop") })] })] })) : null, modal?.kind === "select" ? (_jsx(Select, { title: modal.title, items: modal.items, initial: modal.initial, onPick: modal.resolve, hint: tr("↑↓ chọn · Enter · Esc huỷ", "↑↓ choose · Enter · Esc cancel") })) : modal?.kind === "confirm" ? (_jsx(Box, { marginTop: 0, children: riskOf(modal.proposal) === "large" ? (_jsxs(Text, { children: [c.yellow("└ "), tr(`Gõ ${c.bold(confirmWord(modal.proposal))} để xác nhận, Enter để huỷ`, `Type ${c.bold(confirmWord(modal.proposal))} to confirm, Enter to cancel`), " \u203A ", modal.typed, _jsx(Text, { inverse: true, children: " " })] })) : (_jsxs(Text, { children: [c.yellow("└ "), tr("Ghi?", "Write?"), " ", c.bold("[y]"), " ", tr("có", "yes"), "  ", c.bold("[n]"), " ", tr("không", "no"), "  ", c.bold("[d]"), " ", tr("xem dữ liệu", "show data")] })) })) : (_jsxs(Box, { flexDirection: "column", marginTop: 1, children: [pending.length ? _jsx(Text, { color: "gray", children: `  📎 ${pending.map((a) => a.name).join(", ")}` }) : null, _jsx(Editor, { value: value, cursor: cursor, disabled: busy, placeholder: busy ? "" : tr(`Hỏi ${b.aiName}… (/ để xem lệnh)`, `Ask ${b.aiName}… (/ for commands)`) }), menuItems.length ? _jsx(Menu, { items: menuItems, index: menuIndex }) : null, _jsxs(Box, { justifyContent: "space-between", width: width, children: [_jsx(Text, { children: `  ${modeLabel(mode)} ${c.dim("(Shift+Tab)")}` }), _jsx(Text, { children: footerRight })] })] }))] }));
 }

package/dist/repl/index.js

@@ -5,7 +5,7 @@ import { resolveConversation } from "../commands/ai.js";
 export async function startRepl(opts) {
     const sessionId = await resolveConversation(opts.flags);
     const resumed = Boolean(opts.flags.continue || opts.flags.resume);
-    const app = render(_jsx(App, { sessionId: sessionId, resumed: resumed, initialQuestion: opts.initialQuestion, files: (opts.flags.file ?? []).slice(0, 3) }), {
+    const app = render(_jsx(App, { sessionId: sessionId, resumed: resumed, initialQuestion: opts.initialQuestion, files: (opts.flags.file ?? []).slice(0, 3), model: opts.model }), {
         exitOnCtrlC: false,
     });
     await app.waitUntilExit();