@oooooooooo/ch0de 0.0.0-stage → 1.9.56

package/provider-catalog.js

@@ -0,0 +1,246 @@
+'use strict';
+/**
+ * provider-catalog.js
+ *
+ * A single data-driven view of every provider chode can connect to.
+ *
+ * It unifies three sources into one browsable list:
+ *   1. the built-in registry (PROVIDERS, including saved "setup" customs),
+ *   2. the community directory profiles (provider-directory.json), and
+ *   3. saved custom connections (already folded into PROVIDERS by reloadConnections).
+ *
+ * Each entry carries live status (is it configured? is a key resolvable? how
+ * many models? which tier?) and, for providers that offer more than one way to
+ * authenticate, an ordered list of access `variants` (e.g. OVH: "free, no key"
+ * plus "API key / credits").
+ *
+ * The module is dependency-light and synchronous so it can drive both the
+ * terminal picker and the TUI picker. It never performs network I/O: callers
+ * pass in already-discovered data (e.g. the Ollama model list) when they want
+ * richer local status.
+ */
+
+const directory = require('./provider-directory');
+const credentials = require('./provider-credentials');
+
+// Canonical tier labels, in display order.
+const TIERS = ['free', 'keyless', 'local', 'paid', 'configured'];
+
+function categoryToTier(category) {
+  switch (category) {
+    case 'free_tier': return 'free';
+    case 'keyless': return 'keyless';
+    case 'free_local': return 'local';
+    case 'paid': return 'paid';
+    case 'configured': return 'configured';
+    default: return 'configured';
+  }
+}
+
+function normalizeBase(url) {
+  try { return String(url || '').replace(/\/+$/, '').replace(/\/chat\/completions$/i, ''); }
+  catch (e) { return String(url || ''); }
+}
+
+function baseOfBuiltIn(p) {
+  const ep = p && p.endpoints && p.endpoints[0];
+  const u = typeof ep && ep.url === 'function' ? null : ep && ep.url;
+  return u ? normalizeBase(u) : null;
+}
+
+function baseOfProfile(profile) {
+  return profile && profile.baseUrl ? normalizeBase(profile.baseUrl) : null;
+}
+
+// Build the variant list for a provider. Free/no-key variants sort first so the
+// zero-setup path is always the default, which is what "free tiers first" means.
+function variantsFor({ requiresKey, keyEnv, tier, modelCount, freeTier, pricedModels }) {
+  const variants = [];
+  if (!requiresKey) {
+    variants.push({
+      label: tier === 'local' ? 'Local (no key)' : 'No key (free)',
+      tier: tier === 'local' ? 'local' : 'keyless',
+      requiresKey: false,
+      keyEnv: null,
+      note: freeTier || (tier === 'local' ? 'Uses your running local server.' : 'Anonymous / keyless access.'),
+      modelCount: modelCount
+    });
+  } else {
+    variants.push({
+      label: 'API key (' + (keyEnv || 'key') + ')',
+      tier: tier === 'free' ? 'free' : 'paid',
+      requiresKey: true,
+      keyEnv: keyEnv || null,
+      note: pricedModels ? 'Uses account credits / pricing.' : 'Authenticated account access.',
+      modelCount: modelCount
+    });
+  }
+  return variants;
+}
+
+/**
+ * Build the unified catalog.
+ *
+ * @param {object} engine  the chode module (for PROVIDERS, loadConfig, loadProviderSettings)
+ * @param {object} [opts]
+ *   @param {object} [opts.env]        env map used for key resolution (default process.env)
+ *   @param {Array}  [opts.localModels] discovered local model ids (e.g. Ollama)
+ *   @param {boolean}[opts.probeLocal]  set true to mark the local server as up (caller verified)
+ * @returns {Array} catalog entries
+ */
+function all(engine, opts = {}) {
+  const env = opts.env || process.env;
+  const providers = (engine && engine.PROVIDERS) || {};
+  const config = (engine && typeof engine.loadConfig === 'function') ? engine.loadConfig(true) : {};
+  const settingsFor = (id) => (engine && typeof engine.loadProviderSettings === 'function')
+    ? engine.loadProviderSettings(id, false)
+    : ((config.providers && config.providers[id]) || {});
+
+  const byId = new Map();
+
+  // 1) built-in registry + saved customs (source 'setup')
+  for (const [id, p] of Object.entries(providers)) {
+    if (!p || p.category === 'bootstrap') continue;
+    const tier = categoryToTier(p.category);
+    const keyEnv = p.requiresKey || null;
+    const key = credentials.resolve(p, settingsFor(id), env);
+    const isLocal = p.category === 'free_local';
+    const modelCount = (p.endpoints && p.endpoints.length) || 1;
+    byId.set(id, {
+      id,
+      name: p.name || id,
+      source: p.source === 'setup' ? 'setup' : 'builtin',
+      category: p.category,
+      tier,
+      keyEnv,
+      requiresKey: !!keyEnv,
+      configured: !!(config.providers && config.providers[id]) || p.source === 'setup',
+      hasKey: !!key,
+      modelCount,
+      hasFreeModels: tier === 'keyless' || tier === 'local',
+      doc: p.signupUrl || null,
+      signupUrl: p.signupUrl || null,
+      baseUrl: baseOfBuiltIn(p),
+      local: isLocal,
+      localUp: isLocal ? (opts.probeLocal === true || (Array.isArray(opts.localModels) && opts.localModels.length > 0)) : null,
+      verification: p.source === 'setup' ? 'Saved connection; account access is yours to verify.' : 'Built-in route; free tier / keyless as labelled.',
+      _models: null,
+      variants: variantsFor({ requiresKey: !!keyEnv, keyEnv, tier, modelCount, freeTier: p.freeTier })
+    });
+  }
+
+  // 2) community directory profiles
+  const merged = new Set();
+  for (const profile of directory.list()) {
+    const base = baseOfProfile(profile);
+    // Merge a keyed directory twin into a matching keyless built-in as a variant
+    // (e.g. ovh + ovhcloud, agnes + agnes). Key on identical base URL.
+    if (base && profile.env && !profile.local) {
+      for (const existing of byId.values()) {
+        if (!existing.requiresKey && existing.baseUrl && existing.baseUrl === base) {
+          const models = (profile.models || []);
+          existing.variants.push({
+            label: 'API key (' + (profile.env || 'key') + ')',
+            tier: 'paid',
+            requiresKey: true,
+            keyEnv: profile.env || null,
+            note: 'Authenticated account access; uses account credits / pricing.',
+            modelCount: models.length,
+            profileId: profile.id
+          });
+          existing.hasPaidVariant = true;
+          existing._models = models;
+          if (!existing.doc) existing.doc = profile.doc;
+          merged.add(profile.id);
+          break;
+        }
+      }
+    }
+    if (merged.has(profile.id)) continue; // folded in as a variant above
+    if (byId.has(profile.id)) {
+      // Same id as a built-in: keep the built-in entry, but fold in the richer
+      // directory model list + doc so the picker can search/filter models.
+      const existing = byId.get(profile.id);
+      const models = (profile.models || []);
+      existing._models = models.length ? models : existing._models;
+      if (models.length) existing.modelCount = models.length;
+      if (models.some(m => m && m.zeroTokenPrice)) existing.hasFreeModels = true;
+      if (profile.doc && !existing.doc) existing.doc = profile.doc;
+      continue;
+    }
+    const keyEnv = profile.env || null;
+    const tier = profile.local ? 'local' : (keyEnv ? 'configured' : 'keyless');
+    const models = (profile.models || []);
+    byId.set(profile.id, {
+      id: profile.id,
+      name: profile.name || profile.id,
+      source: 'directory',
+      category: profile.local ? 'free_local' : (keyEnv ? 'configured' : 'keyless'),
+      tier,
+      keyEnv,
+      requiresKey: !!keyEnv && !profile.local,
+      configured: !!(config.providers && config.providers[profile.id]),
+      hasKey: keyEnv ? !!credentials.resolve({ requiresKey: keyEnv }, settingsFor(profile.id), env) : false,
+      modelCount: models.length,
+      hasFreeModels: models.some(m => m && m.zeroTokenPrice) || !!profile.local,
+      doc: profile.doc || null,
+      signupUrl: null,
+      baseUrl: base,
+      local: !!profile.local,
+      localUp: profile.local ? (opts.probeLocal === true || (Array.isArray(opts.localModels) && opts.localModels.length > 0)) : null,
+      verification: profile.verification || 'community-listed; authenticated access not independently verified',
+      _models: models,
+      variants: variantsFor({
+        requiresKey: !!keyEnv && !profile.local,
+        keyEnv: profile.local ? null : keyEnv,
+        tier: profile.local ? 'local' : (keyEnv ? 'paid' : 'keyless'),
+        modelCount: models.length,
+        freeTier: profile.local ? 'Local server.' : undefined,
+        pricedModels: models.some(m => m && (m.inputPrice || m.outputPrice))
+      })
+    });
+  }
+
+  const entries = [...byId.values()];
+  // Stable, useful ordering: by tier (free/keyless/local first), then name.
+  const tierRank = Object.fromEntries(TIERS.map((t, i) => [t, i]));
+  entries.sort((a, b) => ((tierRank[a.tier] ?? 99) - (tierRank[b.tier] ?? 99)) || a.name.localeCompare(b.name));
+  return entries;
+}
+
+/**
+ * Filter catalog entries.
+ * @param {Array} entries
+ * @param {object} [f]
+ *   @param {string} [f.query]   case-insensitive match on id/name/model ids
+ *   @param {string} [f.tier]    one of TIERS
+ *   @param {boolean}[f.configured] only configured
+ *   @param {boolean}[f.hasKey]  only those with a resolvable key
+ *   @param {boolean}[f.free]    only free/keyless/local tiers
+ */
+function filter(entries, f = {}) {
+  const q = String(f.query || '').toLowerCase();
+  const freeTiers = new Set(['free', 'keyless', 'local']);
+  return entries.filter(e => {
+    if (f.tier && e.tier !== f.tier) return false;
+    if (f.free && !freeTiers.has(e.tier)) return false;
+    if (f.configured && !e.configured) return false;
+    if (f.hasKey && !e.hasKey) return false;
+    if (q) {
+      const models = (e._models || []).map(m => m && m.id).join(' ');
+      const hay = (e.id + ' ' + e.name + ' ' + (e.keyEnv || '') + ' ' + models).toLowerCase();
+      if (!hay.includes(q)) return false;
+    }
+    return true;
+  });
+}
+
+/** Find an entry by exact id or case-insensitive id/name. */
+function find(entries, idOrName) {
+  const q = String(idOrName || '').toLowerCase();
+  if (!q) return null;
+  return entries.find(e => e.id === q) || entries.find(e => e.id.toLowerCase() === q) ||
+    entries.find(e => e.name.toLowerCase() === q) || null;
+}
+
+module.exports = { all, filter, find, TIERS, categoryToTier, variantsFor };

package/provider-connect.js

@@ -0,0 +1,66 @@
+'use strict';
+const crypto=require('crypto'),{spawn}=require('child_process');
+function endpoint(original,settings={}){const ep={...original},model=settings.model;if(model){const body=ep.body;ep.body=(key,messages)=>{const data=JSON.parse(body(key,messages));if(Object.hasOwn(data,'model'))data.model=model;return JSON.stringify(data);};const url=ep.url;ep.url=key=>{let value=typeof url==='function'?url(key):url;if(/generativelanguage\.googleapis\.com/.test(value))value=value.replace(/\/models\/[^:]+:generateContent/,'/models/'+encodeURIComponent(model.replace(/^models\//,''))+':generateContent');if(/api\.cloudflare\.com/.test(value)){if(settings.accountId)value=value.replace(/\/accounts\/[^/]*/,'/accounts/'+encodeURIComponent(settings.accountId));value=value.replace(/\/ai\/run\/.*/,'/ai/run/'+model);}return value;};}return ep;}
+function url(value){const u=new URL(value);if(u.username||u.password||u.search||u.hash)throw Error('Use a base URL without credentials, query parameters or fragments.');if(u.protocol!=='https:'&&!(u.protocol==='http:'&&['localhost','127.0.0.1','[::1]'].includes(u.hostname)))throw Error('Use HTTPS, or HTTP for a local server.');return u.href.replace(/\/$/,'');}
+function loadConnections(config,options={}){const out={};for(const [id,c]of Object.entries(config.connections||{})){try{if(!/^[a-z][a-z0-9_-]{1,39}$/.test(id))continue;const base=url(c.baseUrl);if(c.local&&!['localhost','127.0.0.1','[::1]'].includes(new URL(base).hostname))continue;const entry={name:String(c.name||id),source:'setup',credentialScope:options.scope||'user',category:c.local?'free_local':c.auth==='none'?'keyless':'configured',requiresKey:c.auth==='none'?null:(/^[A-Z_][A-Z0-9_]*$/.test(c.keyEnv||'')?c.keyEnv:'CHODE_'+id.toUpperCase()+'_KEY'),endpoints:[{type:'chat',url:base+'/chat/completions',headers:key=>({'Content-Type':'application/json',...(c.auth==='none'?{}:{Authorization:'Bearer '+key})}),body:(key,messages)=>JSON.stringify({model:c.model,messages,max_tokens:4096}),parse:data=>data.choices?.[0]?.message?.content}]};if(options.scope==='project'){entry.requiresKey=c.auth==='none'?null:'CHODE_'+id.toUpperCase()+'_KEY';const loopback=['localhost','127.0.0.1','[::1]'].includes(new URL(base).hostname);entry.needsConfirmation=!(typeof config.providers?.[id]?.key==='string'&&config.providers[id].key)&&!(c.auth==='none'&&loopback);}if(!require('./provider-policy').isRetired(id,entry))out[id]=entry;}catch{}}return out;}
+function openBrowser(link){const args=process.platform==='win32'?['rundll32.exe',['url.dll,FileProtocolHandler',link]]:process.platform==='darwin'?['open',[link]]:['xdg-open',[link]];try{const child=spawn(...args,{windowsHide:true,stdio:'ignore'});child.on('error',()=>{});child.unref();}catch{}}
+const {request}=require('./provider-request');
+function choice(value,items){const n=Number(value);return Number.isInteger(n)&&n>=1&&n<=items.length?items[n-1]:items.find(x=>String(x).toLowerCase()===String(value).toLowerCase());}
+async function run(engine,options={}){const ask=options.ask,notice=options.notice||(()=>{}),fetcher=options.fetch||fetch,signal=options.signal;async function prompt(title,extra={}){if(signal?.aborted)throw Error('Setup cancelled.');const result=await ask({title,...extra});if(result==null||signal?.aborted)throw Error('Setup cancelled.');return String(result).trim();}async function pick(title,items){for(let i=0;i<3;i++){const found=choice(await prompt(title,{options:items}),items);if(found)return found;notice('Choose a listed number or name.');}throw Error('No selection made.');}
+ const cfg=engine.loadConfig(true),wasFree=engine.defaultFreeMode?.(),ids=Object.keys(engine.PROVIDERS),directory=require('./provider-directory');let idInput=options.provider;
+ if(!idInput){let page=0,query='',entries;for(let attempt=0;attempt<40;attempt++){entries=[...new Set([...ids,...directory.list(query).map(p=>p.id)])].filter(id=>!query||(id+' '+(engine.PROVIDERS[id]?.name||directory.find(id)?.name||'')).toLowerCase().includes(query));const pageItems=entries.slice(page*15,(page+1)*15);const value=await prompt('Connect a provider (page '+(page+1)+'/'+Math.max(1,Math.ceil(entries.length/15))+'). Enter an ID/name, next, previous, search <text>, or custom.',{options:[...pageItems,'custom']});if(value.toLowerCase()==='next'){if((page+1)*15<entries.length)page++;else notice('No more providers.');continue;}if(value.toLowerCase()==='previous'){page=Math.max(0,page-1);continue;}if(/^search(?:\s|$)/i.test(value)){query=value.slice(6).trim();page=0;continue;}idInput=choice(value,[...pageItems,'custom'])||value;break;}}
+ let id=choice(idInput,[...ids,'custom']);let profile=null;const dirProfile=directory.find(idInput);const exactDirId=!!(dirProfile&&dirProfile.id.toLowerCase()===String(idInput).toLowerCase());if(!id){if(exactDirId){id=dirProfile.id;profile=dirProfile;}else{const matches=ids.filter(key=>engine.PROVIDERS[key].name.split('(')[0].trim().toLowerCase()===String(idInput).toLowerCase());if(matches.length===1)id=matches[0];else if(dirProfile){id=dirProfile.id;profile=dirProfile;}}}if(!id)throw Error('Unknown provider. Use search <name> in /connect, or choose custom.');let provider=engine.PROVIDERS[id],connection=null,settings={},key='';
+ if(profile){const consent=await pick('Connect '+profile.name+'? Endpoint: '+profile.baseUrl+'. '+(profile.local?'Requires your running local server and installed model; API key authentication is not enabled in this preset.':'Key environment: '+profile.env+'. Community catalog, not an authenticated verification. Free pricing does not guarantee free account access.')+' Review '+profile.doc,['Continue to setup','Cancel']);if(consent==='Cancel')throw Error('Setup cancelled.');connection=directory.connection(profile);provider=loadConnections({connections:{[id]:connection}})[id];if(!provider)throw Error('Provider profile is unsupported.');}
+
+ if(id==='custom'){id=(await prompt('Provider ID (lowercase letters, numbers, hyphens; e.g. my-server)')).toLowerCase();if(!/^[a-z][a-z0-9_-]{1,39}$/.test(id)||engine.PROVIDERS[id])throw Error('Choose a new provider ID with 2–40 characters.');connection={name:await prompt('Display name'),baseUrl:url(await prompt('OpenAI-compatible API base URL, including /v1 if required')),auth:await pick('Authentication',['API key','No key (local or public endpoint)']),model:'default'};connection.auth=connection.auth==='API key'?'bearer':'none';provider=loadConnections({connections:{[id]:connection}})[id];if(!provider)throw Error('This provider is unavailable or permanently retired.');}
+ if(provider?.needsConfirmation){const confirmed=await pick('Confirm this project connection before using account credentials: '+provider.endpoints[0].url,['Continue to setup','Cancel']);if(confirmed==='Cancel')throw Error('Setup cancelled.');connection={...cfg.connections[id]};}
+ const saved=engine.loadProviderSettings?engine.loadProviderSettings(id,true):(cfg.providers?.[id]||{});settings={...saved};
+ if(provider.requiresKey){const methods=[...(require('./provider-credentials').resolve(provider,saved)?['Use existing key']:[]),'Paste API key',...(id==='openrouter'?['Browser login (OAuth PKCE)']:[])];const method=methods.length===1?methods[0]:await pick('How would you like to connect?',methods);if(method==='Use existing key')key=require('./provider-credentials').resolve(provider,saved);
+ else if(method==='Paste API key')key=await prompt('Paste API key. Input is hidden and never added to chat history.',{secret:true});
+ else{const verifier=crypto.randomBytes(48).toString('base64url'),challenge=crypto.createHash('sha256').update(verifier).digest('base64url'),auth=new URL('https://openrouter.ai/auth');auth.searchParams.set('code_challenge',challenge);auth.searchParams.set('code_challenge_method','S256');auth.searchParams.set('key_label','Chode');notice('Open this URL to sign in and authorize Chode. Works from SSH too:\n'+auth.href);(options.open||openBrowser)(auth.href);const code=await prompt('After authorizing, paste the single-use authorization code shown by OpenRouter.',{secret:true});const response=await request(fetcher,'https://openrouter.ai/api/v1/auth/keys',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({code,code_verifier:verifier,code_challenge_method:'S256'})},signal);if(!response.ok)throw Error('Browser login failed or expired. Restart /connect; no credentials were saved.');const data=await response.json();key=data.key;}
+ key=require('./provider-credentials').normalize(key);settings.key=key;settings.keySource='setup';
+ }
+ if(id==='cloudflare'){settings.accountId=await prompt('Cloudflare account ID (not the API token)');if(!/^[a-zA-Z0-9_-]{1,128}$/.test(settings.accountId))throw Error('Invalid account ID.');}
+ let ep=endpoint(provider.endpoints[0],settings),defaultModel='';try{defaultModel=JSON.parse(ep.body(key,[])).model||'';}catch{}if(!defaultModel){const value=typeof ep.url==='function'?ep.url(key):ep.url;defaultModel=(/\/models\/([^:]+):/.exec(value)||/\/ai\/run\/(.+)$/.exec(value)||[])[1]||'';}
+ let models=profile?directory.models(profile):[],discoveryAttempted=false;try{let target=typeof ep.url==='function'?ep.url(key):ep.url;if(/\/chat\/completions$/.test(target))target=target.replace(/\/chat\/completions$/,'/models');else if(id==='ollama')target=target.replace(/\/api\/chat$/,'/api/tags');else target=null;if(target){discoveryAttempted=true;const response=await request(fetcher,target,{headers:ep.headers(key)},signal);if(response.ok){const data=await response.json();const discovered=require('./model-catalog').normalize(data,{local:id==='ollama'||!!profile?.local});if(discovered.length)models=discovered;}}}catch{if(signal?.aborted)throw Error('Setup cancelled.');notice('Model discovery unavailable. Enter a model ID manually.');}
+  if(discoveryAttempted&&!models.length)notice('Model list came back empty. Enter the exact model ID manually.');
+ if(models.length)notice('Model metadata is reported by the provider, not a quality benchmark. Listed zero prices do not remove account limits; changing models does not reset shared quotas.');
+ let model=await require('./model-catalog').select(models,defaultModel,prompt,notice);settings.model=model;if(connection)connection.model=model;ep=endpoint(provider.endpoints[0],settings);
+ const action=await pick('Check this connection? A test sends a small model request and may use provider credits.',['Test connection','Save without testing','Cancel']);if(action==='Cancel')throw Error('Setup cancelled.');let tested=false,testFailure=null;if(action==='Test connection'){for(let attempt=0;attempt<3;attempt++){try{const data=JSON.parse(ep.body(key,[{role:'user',content:'Reply with OK.'}]));if(data.max_tokens)data.max_tokens=16;if(data.generationConfig)data.generationConfig.maxOutputTokens=16;const response=await request(fetcher,typeof ep.url==='function'?ep.url(key):ep.url,{method:'POST',headers:ep.headers(key),body:JSON.stringify(data)},signal);const payload=await response.json();if(!response.ok){testFailure=require('./provider-errors').classify(response.status,payload);throw Object.assign(Error('HTTP '+response.status+': '+testFailure.message),{providerFailure:testFailure});}if(!ep.parse(payload))throw Error('Empty model response');tested=true;testFailure=null;break;}catch(err){if(signal?.aborted)throw Error('Setup cancelled.');if(err.providerFailure&&['quota','permission','model'].includes(err.providerFailure.category)){notice(err.message);const next=await pick('The connection is not ready. How should setup continue?',['Choose another model','Save without a successful test','Cancel']);if(next==='Cancel')throw Error('Setup cancelled; no settings or credentials were saved.');if(next==='Save without a successful test')break;if(attempt===2)throw Error('Model test limit reached. No settings saved.');model=await require('./model-catalog').select(models,model,prompt,notice);settings.model=model;if(connection)connection.model=model;ep=endpoint(provider.endpoints[0],settings);continue;}const clean=String(err.message||'unknown error').split(key||'\0').join('[redacted]');throw Error('Connection test failed ('+clean+'). No settings or credentials were saved. Check the key, model and provider access, then reconnect.');}}}
+
+ const save=await pick('Save '+provider.name+' / '+model+' locally? API keys are stored unencrypted in local config, with restricted file permissions where supported; they never enter chat or exports.',['Save and select provider (leave strict free mode if a key is required)','Save only','Cancel']);if(save==='Cancel')throw Error('Setup cancelled.');cfg.providers=cfg.providers||{};const shared=options.scope!=='project'&&typeof engine.saveProviderSettings==='function';if(shared){engine.saveProviderSettings(id,settings,connection);const metadata={...settings,keySource:'global'};delete metadata.key;cfg.providers[id]=metadata;notice('Credentials saved for your user account across workspaces; project config contains no copied API key.');}else cfg.providers[id]=settings;if(connection){cfg.connections=cfg.connections||{};cfg.connections[id]=connection;}if(signal?.aborted)throw Error('Setup cancelled.');if(save.startsWith('Save and select')){cfg.defaultProvider=id;cfg.freeOnly=require('./provider-capacity').free(provider);}else if(cfg.freeOnly===undefined&&typeof wasFree==='boolean')cfg.freeOnly=wasFree;engine.saveConfig(cfg);engine.reloadConnections?.();engine.clearAuthFailure?.(id);notice('Saved '+provider.name+' / '+model+(tested?' · connection tested.':testFailure?' · test failed: '+testFailure.category+'; not ready.':' · not tested.'));return {provider:id,model,tested,testFailure,select:save.startsWith('Save and select'),freeOnly:require('./provider-capacity').free(provider)};
+}
+async function cli(engine,id,opts={}){
+  const input=opts.input||process.stdin,output=opts.output||process.stderr;
+  if(!input.isTTY||!output.isTTY)throw Error('Provider setup requires an interactive terminal. Run chode connect, or /connect inside Chode.');
+  const {Writable}=require('stream');
+  const ask=q=>new Promise((resolve,reject)=>{output.write('\n'+q.title+'\n'+(q.options||[]).map((x,i)=>(i+1)+'. '+x+'\n').join('')+'› ');const out=new Writable({write(chunk,enc,done){if(!q.secret)output.write(chunk);done();}});out.isTTY=true;out.columns=output.columns||80;const rl=require('readline').createInterface({input:input,output:out,terminal:true,historySize:0});let settled=false;rl.on('SIGINT',()=>{settled=true;rl.close();resolve(null);});rl.on('close',()=>{if(!settled)resolve(null);});rl.question('',answer=>{settled=true;rl.close();if(q.secret)output.write('\n');resolve(answer);});});
+  const notice=text=>output.write(text+'\n');
+  const catalog=require('./provider-catalog');const picker=require('./provider-picker');
+  let entries=[];try{entries=catalog.all(engine,{env:process.env});}catch(e){}
+  let providerId=id,variantIndex=0;
+  if(!providerId){
+    const sel=await picker.select(input,output,{entries});
+    if(!sel){notice('No provider selected.');return {cancelled:true};}
+    providerId=sel.id;variantIndex=sel.variantIndex;
+  }else{
+    const entry=catalog.find(entries,providerId);
+    if(entry&&entry.variants.length>1){
+      const labels=entry.variants.map((v,i)=>v.label+(v.note?' — '+v.note:''));
+      const ans=await ask({title:'Select '+entry.name+' access mode:',options:labels});
+      const n=Number(ans);variantIndex=(Number.isInteger(n)&&n>=1&&n<=entry.variants.length)?n-1:0;
+    }
+  }
+  const wizardId=resolveWizardId(entries,providerId,variantIndex);
+  return run(engine,{provider:wizardId,ask,notice});}
+// Map a catalog selection (provider id + variant index) to the concrete
+// provider id the setup wizard should run against. A keyed "variant" that came
+// from a merged directory twin (e.g. OVH paid -> ovhcloud) routes to that
+// profile; everything else uses the id as-is.
+function resolveWizardId(entries, providerId, variantIndex = 0) {
+  const catalog = require('./provider-catalog');
+  const entry = catalog.find(entries || [], providerId);
+  const variant = entry && entry.variants[variantIndex];
+  return (variant && variant.profileId) ? variant.profileId : providerId;
+}
+module.exports={run,cli,endpoint,loadConnections,url,resolveWizardId};

package/provider-credentials.js

@@ -0,0 +1,5 @@
+'use strict';
+function environment(provider,env=process.env){for(const name of [provider?.requiresKey,...(provider?.keyAliases||[])])if(name&&typeof env[name]==='string'&&env[name].trim())return env[name].trim();return null;}
+function resolve(provider,settings={},env=process.env){if(!provider?.requiresKey)return null;return settings.keySource==='setup'&&settings.key?settings.key:environment(provider,env)||settings.key||null;}
+function normalize(value){const key=String(value||'').trim().replace(/^(?:Authorization:\s*)?Bearer\s+/i,'');if(!key||key.length>4096||/[\s\x00-\x1f\x7f]/.test(key))throw Error('Paste only the API key, without quotes or additional header text. Nothing was saved.');return key;}
+module.exports={environment,resolve,normalize};

package/provider-directory.js

@@ -0,0 +1,8 @@
+'use strict';
+const data=require('./provider-directory.json');
+function list(query=''){const q=String(query).toLowerCase();return data.profiles.filter(p=>!q||(p.id+' '+p.name+' '+p.models.map(m=>m.id).join(' ')).toLowerCase().includes(q));}
+function find(id){const q=String(id||'').toLowerCase();return data.profiles.find(p=>p.id===q||p.name.toLowerCase()===q);}
+function connection(p){return {name:p.name,baseUrl:p.baseUrl,auth:p.local?'none':'bearer',local:!!p.local,keyEnv:p.env,model:p.models[0]?.id||'',directoryId:p.id};}
+function models(p){return p.models.map(m=>({id:m.id,zeroTokenPrice:m.zeroTokenPrice,local:false,tools:m.tools,structured:false,context:m.context}));}
+function summary(query,providers={}){const q=String(query||'').toLowerCase(),built=Object.entries(providers).filter(([id,p])=>!q||(id+' '+p.name).toLowerCase().includes(q)).map(([id,p])=>({id,name:p.name,builtIn:true,local:p.category==='free_local',listedZeroPrice:false,verification:'Configured/built-in route; test account and model access',doc:p.signupUrl}));return built.concat(list(query).filter(p=>!providers[p.id]).map(p=>({id:p.id,name:p.name,baseUrl:p.baseUrl,keyEnv:p.env,models:p.models.length,listedZeroPrice:p.models.some(m=>m.zeroTokenPrice),local:!!p.local,verification:p.verification,doc:p.doc})));}
+module.exports={list,find,connection,models,summary,metadata:()=>({source:data.source,retrievedAt:data.retrievedAt,sha256:data.sourceSha256})};